
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier: GIYWYaJSxQh/sW+jYJmTbfOP9TGGClcBMVsKGSZ72O0=
Subject key identifier: B5:DC:38:AC:DD:7A:5B:F6:BD:28:B0:FC:74:57:F5:74:0A:25:BA:6E
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial: 0659
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number: 063C
Signing time: Sun 26 Apr 2026 22:45:07 +0000
Manifest this update: Sun 26 Apr 2026 22:45:06 +0000
Manifest next update: Sun 03 May 2026 22:45:06 +0000
Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: 4Wb8VA6dWj9mbhW2I9OpSsBrRiyfoDPU+Yp8nGJCidY=)
2: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 145MNVXkN1NCb/lHfvK7TOxcT8rHdAXVTu1hEwZJ0U4=)
3: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: 78ADOvf19erzq2Lml4tYjNVaZ8mjFM61d51drgntiM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Validity
Not Before: Apr 26 22:45:06 2026 GMT
Not After : May 3 22:45:06 2026 GMT
Subject: CN=69ee9572-4a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5b:9e:c8:f5:1b:4a:0e:ad:97:6b:6b:03:f0:
e9:7b:1c:c6:fb:fc:67:54:b6:a9:4a:a5:c3:db:03:
b5:61:5e:29:26:98:3d:a4:dd:a9:cd:b9:e9:da:cd:
d5:ff:7c:0c:15:06:8a:25:af:d4:89:af:35:cc:a0:
0f:c4:db:cc:42:f4:87:33:44:0f:51:e7:b5:1e:a1:
44:e8:24:13:58:e4:4e:76:2d:23:ed:69:8b:35:dd:
7f:32:b4:11:2b:75:da:c8:8e:73:11:ac:d2:12:07:
97:4e:32:cf:84:c7:a5:95:49:d9:5c:ea:4d:0a:bb:
52:b1:7d:e0:e2:da:75:62:2b:fe:76:68:11:26:8b:
cd:70:33:51:8f:f7:d3:ce:1f:c6:22:2f:56:75:c7:
cc:21:3b:90:f9:bd:29:9c:72:c5:d7:7e:52:74:ce:
17:a9:c2:19:b4:8e:35:71:dc:5e:0e:5e:9e:83:0d:
75:40:a6:92:ca:4b:cc:5d:0a:0d:a3:51:c8:78:72:
41:cc:1a:22:c7:b0:76:70:11:a7:97:02:8c:85:bc:
c5:91:9c:3f:e1:22:b9:34:22:7a:a7:07:0c:ab:e6:
c3:69:89:30:bd:9f:22:37:0f:b0:58:48:1f:3c:a8:
22:a4:34:8e:17:20:f4:6e:48:7d:d2:42:88:d5:29:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:38:AC:DD:7A:5B:F6:BD:28:B0:FC:74:57:F5:74:0A:25:BA:6E
X509v3 Authority Key Identifier:
keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:23:5e:c7:63:68:1c:b5:3e:e9:6d:5d:2d:9b:fd:cc:d8:fd:
ee:8d:75:f0:25:4a:15:98:bb:f0:7a:36:8d:8d:aa:a2:ff:a8:
12:d0:d3:21:31:da:f6:30:fe:fe:ea:e2:37:57:c3:94:55:66:
f6:8a:b6:49:2d:02:86:29:7e:7d:18:d4:3d:37:c9:0a:58:0e:
10:e8:ab:e9:3f:cc:34:52:d5:c1:ec:2d:fd:fb:81:18:d5:e9:
98:e9:33:5b:ff:3f:c0:27:f4:06:88:56:98:68:3f:04:bc:00:
3d:a5:9e:75:f8:5c:9a:f7:9e:1b:39:32:f1:7f:9e:fb:66:2f:
ec:5e:cb:12:01:c9:74:0f:76:be:8a:7c:06:b1:8a:7d:6a:d6:
c4:eb:55:36:64:e1:6a:45:21:30:d2:16:68:ce:8d:b8:73:5f:
3e:7e:a0:e0:a8:f1:fd:a3:f1:a2:af:e4:73:f3:4e:d2:cc:4b:
b4:68:a6:5d:1e:86:5c:de:da:d3:22:7b:82:0d:d9:c8:b3:dc:
64:1c:23:57:ab:5d:f4:f7:4b:03:fd:03:b0:8f:0d:35:c5:93:
81:43:af:ad:3c:86:76:02:1e:78:1d:1d:f9:a3:4f:4e:90:4f:
e2:f3:7e:62:0a:ff:1a:eb:66:9e:1f:d0:eb:c2:c0:c4:73:da:
a0:ed:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:07:43 2026 by rpki-client