
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json)
Hash identifier: 3/FwsQxrSff27H3ZNRRoDh+fqKGI/y4nhH8CBRA3E/A=
Subject key identifier: D7:A6:10:39:51:CB:34:53:A3:9E:71:D9:3A:D3:61:CD:E2:05:B6:BB
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
Manifest number: 0399
Signing time: Sun 05 Apr 2026 01:57:19 +0000
Manifest this update: Sun 05 Apr 2026 01:57:18 +0000
Manifest next update: Sun 12 Apr 2026 01:57:18 +0000
Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: Ts1aOnaUQDDqr4/KWkHztU9O4xedR9Is4VdUjbtEgv0=)
2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: BX1/cO9zvX79RzHkPoO/Bv1wfcEjsD1PNAuyBci9gOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Validity
Not Before: Apr 5 01:57:18 2026 GMT
Not After : Apr 12 01:57:18 2026 GMT
Subject: CN=69d1c17f-82d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:0b:63:a8:ba:ec:d4:e5:e1:27:86:06:20:
19:bc:a0:8d:cf:bf:69:73:68:12:80:57:51:82:ac:
3f:9f:6b:db:23:7c:a6:e8:8f:a7:c9:20:cc:14:9c:
1b:23:a6:7f:2b:d2:68:b4:34:a4:f8:9b:f0:28:e3:
8c:9a:e7:b3:cf:e3:15:4b:af:19:51:80:85:64:e3:
7d:67:ff:06:71:fa:26:ff:63:86:73:1c:29:a5:52:
02:4b:cd:45:07:b6:c8:4b:4f:0f:ce:0b:b0:75:3e:
53:b0:ef:42:ad:ff:89:98:cc:83:7f:41:ef:ef:e7:
a0:78:f1:90:a3:2f:62:3a:dd:07:ba:55:02:ba:39:
eb:a1:13:90:ea:86:3e:c5:93:30:91:e7:45:c6:18:
a5:05:c2:a1:70:c7:9e:52:d8:dc:4a:55:a9:ed:50:
fa:5c:31:2a:4e:23:a5:21:46:14:bc:cd:3c:c3:0a:
b8:55:f7:5b:9a:64:d2:e1:ad:ad:b5:07:52:fb:d0:
42:44:2d:b2:2a:37:29:9e:3d:2f:d3:3e:24:1a:37:
5e:15:5c:dc:0d:4f:f1:87:0d:f5:79:88:dc:27:d8:
4c:ca:70:b9:78:27:04:68:33:30:64:df:2c:69:63:
a7:88:5a:b0:db:93:1a:72:3e:79:76:6e:e2:3c:19:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:10:39:51:CB:34:53:A3:9E:71:D9:3A:D3:61:CD:E2:05:B6:BB
X509v3 Authority Key Identifier:
keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:31:26:a5:83:d4:ae:22:b1:4e:7f:fb:22:d1:5f:c0:03:
18:44:da:6f:4b:d5:fc:07:ac:c9:14:74:97:92:f4:07:d0:06:
03:d0:ae:19:3a:25:a9:2c:10:fa:95:33:7a:95:5a:a6:c9:5d:
fd:24:83:33:e1:40:8a:23:60:69:68:05:d5:42:85:fb:24:51:
dc:b5:37:4f:95:54:22:b5:09:82:24:1e:a6:4e:d3:c9:ca:af:
0d:87:fd:b4:c2:28:c3:84:76:b2:3f:52:93:3f:5b:06:89:ff:
5c:01:e0:41:df:9d:8a:fb:bf:08:5f:14:df:04:7e:dd:9a:23:
76:25:f6:46:53:4b:ec:3c:7c:29:8c:e6:f2:a6:d5:07:2d:84:
8c:17:e5:d5:50:46:3e:62:78:95:0b:85:58:72:d7:88:cf:c2:
e9:20:e4:58:65:d1:4e:41:9f:d0:bd:01:e1:bb:8a:98:12:f7:
0d:12:ef:81:e8:02:9e:31:58:8b:27:66:0d:01:b9:32:16:72:
3a:1a:54:d4:76:82:6f:43:9e:b7:c0:6c:87:5c:3d:b6:ef:33:
8c:fa:5a:e3:8d:ac:70:cd:f1:47:58:1f:2a:e2:a4:fe:1f:30:
b0:cf:5c:d6:b5:cb:93:35:83:70:a6:d2:93:4a:9e:65:07:14:
43:ea:38:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1
RjRGQzAxNTIwHhcNMjYwNDA1MDE1NzE4WhcNMjYwNDEyMDE1NzE4WjAYMRYwFAYD
VQQDEw02OWQxYzE3Zi04MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxC0LY6i67NTl4SeGBiAZvKCNz79pc2gSgFdRgqw/n2vbI3ym6I+nySDMFJwb
I6Z/K9JotDSk+JvwKOOMmuezz+MVS68ZUYCFZON9Z/8Gcfom/2OGcxwppVICS81F
B7bIS08PzguwdT5TsO9Crf+JmMyDf0Hv7+egePGQoy9iOt0HulUCujnroROQ6oY+
xZMwkedFxhilBcKhcMeeUtjcSlWp7VD6XDEqTiOlIUYUvM08wwq4VfdbmmTS4a2t
tQdS+9BCRC2yKjcpnj0v0z4kGjdeFVzcDU/xhw31eYjcJ9hMynC5eCcEaDMwZN8s
aWOniFqw25Macj55dm7iPBlrPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNemEDlR
yzRTo55x2TrTYc3iBba7MB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0
MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl
WHpxR0FYT0lXbVJmVDhBVkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATf0xJqWD1K4isU5/+yLRX8ADGETab0vV/AesyRR0l5L0B9AGA9CuGTolqSwQ
+pUzepVapsld/SSDM+FAiiNgaWgF1UKF+yRR3LU3T5VUIrUJgiQepk7TycqvDYf9
tMIow4R2sj9Skz9bBon/XAHgQd+divu/CF8U3wR+3ZojdiX2RlNL7Dx8KYzm8qbV
By2EjBfl1VBGPmJ4lQuFWHLXiM/C6SDkWGXRTkGf0L0B4buKmBL3DRLvgegCnjFY
iydmDQG5MhZyOhpU1HaCb0Oet8Bsh1w9tu8zjPpa442scM3xR1gfKuKk/h8wsM9c
1rXLkzWDcKbSk0qeZQcUQ+o4BA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:36 2026 by rpki-client