
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier: 5GmUKJHplQ1fSV1kmSYJqlbolsTlQQa/scOZSnFOOt4=
Subject key identifier: 83:A2:48:F6:B3:0B:FF:E5:CB:40:D8:BA:EC:AD:BB:11:CD:F8:0A:DF
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number: 014B
Signing time: Thu 21 May 2026 05:17:22 +0000
Manifest this update: Thu 21 May 2026 05:17:22 +0000
Manifest next update: Thu 28 May 2026 05:17:22 +0000
Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: P5xB4hWCE3xBqpbFyCVJkI8kxvsoVA0XweYThcVzhIk=)
2: CDF591B2457411F1A79BF008B4833773.roa (hash: wwvP6N0iZcxJteZa0vMxZP6scYPHrDTfF4JThPFyUsY=)
3: CE879A58457411F1A79BF008B4833773.roa (hash: FAofXEWNWRLbLUEmI8l44ekM0qZ+AweWVtuPzYnEfd8=)
4: CF137DC0457411F1A79BF008B4833773.roa (hash: 4fmOTfm1xvbXGmcGvEf79mu94zqU9KuHGIqfto8HIsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Validity
Not Before: May 21 05:17:22 2026 GMT
Not After : May 28 05:17:22 2026 GMT
Subject: CN=6a0e9562-63f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:b5:5c:39:51:e8:27:db:d5:9f:ae:b7:e2:
89:80:e2:b8:14:7c:b5:84:ca:58:6b:3d:c7:fc:78:
de:1b:f2:df:d3:58:e4:9a:22:4b:a2:c8:ba:36:1d:
fd:99:05:b8:76:12:9a:79:c4:fc:30:e5:aa:10:73:
54:50:9f:0a:57:f9:90:dd:38:40:ff:d1:65:6f:bb:
72:ec:24:20:2a:20:61:32:0c:f7:ae:18:73:04:fe:
b1:75:c1:1d:0c:d4:dc:22:35:12:e9:67:e1:be:e6:
be:a0:42:bf:65:51:bc:7c:a6:6d:46:5d:a8:d2:80:
d8:dd:1b:0d:e0:d3:89:18:ba:2f:af:62:81:a6:bc:
65:ba:f4:3f:85:a2:47:db:2b:35:af:1a:6d:d9:d9:
7b:e9:f1:de:d8:70:ca:bd:74:fc:c6:ca:9a:51:0e:
44:2c:51:9d:e0:ca:eb:26:d6:11:19:6c:80:27:b0:
72:01:82:66:d8:b4:9d:28:a5:1d:c1:6c:fb:9e:0a:
b9:4f:94:c4:10:50:28:30:2f:68:e0:35:d3:68:2a:
1b:dc:89:92:aa:4c:7e:1c:76:b7:8c:d5:0d:56:40:
ce:5c:25:bc:9a:2b:ff:65:c6:dc:02:95:78:92:c2:
4d:73:2c:18:4a:84:47:3e:67:2e:1c:6f:1d:74:4f:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:48:F6:B3:0B:FF:E5:CB:40:D8:BA:EC:AD:BB:11:CD:F8:0A:DF
X509v3 Authority Key Identifier:
keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:a6:7d:ef:24:9e:11:5b:44:e5:e8:5c:56:3c:06:ea:3c:2b:
24:07:2e:7d:ab:3b:e8:83:1c:30:6c:58:57:42:6d:63:2d:f9:
d8:ff:1b:a4:82:14:a3:92:9c:c2:e8:bd:2d:cf:3a:96:58:76:
b8:44:83:16:1e:8c:88:82:63:1c:8e:f2:60:06:dc:37:c9:de:
d9:f4:cb:52:f6:a1:79:04:91:b1:4a:21:4b:92:82:69:a3:cf:
3b:5a:92:b4:03:61:b3:41:4e:9d:54:c6:99:3e:c4:83:4e:3a:
54:da:fe:96:bc:c6:8f:29:79:07:2d:68:b9:54:73:71:97:01:
1d:a7:3b:64:95:20:dc:f2:2d:41:4d:a1:8b:f1:14:c8:9e:2a:
bc:66:61:92:8b:48:fd:d4:db:6e:87:98:46:82:c6:28:0c:c0:
b7:f1:95:7a:e6:88:dd:71:01:2a:13:32:36:ea:a6:df:c2:27:
25:97:86:7b:39:b9:59:d9:e3:d5:53:fb:9a:57:c5:fd:6c:e0:
a6:32:f3:1b:c5:48:9a:f7:e1:4e:48:b5:21:ac:eb:f0:99:32:
ff:a5:28:d6:6e:33:f3:6b:9c:0b:22:d4:87:aa:e2:71:54:f8:
91:c6:f2:63:25:91:a6:07:95:8f:dd:d0:6a:1c:2d:7d:6d:64:
bf:bf:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:40 2026 by rpki-client