
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json)
Hash identifier: wShgydSLWWp/jxxmE3AccLUpgPEA+bCEQhLP4RMJ1D0=
Subject key identifier: DD:8E:CA:49:99:65:E1:41:4E:F8:D1:86:52:AE:9B:84:91:A6:8F:0D
Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE
Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE
Certificate serial: 0C0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
Manifest number: 159D
Signing time: Tue 06 Oct 2026 18:58:51 +0000
Manifest this update: Tue 06 Oct 2026 18:58:51 +0000
Manifest next update: Tue 13 Oct 2026 18:58:51 +0000
Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: YG963AqzspnrCnTpm7smQFMvDQdk6ipTk3Oc813wxn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE
Validity
Not Before: Oct 6 18:58:51 2026 GMT
Not After : Oct 13 18:58:51 2026 GMT
Subject: CN=6ac544eb-f12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:e6:1c:a2:44:67:7c:cd:b1:00:60:20:ab:
15:9d:8b:81:8d:e9:c2:b4:81:4b:74:6b:58:2e:f1:
6f:6e:52:16:50:39:56:d5:70:91:fc:fc:b4:df:76:
08:23:f8:06:ba:84:7e:ec:99:57:87:3b:e8:ec:28:
f4:68:61:9e:f2:48:ca:40:62:30:f5:f3:b5:51:3b:
ed:ce:6d:14:85:cc:38:4e:a5:ea:1e:48:f5:36:ff:
47:47:dc:e5:f0:a0:b6:6e:2b:bb:8c:09:f9:25:65:
e8:cf:bf:94:ea:af:c2:71:53:f2:db:3d:da:34:3a:
89:2b:ad:3a:4a:15:af:b1:a2:b9:9a:d3:16:b9:b9:
7b:57:d8:22:a8:49:00:a2:6b:b4:7d:7a:a8:16:fc:
a1:df:3e:48:93:db:d9:ea:38:f1:43:26:a2:14:2f:
e0:45:c2:1c:59:d4:83:1d:0b:4a:b0:94:a2:c2:17:
d8:f6:96:b0:0a:30:74:6f:dc:54:16:39:bc:f6:72:
a2:fc:34:83:14:4f:0d:3e:97:b7:67:26:2d:31:eb:
d0:8c:1a:5b:1f:ff:c4:8a:1b:de:2f:3a:cc:85:3e:
1b:48:4a:10:47:42:2b:39:58:5f:81:4c:d4:16:4d:
56:f3:ef:83:7e:18:76:8a:a3:ca:2b:59:8d:78:11:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:CA:49:99:65:E1:41:4E:F8:D1:86:52:AE:9B:84:91:A6:8F:0D
X509v3 Authority Key Identifier:
keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:c0:99:5b:2d:92:c7:74:0c:81:16:bc:5b:85:29:a9:05:57:
5c:8c:d4:bc:f8:a2:36:1c:38:1d:f6:7b:41:21:c7:47:51:cc:
4c:91:4d:54:bd:39:83:aa:a5:3e:f3:49:c5:02:dc:30:54:69:
35:5c:ff:37:36:3c:55:0a:ff:77:4d:be:a0:4d:84:9c:ad:6e:
90:28:43:ac:c1:9e:40:4f:07:37:3b:ca:cd:19:28:76:99:d7:
af:1c:a6:1e:82:80:d3:72:54:32:f1:ae:3b:5d:c2:57:80:dc:
0a:94:ef:49:35:15:9e:46:84:37:5d:f4:2e:69:82:11:ce:d3:
65:d0:23:82:b4:68:87:de:1d:0d:c6:06:79:81:19:9d:c9:e1:
9f:1f:3a:c9:ba:26:5f:05:91:b5:35:b5:d9:85:8c:c7:c5:a9:
3f:20:32:d6:5d:21:fd:ab:c8:f6:86:f6:98:8f:ea:c5:bc:c4:
3a:dd:1a:78:de:b2:1d:20:78:4f:6c:9b:36:1a:09:0e:eb:b0:
2d:23:72:fc:59:43:7b:fb:e3:06:cf:4a:fa:04:9d:50:28:ae:
89:59:87:2d:25:77:21:08:92:3e:96:40:1d:46:eb:f1:b4:e3:
12:58:65:fe:1c:54:65:3b:08:9b:b5:b7:4b:0e:10:29:8e:98:
bb:87:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:25:50 2026 by rpki-client