
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json)
Hash identifier: 3ZlmtUqCtcDO2ekuF5BBGv4dJ/M/IkTnsxpLzNMtVIc=
Subject key identifier: E6:47:65:19:B4:E4:7F:2E:02:D3:78:C6:6C:51:5F:FD:2B:AA:72:6A
Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE
Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE
Certificate serial: 0BC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
Manifest number: 150F
Signing time: Wed 20 May 2026 18:59:43 +0000
Manifest this update: Wed 20 May 2026 18:59:42 +0000
Manifest next update: Wed 27 May 2026 18:59:42 +0000
Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: xgcYAPRwqrynZJvAACmeD9aPIUfaebsF32QQgowTU6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE
Validity
Not Before: May 20 18:59:42 2026 GMT
Not After : May 27 18:59:42 2026 GMT
Subject: CN=6a0e049f-5d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:89:f8:f9:d7:63:98:37:f6:cb:82:2a:f9:
d0:1d:95:0d:fc:b4:36:82:d8:00:07:ce:89:67:07:
93:1d:90:57:38:c8:81:cb:58:4b:75:73:6a:74:0d:
75:e1:88:2a:28:66:3e:61:16:52:15:bd:2e:de:ec:
06:8e:96:c2:c0:4d:3f:6b:e2:c6:0d:3b:71:c7:d5:
77:87:87:83:3f:c0:d7:e7:3e:11:42:0c:b6:f5:e9:
23:9c:52:97:bc:50:ab:16:fe:b6:1a:b0:8a:3a:73:
4d:d9:c3:16:63:9d:bd:b3:a7:fb:fe:dd:38:44:de:
6c:4e:01:31:78:81:64:7f:c6:43:10:5b:1c:06:e6:
dd:6a:19:d6:f5:16:f6:39:0b:01:f2:72:ef:44:46:
cb:56:44:cf:ae:bb:4c:10:5e:76:7b:a0:dc:4f:8a:
a3:9d:f5:d1:7f:52:27:87:a2:f1:d2:f5:81:0d:bf:
b8:45:d7:d5:f5:0a:89:55:cd:26:7c:bd:5f:3f:41:
19:92:23:13:f7:3d:59:26:a3:ec:18:05:d7:08:a9:
6f:40:0a:e8:d7:aa:66:3f:42:66:30:63:3c:bd:ba:
37:2a:dc:b5:d6:74:14:8f:df:6b:70:30:db:f9:9a:
fc:08:d0:d5:38:af:78:95:68:5e:2d:fe:5b:79:0e:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:47:65:19:B4:E4:7F:2E:02:D3:78:C6:6C:51:5F:FD:2B:AA:72:6A
X509v3 Authority Key Identifier:
keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:2a:fb:2b:a7:7d:e9:78:36:48:93:06:db:9e:e2:f2:92:
70:b7:83:f0:05:7e:48:08:6a:24:a3:23:ef:29:cc:28:6d:90:
16:d1:12:43:43:a2:ad:53:dd:58:25:60:09:52:6e:16:af:8a:
a1:a2:65:0d:c6:82:b2:35:58:1b:5c:46:6f:b0:75:c6:d5:dc:
c1:b3:83:80:da:b5:b4:ac:78:f8:c6:62:2d:92:bf:f6:21:2e:
8b:4c:17:6e:5a:6f:7c:b8:18:37:cf:97:a3:84:dd:45:f0:44:
09:f7:72:ba:f3:bd:d3:2b:7c:40:cd:60:f0:1b:b0:fb:6e:26:
b0:99:41:4e:ba:d9:50:e0:62:e7:f5:26:08:ba:de:a7:aa:8f:
f1:db:bf:02:d3:7c:4b:fb:f1:83:ee:dd:fd:fd:47:c6:c0:24:
20:69:ba:27:bd:6b:04:ae:0e:96:00:1c:94:1a:51:cb:af:59:
4b:e4:4c:5c:b6:bf:76:f4:dd:8f:59:3f:2b:39:36:31:17:54:
e7:b2:ab:b4:b1:8a:85:02:50:39:2b:43:f6:63:b6:1e:a8:39:
49:f3:dd:b3:24:53:4c:84:6f:e4:80:c3:75:59:2f:be:cc:7e:
23:73:6b:ff:40:88:73:79:c0:60:bf:e1:e0:23:ef:05:27:68:
5a:c0:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:21 2026 by rpki-client