
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier: E0mYPoznUvGJTxAjGETmVxizVcro8gP18DXILk6QKXU=
Subject key identifier: 0F:FB:A2:47:23:28:94:AB:F6:47:3A:F3:6B:34:AB:CE:72:97:AA:44
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial: 1256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number: 1248
Signing time: Fri 02 Oct 2026 17:16:07 +0000
Manifest this update: Fri 02 Oct 2026 17:16:07 +0000
Manifest next update: Fri 09 Oct 2026 17:16:07 +0000
Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: pfQgin8t3iKfX58ydCQE6m4x5cbEcuB4iav2MH+oYX0=)
2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Validity
Not Before: Oct 2 17:16:07 2026 GMT
Not After : Oct 9 17:16:07 2026 GMT
Subject: CN=6abfe6d7-8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:ec:a8:94:aa:14:13:e1:f4:d9:25:f4:24:
91:03:75:db:79:da:49:9a:bb:51:e2:f1:02:bc:11:
06:7c:b7:a5:4e:6c:29:02:aa:fb:f4:23:1b:b7:70:
4e:4d:0a:48:1f:ea:29:0c:28:6f:08:98:44:bd:29:
ab:ae:86:89:89:ad:9e:91:e6:22:e2:d6:89:ef:44:
ca:ab:c5:6e:2a:28:86:6e:a8:7e:a9:60:34:f6:19:
12:53:9c:a1:d7:1b:62:39:8c:94:03:18:ea:26:64:
f3:a4:b6:63:12:74:3c:18:28:17:fc:e9:28:62:1d:
d2:01:05:37:0b:4d:b3:3c:0e:fc:56:7f:6b:68:57:
0e:41:06:31:34:c0:61:06:33:17:81:d6:1e:39:a9:
0d:0c:9e:d0:85:03:d6:6f:e7:03:0f:87:e7:f2:86:
8a:79:1f:d2:f0:81:62:e5:99:12:bb:d2:aa:81:79:
d5:b5:d1:a7:0f:80:38:2c:78:43:87:10:d0:48:d5:
60:b7:ee:fe:8b:3f:a8:b2:93:f5:ab:0e:be:ef:d1:
fb:c1:6f:17:db:e1:2c:a3:97:c5:4e:81:6a:93:cb:
16:0a:6e:bd:c9:49:78:3b:2b:c1:c9:8e:eb:da:4b:
7b:b0:0e:0c:fd:3f:77:b3:a0:8a:b1:88:2d:f8:1d:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FB:A2:47:23:28:94:AB:F6:47:3A:F3:6B:34:AB:CE:72:97:AA:44
X509v3 Authority Key Identifier:
keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:97:c9:93:0f:23:c3:0f:84:be:f6:7e:b6:0e:c1:3d:38:60:
1b:db:08:cf:38:4d:1a:d7:75:41:e0:c2:22:80:7f:50:b9:df:
a2:06:80:3f:ae:f6:a3:ea:8c:09:1a:b0:b3:91:fe:98:67:3b:
94:a5:1e:c2:ec:28:4e:cf:f4:3f:aa:47:db:df:d6:8e:79:e3:
dd:cc:f6:98:2b:f7:b7:47:4d:dd:0e:b4:fe:96:f5:70:f6:1b:
5b:9e:ab:aa:27:06:0b:a0:00:ac:4c:6b:e3:3b:f3:00:d6:34:
76:c9:61:a3:6c:a8:d9:a7:b2:31:89:52:c3:f7:2e:c1:68:6e:
ed:10:36:17:cd:20:3f:27:af:f5:02:18:ac:ea:64:8a:17:39:
54:f4:1c:aa:53:dc:f1:34:1e:98:07:7d:86:22:3e:9d:8c:0d:
27:ba:f4:6f:99:fc:03:2c:26:c7:ab:1a:36:20:d0:da:0d:b3:
fc:a1:a2:a6:43:cc:e7:bc:8a:77:49:5a:05:b1:8e:30:ee:f7:
50:56:b1:5a:7b:93:a2:25:b8:5a:5f:3d:71:0d:2d:85:cf:7e:
36:83:48:58:18:27:34:5f:cb:e7:d8:b9:e8:53:a6:56:62:ea:
d7:c6:ec:cd:32:9b:93:fa:64:e5:aa:bc:2f:cc:b6:86:19:d2:
f9:18:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:20:32 2026 by rpki-client