
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json)
Hash identifier: oRhUM0wPs0fUCpWbaH+9i3IAI2B1iBUKY6XxqoEVrAw=
Subject key identifier: 8D:03:54:C4:64:BE:86:55:14:F2:37:72:61:88:17:C2:8F:C6:00:47
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
Manifest number: 036F
Signing time: Sun 01 Mar 2026 03:18:33 +0000
Manifest this update: Sun 01 Mar 2026 03:18:32 +0000
Manifest next update: Sun 08 Mar 2026 03:18:32 +0000
Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: 8CcIez4CbgCTqQu8S+dRBDRaFUPlX/nmmse206AmK/I=)
2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Validity
Not Before: Mar 1 03:18:32 2026 GMT
Not After : Mar 8 03:18:32 2026 GMT
Subject: CN=69a3b009-d2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:40:e0:ec:ea:23:50:66:86:b2:56:a0:57:
33:91:a4:6a:15:04:88:27:30:89:85:64:63:e6:ea:
b6:96:4a:8f:67:a0:6c:d4:07:c9:28:a5:57:cf:ad:
60:30:f8:6e:b9:49:ad:be:0c:cb:02:43:8d:46:ab:
6b:8e:f5:70:26:e4:85:6a:12:67:05:5f:f7:db:74:
2d:ea:37:f5:39:90:e8:8b:e1:97:eb:71:f7:df:3e:
fd:03:8c:1f:de:fe:ba:9e:48:cc:9f:8c:62:c0:b9:
cb:fe:29:a8:2d:b9:36:50:44:98:69:01:78:6a:26:
ef:9a:65:44:2a:3b:06:8d:67:3f:92:73:bc:77:3b:
f8:0d:57:dd:87:ec:e3:f8:ad:82:1a:59:5a:2a:c0:
4e:b6:96:56:98:80:57:d0:9d:46:d4:c2:bb:8a:8d:
ef:6f:27:9f:91:00:77:d1:07:8f:be:eb:ef:b5:c7:
b3:d0:19:66:87:b3:4e:44:a3:4f:7f:d5:e8:35:84:
8a:d6:4f:dd:43:ac:33:4d:c6:58:12:29:c6:70:10:
10:eb:af:a1:86:f0:f8:6d:78:e0:1f:ea:76:18:91:
6c:0b:38:97:9e:cf:07:71:36:db:9c:98:6e:37:96:
1f:6a:56:30:bd:6d:fc:69:fc:37:dc:57:03:98:54:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:54:C4:64:BE:86:55:14:F2:37:72:61:88:17:C2:8F:C6:00:47
X509v3 Authority Key Identifier:
keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:d6:1e:c9:4f:6f:bf:b6:6f:82:f3:e3:49:51:59:38:ea:
cd:78:0b:e6:21:47:ac:25:b7:fb:71:96:7f:8f:7c:b6:30:d0:
cb:ce:bd:ad:15:81:f9:54:29:a4:a6:28:ca:31:d1:21:39:e8:
63:24:02:36:8e:a5:9b:5e:9d:e6:56:1e:27:96:ac:c0:ca:52:
8a:5f:c7:17:f0:78:c9:39:64:02:09:1e:36:9e:8e:79:14:8f:
48:8b:20:69:6d:09:96:33:db:8b:9a:ee:0d:3c:66:79:e4:a7:
07:71:21:e7:02:63:b3:6a:01:05:a9:4c:9d:f0:3a:cd:9f:c2:
12:e0:f4:bb:6d:62:74:37:76:43:32:e9:f0:2c:da:fe:f1:c2:
53:d3:b2:29:80:b0:6f:fb:90:c4:66:e1:c9:00:55:25:ba:ae:
85:f6:3b:db:aa:42:3f:72:5e:ee:5c:4c:64:88:bf:42:dd:8f:
60:c7:d0:aa:5c:45:15:89:00:fc:3e:25:2b:dd:34:74:52:0a:
fc:d6:66:40:a9:31:69:14:92:82:da:da:8c:1e:17:6f:79:1b:
6d:0c:cf:60:01:25:14:3b:e1:10:63:46:ef:87:14:e9:cb:a9:
14:e0:51:5f:ef:55:4d:fd:66:37:da:fd:ed:06:0c:3f:e5:97:
68:de:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:11 2026 by rpki-client