
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier: HApYn7W7aRjjLR8cCoNVyrwb7yVG8Tus1dlv5v17pv4=
Subject key identifier: A0:33:96:95:EA:84:41:4B:0E:60:1F:09:11:2A:39:FA:CA:79:2A:B7
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial: 121D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number: 120F
Signing time: Fri 12 Jun 2026 17:06:29 +0000
Manifest this update: Fri 12 Jun 2026 17:06:29 +0000
Manifest next update: Fri 19 Jun 2026 17:06:29 +0000
Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: nuDzrJV7WbedO6+3ywCOI+FEPu+18E9/D3jUhaDAvwU=)
2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Validity
Not Before: Jun 12 17:06:29 2026 GMT
Not After : Jun 19 17:06:29 2026 GMT
Subject: CN=6a2c3c95-bae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:c1:10:ab:6a:22:69:bf:56:de:30:ad:e2:
1e:21:49:7f:e6:37:95:37:24:35:a6:7e:cc:9a:8a:
40:94:f5:82:c1:07:ff:e7:c6:10:3d:28:7d:02:a4:
b4:6d:2a:91:61:7c:f6:b4:6a:72:0f:fc:11:71:1f:
90:83:12:3e:cd:2c:7c:67:15:25:ee:ff:4b:37:cf:
71:5f:6c:db:51:33:90:4a:ba:a6:02:8d:22:23:59:
bf:05:b2:2d:eb:9b:99:7f:4e:69:0c:27:09:bb:4a:
4c:88:ae:59:c3:cd:55:04:3e:36:3f:ee:db:63:d6:
18:25:fa:07:95:36:14:25:b6:63:a2:14:1e:c6:e3:
6f:84:8c:67:75:73:59:17:33:ae:83:04:b6:d7:c9:
e0:53:e0:f6:33:b8:9e:21:2a:d6:83:e8:d6:3a:dc:
38:20:ce:55:06:7b:44:90:10:e6:37:98:9b:49:0c:
d1:b1:46:69:b4:ef:c3:cb:e4:20:be:bb:4f:2d:43:
85:04:c0:a7:e6:b5:c9:4f:83:c8:14:a3:0f:9d:cc:
cb:8a:e2:f1:b5:bf:ae:07:14:54:c3:53:d8:9e:3e:
20:57:71:1b:3e:53:89:af:3a:32:24:3a:53:35:9a:
a8:c7:05:79:50:0d:fc:ce:8f:45:3b:e8:13:d2:2a:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:96:95:EA:84:41:4B:0E:60:1F:09:11:2A:39:FA:CA:79:2A:B7
X509v3 Authority Key Identifier:
keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:0f:ff:15:19:ea:f9:d7:ec:0a:82:ad:a1:39:83:68:14:
8e:2d:84:d7:ab:8c:da:5a:75:e9:22:05:5a:79:d9:4d:ed:13:
35:86:a5:d1:4e:4c:02:77:8a:74:d6:65:2d:ec:38:1f:56:c3:
63:6e:61:92:87:59:86:72:0c:94:28:43:cb:56:53:c3:29:c5:
7e:00:8e:9a:20:5b:f2:65:f1:0f:c8:2f:0e:b7:13:c5:5a:1f:
70:0e:da:1c:7a:24:91:12:d0:92:1e:f3:f3:7b:6d:9a:f2:fd:
6c:04:7e:32:dd:14:1c:96:61:3f:49:64:e1:26:bd:da:41:6a:
53:67:c1:cb:38:b9:c4:fd:56:ef:d0:ca:f2:91:82:9a:c2:1d:
b6:27:ff:3e:22:60:f8:37:ee:b8:a0:ff:98:57:d7:2e:8a:38:
b4:3a:7c:3f:c0:69:91:fc:e1:7e:37:20:7a:a7:98:6f:ad:8a:
01:e6:fb:5b:7d:d5:c1:63:ef:50:4b:b6:22:98:40:2f:31:12:
5d:ba:1c:28:82:35:33:b8:47:7e:04:12:74:0e:f4:cf:49:86:
90:ca:03:91:45:2f:c6:ee:01:6c:d5:25:c6:9e:70:97:8d:8e:
e0:27:52:04:d8:76:d5:08:61:71:ec:8b:27:59:68:28:b9:86:
81:6e:f1:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG
N0YyOTVGMzUwHhcNMjYwNjEyMTcwNjI5WhcNMjYwNjE5MTcwNjI5WjAYMRYwFAYD
VQQDEw02YTJjM2M5NS1iYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAljbBEKtqImm/Vt4wreIeIUl/5jeVNyQ1pn7MmopAlPWCwQf/58YQPSh9AqS0
bSqRYXz2tGpyD/wRcR+QgxI+zSx8ZxUl7v9LN89xX2zbUTOQSrqmAo0iI1m/BbIt
65uZf05pDCcJu0pMiK5Zw81VBD42P+7bY9YYJfoHlTYUJbZjohQexuNvhIxndXNZ
FzOugwS218ngU+D2M7ieISrWg+jWOtw4IM5VBntEkBDmN5ibSQzRsUZptO/Dy+Qg
vrtPLUOFBMCn5rXJT4PIFKMPnczLiuLxtb+uBxRUw1PYnj4gV3EbPlOJrzoyJDpT
NZqoxwV5UA38zo9FO+gT0iqv5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAzlpXq
hEFLDmAfCREqOfrKeSq3MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4
RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt
cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvEP/xUZ6vnX7AqCraE5g2gUji2E16uM2lp16SIFWnnZTe0TNYal0U5MAneK
dNZlLew4H1bDY25hkodZhnIMlChDy1ZTwynFfgCOmiBb8mXxD8gvDrcTxVofcA7a
HHokkRLQkh7z83ttmvL9bAR+Mt0UHJZhP0lk4Sa92kFqU2fByzi5xP1W79DK8pGC
msIdtif/PiJg+DfuuKD/mFfXLoo4tDp8P8BpkfzhfjcgeqeYb62KAeb7W33VwWPv
UEu2IphALzESXbocKII1M7hHfgQSdA70z0mGkMoDkUUvxu4BbNUlxp5wl42O4CdS
BNh21QhhceyLJ1loKLmGgW7x3w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:29 2026 by rpki-client