
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier: R5aphe6yI/tri0YZdpxjH2ksVQfrwSbJH3GM6oaB5zM=
Subject key identifier: 49:EF:65:5B:13:1F:B2:8A:CF:91:86:EA:E9:28:32:28:43:FB:D7:F2
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial: 1234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number: 1226
Signing time: Tue 28 Jul 2026 17:13:38 +0000
Manifest this update: Tue 28 Jul 2026 17:13:37 +0000
Manifest next update: Tue 04 Aug 2026 17:13:37 +0000
Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: NyGooIrcilMjoEjG+nNfmMTS99CYHMI7SMrzK9n/juY=)
2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4660 (0x1234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Validity
Not Before: Jul 28 17:13:37 2026 GMT
Not After : Aug 4 17:13:37 2026 GMT
Subject: CN=6a68e342-91d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:f8:e5:05:14:65:ce:e8:0b:6b:79:b7:c6:
f5:8d:72:fe:32:f0:0f:93:36:aa:32:12:d6:35:bd:
19:ed:06:85:dc:dd:97:1d:74:2d:63:f9:76:5a:1b:
31:32:f9:08:10:0e:cb:a1:0e:dd:49:cb:85:f0:c4:
c2:10:9c:41:d6:6d:bd:72:1a:cb:dd:af:83:bc:9e:
44:2e:33:68:e9:ef:96:97:a0:fb:9b:a1:0d:15:11:
bf:58:39:6c:6f:6f:ce:df:9a:13:97:64:a1:06:e4:
7c:a6:81:02:18:0a:bb:54:ac:6f:2f:64:01:81:a0:
6d:b9:8b:2e:5a:c3:de:fc:e2:87:8a:a7:77:23:8b:
91:b6:74:07:8e:51:42:09:ab:06:9b:b4:82:76:45:
e2:0a:f7:a3:62:36:1d:dd:48:2d:6d:e9:76:14:2b:
17:0b:52:74:56:13:82:f4:b7:44:90:7a:16:d3:60:
c2:06:86:e4:98:d1:1a:4e:5f:7d:71:f6:d8:69:84:
10:27:e3:fb:7a:15:69:36:87:62:4a:58:22:25:bb:
84:57:f4:4c:ae:12:bc:ad:8d:fb:41:5d:a0:e0:30:
50:5f:7a:4e:bb:5f:04:ad:aa:fb:bc:76:6d:a7:2d:
a8:7d:23:2f:0d:6e:6c:cc:d2:47:8f:cb:c5:75:4f:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:65:5B:13:1F:B2:8A:CF:91:86:EA:E9:28:32:28:43:FB:D7:F2
X509v3 Authority Key Identifier:
keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:39:9e:3a:b9:3c:7e:0a:93:ed:b7:04:d5:1f:8d:ad:82:
54:65:99:2a:66:7d:30:77:68:ed:76:76:9d:e6:49:79:da:9c:
45:dd:2c:d1:76:13:bb:04:fe:83:01:0a:b9:c3:72:1d:50:fd:
73:f0:28:2e:46:bc:9f:2e:5d:2b:9f:1a:cd:fb:bd:fe:0e:2a:
a5:43:eb:bc:52:f3:8b:c1:fc:fd:47:fe:57:df:fe:09:4d:17:
6a:6c:5c:ce:53:bf:41:bd:03:f0:6e:ce:c4:47:dc:0c:9b:59:
21:7b:dc:d4:10:c7:27:fc:a9:db:53:74:13:c7:8e:0e:ee:ab:
78:20:ed:98:09:a3:87:a6:b2:e5:fb:33:e5:34:78:ae:89:19:
30:d3:4c:bd:15:3a:88:06:52:b5:68:38:bb:e2:38:fc:4a:5e:
8c:3b:68:c7:c9:14:e7:8f:4b:1b:b9:d0:3c:32:ef:29:71:e6:
a4:f1:1b:a9:18:bc:48:2f:bb:c1:51:73:29:c1:ed:5e:b0:d4:
4c:88:1d:ff:85:7a:d7:aa:30:6f:f0:b8:70:d5:d1:fd:f1:07:
2d:0f:64:0e:39:11:15:b1:69:80:cb:33:9d:c5:78:e4:a4:6c:
6f:22:a3:2e:c8:b5:91:83:3d:1b:95:21:cd:9f:77:fc:4f:d1:
81:cb:fa:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG
N0YyOTVGMzUwHhcNMjYwNzI4MTcxMzM3WhcNMjYwODA0MTcxMzM3WjAYMRYwFAYD
VQQDEw02YTY4ZTM0Mi05MWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3H45QUUZc7oC2t5t8b1jXL+MvAPkzaqMhLWNb0Z7QaF3N2XHXQtY/l2Whsx
MvkIEA7LoQ7dScuF8MTCEJxB1m29chrL3a+DvJ5ELjNo6e+Wl6D7m6ENFRG/WDls
b2/O35oTl2ShBuR8poECGAq7VKxvL2QBgaBtuYsuWsPe/OKHiqd3I4uRtnQHjlFC
CasGm7SCdkXiCvejYjYd3Ugtbel2FCsXC1J0VhOC9LdEkHoW02DCBobkmNEaTl99
cfbYaYQQJ+P7ehVpNodiSlgiJbuEV/RMrhK8rY37QV2g4DBQX3pOu18Erar7vHZt
py2ofSMvDW5szNJHj8vFdU8J3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnvZVsT
H7KKz5GG6ukoMihD+9fyMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4
RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt
cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABYs5njq5PH4Kk+23BNUfja2CVGWZKmZ9MHdo7XZ2neZJedqcRd0s0XYTuwT+
gwEKucNyHVD9c/AoLka8ny5dK58azfu9/g4qpUPrvFLzi8H8/Uf+V9/+CU0Xamxc
zlO/Qb0D8G7OxEfcDJtZIXvc1BDHJ/yp21N0E8eODu6reCDtmAmjh6ay5fsz5TR4
rokZMNNMvRU6iAZStWg4u+I4/EpejDtox8kU549LG7nQPDLvKXHmpPEbqRi8SC+7
wVFzKcHtXrDUTIgd/4V616owb/C4cNXR/fEHLQ9kDjkRFbFpgMszncV45KRsbyKj
Lsi1kYM9G5UhzZ93/E/Rgcv6zw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:13 2026 by rpki-client