
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json)
Hash identifier: SUqakjeEyf8jSpX/X+tYzusZI0n4+/n1GI3/nzb3OU4=
Subject key identifier: 01:DE:99:F8:51:75:B6:59:FC:FB:81:21:42:8B:F3:E3:13:CA:CA:45
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
Manifest number: 040A
Signing time: Thu 23 Jul 2026 03:00:43 +0000
Manifest this update: Thu 23 Jul 2026 03:00:43 +0000
Manifest next update: Thu 30 Jul 2026 03:00:43 +0000
Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: kYcMYmouYJaz4MRmBIzcUwo0esp1CTWxsoZYaHhEgEI=)
2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: jxDI67dzlTMucl76pgJ/o0eB5ROyiwAhUpdzhgTbLvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Validity
Not Before: Jul 23 03:00:43 2026 GMT
Not After : Jul 30 03:00:43 2026 GMT
Subject: CN=6a6183db-16e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:0a:5a:ee:71:68:f3:cb:4e:46:cf:9c:76:
c5:c1:74:72:ac:11:f2:30:90:1c:a6:9d:22:42:98:
be:b7:42:a6:67:b1:7a:39:0a:93:e2:f3:cc:15:28:
4f:be:5f:de:ef:aa:65:47:d0:57:7b:34:88:f2:dc:
c8:3e:9d:96:0f:41:8a:e7:37:44:e1:0c:af:94:ef:
73:8f:ef:97:27:2e:37:e2:0b:87:5f:30:72:85:91:
24:e0:82:05:76:6a:42:27:06:6a:08:01:4f:cc:8f:
75:18:27:1f:61:1f:be:66:ef:0e:17:36:87:05:03:
5f:4f:8d:2e:3b:6e:6e:88:ec:85:97:54:cc:13:56:
c1:d6:4b:3f:93:21:d2:79:06:76:50:aa:a7:ce:f9:
6e:f5:60:65:1b:7b:8d:09:ce:d0:93:52:f4:95:0b:
f3:18:6f:16:4c:fd:3a:09:f5:99:5a:70:25:83:1a:
7d:0d:26:5f:a9:49:65:00:ff:93:04:26:54:d0:f1:
d5:76:7c:a2:98:53:f4:42:1c:45:39:e0:4b:5c:ca:
6c:74:41:19:2d:ac:08:e8:34:71:5a:74:cc:f7:64:
a9:a9:31:7b:ce:a0:6c:a2:6f:b4:e1:34:a0:ad:5c:
da:3a:21:a6:8e:5c:d9:0c:2e:3e:fe:a8:63:72:47:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DE:99:F8:51:75:B6:59:FC:FB:81:21:42:8B:F3:E3:13:CA:CA:45
X509v3 Authority Key Identifier:
keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fa:bf:1c:79:0f:f1:85:be:15:03:b7:25:44:d9:7f:8b:94:
5d:79:cf:18:87:05:94:f3:75:77:88:cb:00:8d:95:61:b6:04:
09:e7:0e:a7:19:d4:09:56:85:16:b9:bb:ff:1d:a8:74:6e:b4:
b6:6c:b9:2b:d4:58:b4:47:94:4f:95:7c:69:61:4d:a4:4e:14:
51:98:f5:e9:f8:9a:d9:16:71:08:00:3e:aa:30:bd:57:bd:9c:
36:14:2c:41:96:e9:23:19:de:20:17:49:d3:62:38:9d:75:a3:
6a:13:d5:ec:09:14:87:5d:95:b6:dc:2a:2b:5c:f1:bb:99:1b:
52:e0:59:89:7d:4f:ef:f1:9d:6f:f7:20:5c:d4:c1:22:86:72:
37:76:7a:6d:5d:38:e7:63:49:0a:2b:c7:77:9f:01:2a:d8:10:
e4:a7:31:4a:7c:2b:c3:50:b8:d1:cb:7d:fe:d1:26:0c:7c:96:
5f:57:7d:f2:da:2c:20:78:83:0d:0d:e1:9b:9b:32:96:64:31:
85:34:03:97:9a:23:d1:69:20:ea:a5:28:10:60:5f:79:86:3a:
6b:5c:34:97:a0:c3:d4:df:a9:32:07:32:c5:79:fe:70:8e:ae:
6b:ea:86:a5:f9:0d:d1:6c:a4:d8:29:a5:73:38:50:de:df:55:
1b:59:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:07 2026 by rpki-client