
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier: 6/5YeopO0KM5wj7dNMrJZPsjxlEyVKBQPCGcj2LLsng=
Subject key identifier: 0C:D8:B2:87:9D:D9:D5:03:31:A4:00:77:E6:67:07:8E:51:EB:0A:69
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number: 016A
Signing time: Thu 23 Jul 2026 06:23:21 +0000
Manifest this update: Thu 23 Jul 2026 06:23:20 +0000
Manifest next update: Thu 30 Jul 2026 06:23:20 +0000
Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: dkfWb3SpHLPRC6el/DxQuA/GOeiyGaFf5tdRdUuTBiQ=)
2: CE879A58457411F1A79BF008B4833773.roa (hash: FAofXEWNWRLbLUEmI8l44ekM0qZ+AweWVtuPzYnEfd8=)
3: CDF591B2457411F1A79BF008B4833773.roa (hash: wwvP6N0iZcxJteZa0vMxZP6scYPHrDTfF4JThPFyUsY=)
4: CF137DC0457411F1A79BF008B4833773.roa (hash: 4fmOTfm1xvbXGmcGvEf79mu94zqU9KuHGIqfto8HIsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Validity
Not Before: Jul 23 06:23:20 2026 GMT
Not After : Jul 30 06:23:20 2026 GMT
Subject: CN=6a61b359-fa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:b5:27:1d:20:a7:f1:72:34:c7:69:8c:d9:
a7:1e:85:15:52:47:e6:a2:2f:62:f9:2e:cd:8f:88:
c8:4e:ff:bc:00:25:69:ea:af:28:e8:fc:06:c6:e9:
ee:39:28:c9:b8:70:1d:9e:dc:89:46:e7:0e:2b:84:
fa:3c:38:e3:9c:c4:ac:4f:6c:cf:1a:f0:5d:cf:2c:
af:d9:8e:13:89:34:c4:9f:a0:25:f4:4b:b8:93:e4:
8d:30:27:a5:05:d7:9f:c3:46:44:45:21:c6:09:bf:
8d:b1:1b:95:49:2d:80:fb:57:49:6d:4c:8a:b5:32:
5d:5a:2a:b0:3b:71:66:5c:bc:16:a0:6e:7e:c3:7a:
63:3d:68:08:d7:90:75:48:7d:b5:26:e8:2e:f3:b5:
45:07:e2:1d:7e:61:6b:93:41:aa:d3:22:d5:91:87:
d1:02:b7:3a:81:a4:cb:47:6e:61:fd:d5:f9:5c:bd:
93:c8:8f:48:db:0f:6d:81:56:51:e8:83:69:67:4c:
5f:76:2e:a8:b6:c4:ac:6e:66:67:f2:46:ca:d4:5b:
c8:94:1f:ff:2c:1a:7e:f8:55:c0:92:02:65:6e:c8:
18:24:dc:c1:9b:aa:be:bf:1e:92:bf:5e:9e:81:a1:
17:2a:ea:f9:a8:8f:b5:70:34:30:7b:c3:08:dd:b0:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:B2:87:9D:D9:D5:03:31:A4:00:77:E6:67:07:8E:51:EB:0A:69
X509v3 Authority Key Identifier:
keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:09:fa:55:0a:fd:fa:b7:e9:54:bb:82:26:61:5a:cc:4c:
1a:a7:bb:13:1a:9e:ae:bf:92:a0:c6:03:f5:cc:e3:04:3d:b8:
68:ac:c9:d2:c2:39:83:50:01:1f:77:83:0e:a3:35:34:6c:46:
50:1e:23:d4:19:6d:e6:b1:44:f4:58:4f:de:17:a2:5b:6c:81:
72:00:fc:3e:9e:6a:d6:3f:b6:53:29:c9:43:4c:98:4b:a9:62:
80:b3:a0:3e:ad:ee:ae:ff:2d:1d:14:bb:82:85:67:84:8f:7a:
e6:c7:9d:18:9d:64:9a:9c:5e:28:4f:ac:d1:2c:3c:89:87:f8:
a9:30:23:bf:e3:22:9e:08:5d:c5:c4:d8:f3:44:3b:53:9c:0e:
36:23:ee:5d:de:15:e2:83:17:66:2e:9e:af:2b:ee:bf:a6:8e:
f3:19:c1:ac:0c:82:0e:a5:02:59:4a:5c:13:44:f5:d9:b7:6f:
10:e5:5b:dd:57:50:a1:e8:96:f6:d7:54:af:f5:fb:9e:8e:6e:
8a:a4:8b:90:8a:63:0f:60:a1:25:63:ee:33:d0:83:0c:f7:e1:
19:af:f2:48:6f:5e:1f:a6:c5:b5:00:e9:d6:8f:0d:82:45:5c:
35:1a:93:04:e0:52:c1:fc:21:f5:f3:81:60:62:59:7c:74:86:
7f:21:8f:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2
MUYwODA0MUUwHhcNMjYwNzIzMDYyMzIwWhcNMjYwNzMwMDYyMzIwWjAYMRYwFAYD
VQQDEw02YTYxYjM1OS1mYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0S1Jx0gp/FyNMdpjNmnHoUVUkfmoi9i+S7Nj4jITv+8ACVp6q8o6PwGxunu
OSjJuHAdntyJRucOK4T6PDjjnMSsT2zPGvBdzyyv2Y4TiTTEn6Al9Eu4k+SNMCel
Bdefw0ZERSHGCb+NsRuVSS2A+1dJbUyKtTJdWiqwO3FmXLwWoG5+w3pjPWgI15B1
SH21Jugu87VFB+IdfmFrk0Gq0yLVkYfRArc6gaTLR25h/dX5XL2TyI9I2w9tgVZR
6INpZ0xfdi6otsSsbmZn8kbK1FvIlB//LBp++FXAkgJlbsgYJNzBm6q+vx6Sv16e
gaEXKur5qI+1cDQwe8MI3bCTHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzYsoed
2dUDMaQAd+ZnB45R6wppMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4
S2N3QnkyZVpQaXhoOElCQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARuUJ+lUK/fq36VS7giZhWsxMGqe7Exqerr+SoMYD9czjBD24aKzJ0sI5g1AB
H3eDDqM1NGxGUB4j1Blt5rFE9FhP3heiW2yBcgD8Pp5q1j+2UynJQ0yYS6ligLOg
Pq3urv8tHRS7goVnhI965sedGJ1kmpxeKE+s0Sw8iYf4qTAjv+MinghdxcTY80Q7
U5wONiPuXd4V4oMXZi6eryvuv6aO8xnBrAyCDqUCWUpcE0T12bdvEOVb3VdQoeiW
9tdUr/X7no5uiqSLkIpjD2ChJWPuM9CDDPfhGa/ySG9eH6bFtQDp1o8NgkVcNRqT
BOBSwfwh9fOBYGJZfHSGfyGPTA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:15 2026 by rpki-client