
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: LiylaMlTEF7Lh5s3JLcPLvm0TmU67yf9CzENPjjKbZk=
Subject key identifier: 7D:C8:B9:CE:9B:C6:88:BD:3C:A2:3E:C6:C3:A6:5B:F5:CE:62:DD:CD
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 07D2
Signing time: Mon 26 Oct 2026 21:22:24 +0000
Manifest this update: Mon 26 Oct 2026 21:22:23 +0000
Manifest next update: Mon 02 Nov 2026 21:22:23 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: L12N5VvQKajbEg5sXnR7Max+VY/gqjvRd9+wboXE2+c=)
2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Oct 26 21:22:23 2026 GMT
Not After : Nov 2 21:22:23 2026 GMT
Subject: CN=6adfc490-6bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:d4:8c:eb:6c:f9:f7:83:72:73:ca:7c:fe:
92:4b:25:04:72:28:9f:84:86:de:c0:30:3d:15:45:
44:81:f6:2d:e2:77:fa:28:1a:91:56:a2:be:df:e9:
68:f0:f4:d5:18:2d:e5:34:08:93:cf:ce:95:76:f9:
55:e2:63:8e:7b:90:95:0d:82:5b:72:6b:90:17:4c:
5f:c3:bc:80:39:fd:60:42:39:97:cb:71:27:3e:cd:
86:81:79:c1:8d:51:93:be:3e:b5:3d:26:f9:b6:9f:
0b:c6:30:11:93:3e:0c:0e:66:b2:e9:ce:ff:f5:90:
62:f8:ec:c9:eb:08:f3:46:23:dd:fe:97:09:2e:df:
53:ca:6a:8f:db:fb:e8:ef:ef:fe:1f:e5:94:23:5c:
54:ac:1d:d8:21:94:2b:44:16:93:be:9a:ae:d3:cb:
87:09:7b:f3:c2:34:3d:63:5d:d5:07:59:50:b4:0f:
45:39:74:89:63:27:59:9c:1c:b9:9d:62:e3:f2:b5:
70:07:09:36:b8:75:60:4e:e0:c1:ab:72:0f:57:6a:
70:86:35:0d:e1:0e:c9:2d:02:71:3f:cf:95:da:a3:
0a:07:c9:24:b7:b7:9d:df:c0:74:8c:a0:c3:14:47:
9c:81:2d:ce:50:a2:24:a7:94:23:93:f8:59:58:fd:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:B9:CE:9B:C6:88:BD:3C:A2:3E:C6:C3:A6:5B:F5:CE:62:DD:CD
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3c:47:37:90:f6:23:af:ca:38:19:9b:67:27:37:1c:b4:cb:
cc:83:f8:8e:e2:a0:e9:ff:ad:48:5f:8d:17:0c:d6:89:bf:eb:
72:82:47:64:3a:8b:1e:eb:6c:d4:65:71:02:a7:51:16:19:82:
16:e3:93:90:42:6a:f0:d0:b5:8e:a0:f8:f6:a1:8b:21:a7:c5:
0e:e2:2f:c6:7e:13:2e:97:7d:b1:31:75:bf:a0:7d:0c:e8:86:
58:d4:30:97:be:12:f9:ba:96:3a:52:b5:3c:ab:d0:f6:05:e8:
ca:61:c1:e7:07:d1:e9:11:05:89:60:15:b6:35:2c:c3:84:b5:
e7:8e:1a:5e:ed:d5:d5:37:07:99:1e:dd:ed:38:c1:d2:5b:ee:
23:12:0b:6c:56:d5:e6:d3:9a:11:27:fd:5d:42:aa:9b:0f:16:
fe:b1:fb:28:fa:48:f0:a6:ac:40:1b:75:95:45:b3:73:b1:26:
a2:7e:73:0f:f6:79:5e:09:44:4f:65:cd:17:6e:57:e6:9e:f8:
13:f0:f2:a0:1f:9f:d0:63:83:01:a3:37:bb:b4:02:be:61:c0:
b8:bb:5e:a5:77:8c:43:78:a1:8e:ed:7d:a3:40:09:d8:a2:f8:
c8:be:de:68:be:f6:77:5b:d8:24:60:91:25:6b:e3:b3:b5:0e:
4a:8f:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:40:43 2026 by rpki-client