
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json)
Hash identifier: U9TAuWxpFBRkgTXzDlPjfGXNt3MKiS5fWEO7Ahf4J4E=
Subject key identifier: 18:08:9F:DE:AE:41:70:16:8F:9D:5E:A5:61:BD:3F:82:B0:B7:46:49
Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
Certificate serial: 05CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
Manifest number: 05C5
Signing time: Thu 28 May 2026 22:57:12 +0000
Manifest this update: Thu 28 May 2026 22:57:12 +0000
Manifest next update: Thu 04 Jun 2026 22:57:12 +0000
Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: ukmNu8GSoy/4o3kat5YdfFT+MQSvQmkpwbJaVIUmy4s=)
2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: eSZTCVmtVODIa8LqXf1+TpmSShdpmD0QiKQVkQhAeZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl
rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 22:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
Validity
Not Before: May 28 22:57:12 2026 GMT
Not After : Jun 4 22:57:12 2026 GMT
Subject: CN=6a18c848-ecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:67:74:6d:17:d2:b4:3f:e2:2b:fe:e5:eb:
e2:d8:d2:04:84:3d:f7:a8:34:4b:9e:9d:d5:92:f3:
47:7a:57:69:89:ad:58:7b:90:f7:8c:0a:09:19:dc:
6f:38:8d:14:ba:e3:42:41:c5:46:f8:47:fa:e7:02:
52:40:6f:2d:51:04:7b:30:2b:7f:83:27:6d:5c:0d:
57:b1:4f:3c:16:11:70:3d:aa:94:b9:c1:6d:c2:4b:
3c:68:e5:82:9f:8c:bd:cf:bf:14:c2:bd:f0:59:4b:
b9:9b:c1:ad:0f:bd:97:85:15:bc:a3:34:93:1e:f9:
02:a7:9a:be:f8:ae:d0:2b:35:de:6e:5e:ad:7a:88:
77:d1:3a:a9:52:1d:9f:88:fb:47:2d:a7:63:f5:3f:
84:14:05:7c:6d:3b:58:9e:75:bb:d6:0c:2b:85:e4:
3f:f2:9e:67:7c:8b:3d:65:b8:82:3c:f7:66:40:b4:
fc:86:a7:74:06:41:ae:de:19:65:8d:0c:51:e5:0a:
6c:32:5a:8e:75:bf:5e:66:5d:91:77:08:31:ec:78:
21:0b:13:4c:ec:b7:2b:c7:f5:1f:a4:64:4e:ed:d3:
ce:da:d1:bd:d0:f1:c0:e4:58:c5:65:88:03:3e:58:
86:e5:de:b6:0a:83:60:44:9d:b9:00:d8:f0:76:58:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:9F:DE:AE:41:70:16:8F:9D:5E:A5:61:BD:3F:82:B0:B7:46:49
X509v3 Authority Key Identifier:
keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:ce:ac:5d:16:48:09:5b:04:d9:9e:0b:a4:0a:f5:75:fb:
4e:ac:ba:b2:23:73:b7:f5:96:d1:9a:f9:39:ca:33:05:0d:44:
1d:19:cd:bc:db:d9:fe:f6:8a:a5:eb:9f:2a:51:72:4c:de:7f:
5c:66:55:30:4b:45:ab:43:d1:39:07:6a:5e:7e:53:96:74:2a:
c0:49:5a:a4:24:df:bb:ce:e4:38:9c:51:12:e5:53:5a:f3:b7:
c5:40:83:1a:46:e6:62:0e:d9:63:f0:22:b8:f5:5d:6f:86:2c:
d4:1e:52:ce:a2:55:56:45:77:46:88:70:54:ff:a3:81:0b:9e:
9d:48:3b:d5:33:98:b2:0a:ca:1e:00:ef:ac:10:9f:7c:ec:6c:
f3:d8:2c:49:90:0e:6f:e1:9c:fc:4a:68:73:25:5c:b9:44:84:
25:5c:de:df:f7:33:a1:53:02:55:81:c7:88:de:06:c8:68:6c:
53:bd:78:49:01:37:1e:90:c0:09:09:1b:9c:e8:e2:02:42:07:
d3:ce:c0:12:77:4b:81:2e:f6:ad:b5:3c:5d:f2:4d:3a:60:aa:
d5:95:ed:29:a9:0e:d5:d9:36:f5:1a:fc:4b:b3:c6:84:65:f5:
97:a9:17:6a:32:ba:db:f8:be:33:1f:bb:bd:d2:7d:bf:51:6b:
cd:57:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:37:28 2026 by rpki-client