
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier: Dx2z9+DCOn/qZKqYhr2EJ2i8HV3SLfhPftExPitQOmQ=
Subject key identifier: BB:F9:26:C0:04:FE:AA:5A:47:27:59:13:88:DA:7A:E5:4F:43:0F:F5
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number: 6F
Signing time: Sun 21 Jun 2026 07:54:46 +0000
Manifest this update: Sun 21 Jun 2026 07:54:46 +0000
Manifest next update: Sun 28 Jun 2026 07:54:46 +0000
Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: Q2Nbq2ELp69yypYvT3h6zGDOpoIAk2v91Xdr7qRVBkk=)
2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 07:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Validity
Not Before: Jun 21 07:54:46 2026 GMT
Not After : Jun 28 07:54:46 2026 GMT
Subject: CN=6a3798c6-579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:93:1d:5f:d3:a4:51:07:9f:18:ea:4b:19:
9d:57:20:14:3b:fc:a3:46:34:27:f3:6f:ab:b4:8a:
f0:13:2a:0b:fe:7b:e0:b4:1c:86:93:36:37:5c:58:
f5:54:c3:0f:c0:22:0b:b6:d7:86:60:8a:84:1e:86:
94:65:76:60:a6:b4:42:49:4e:93:59:b9:34:24:5c:
d3:a9:a5:3b:60:f4:e1:63:0f:7a:1b:eb:bf:57:b9:
3f:dc:9b:71:2c:56:d6:7a:88:f4:d3:45:94:98:1e:
8f:72:0c:cd:f5:8d:38:0f:74:2b:5a:3f:d3:47:1f:
d6:8d:61:82:16:ca:48:93:f2:c2:c2:7b:81:51:f9:
d9:b2:93:7b:9f:88:2e:10:20:6d:ef:e4:8a:3a:41:
b9:80:35:0f:b1:40:d1:fa:51:27:36:0b:94:7c:54:
80:74:a0:68:69:ec:41:93:9c:16:d4:4a:3f:dc:34:
c5:68:9f:8b:c3:cf:d4:3a:3a:08:05:9b:c6:67:75:
81:b9:14:31:d7:d5:fd:53:0b:5a:d4:5e:a7:72:e9:
4b:13:48:00:49:ee:b2:a6:29:a9:2a:2a:a5:e3:6c:
69:31:4a:a0:1d:28:4f:9b:73:69:5f:b7:67:a7:bb:
1d:0e:55:95:3f:20:50:40:a2:0f:d1:3a:c8:fa:92:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:26:C0:04:FE:AA:5A:47:27:59:13:88:DA:7A:E5:4F:43:0F:F5
X509v3 Authority Key Identifier:
keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:c6:24:22:f8:2f:b5:61:57:3e:17:d8:9c:62:f2:9d:0a:
10:ac:9c:a9:38:cd:fe:4b:35:87:b8:7c:d3:d5:f1:ae:6c:b3:
47:70:36:2e:9b:20:3c:05:3d:bb:4b:a1:60:11:dc:33:c5:f0:
3c:71:30:b7:b8:ae:9c:44:e1:b5:f0:9e:07:92:3f:b1:60:50:
db:a1:92:61:bf:5c:41:01:43:64:de:ca:79:3c:37:92:04:81:
cb:37:23:62:20:21:61:51:75:27:d3:d2:c6:88:6e:db:0d:9b:
0d:53:0d:04:23:fe:3d:1a:9b:77:97:f9:7c:2d:c0:89:ab:28:
80:15:fa:a8:6a:67:00:5a:f5:70:75:3a:15:49:35:f1:07:7d:
8c:4f:77:01:c7:11:4b:66:c2:41:8d:73:e2:1d:14:65:f0:8c:
c0:c5:d8:e1:41:69:04:c4:d7:b4:d9:c7:44:0c:c8:61:5f:7e:
a7:d0:b8:51:a9:e6:84:aa:23:40:b2:09:d9:c7:24:4e:2a:98:
66:4e:63:b4:00:db:d7:0f:50:b6:35:06:73:98:cb:fa:32:9c:
41:53:fc:65:86:87:0c:ca:a7:4f:27:1a:76:dc:91:a3:18:ac:
07:cd:01:93:36:92:35:d2:ab:aa:f9:48:97:46:d1:ea:70:08:
d2:f2:5a:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2
ODM5OTJFMDAeFw0yNjA2MjEwNzU0NDZaFw0yNjA2MjgwNzU0NDZaMBgxFjAUBgNV
BAMTDTZhMzc5OGM2LTU3OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4ZpMdX9OkUQefGOpLGZ1XIBQ7/KNGNCfzb6u0ivATKgv+e+C0HIaTNjdcWPVU
ww/AIgu214ZgioQehpRldmCmtEJJTpNZuTQkXNOppTtg9OFjD3ob679XuT/cm3Es
VtZ6iPTTRZSYHo9yDM31jTgPdCtaP9NHH9aNYYIWykiT8sLCe4FR+dmyk3ufiC4Q
IG3v5Io6QbmANQ+xQNH6USc2C5R8VIB0oGhp7EGTnBbUSj/cNMVon4vDz9Q6OggF
m8ZndYG5FDHX1f1TC1rUXqdy6UsTSABJ7rKmKakqKqXjbGkxSqAdKE+bc2lft2en
ux0OVZU/IFBAog/ROsj6kqvRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu/kmwAT+
qlpHJ1kTiNp65U9DD/UwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF
ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6
NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCYVcYkIvgvtWFXPhfYnGLynQoQrJypOM3+SzWHuHzT1fGubLNHcDYumyA8BT27
S6FgEdwzxfA8cTC3uK6cROG18J4Hkj+xYFDboZJhv1xBAUNk3sp5PDeSBIHLNyNi
ICFhUXUn09LGiG7bDZsNUw0EI/49Gpt3l/l8LcCJqyiAFfqoamcAWvVwdToVSTXx
B32MT3cBxxFLZsJBjXPiHRRl8IzAxdjhQWkExNe02cdEDMhhX36n0LhRqeaEqiNA
sgnZxyROKphmTmO0ANvXD1C2NQZzmMv6MpxBU/xlhocMyqdPJxp23JGjGKwHzQGT
NpI10quq+UiXRtHqcAjS8lqW
-----END CERTIFICATE-----
Generated at Sun Jun 21 12:34:24 2026 by rpki-client