
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier: cfj9I2uKgst6vEH/5Fum6PyeH7fjIPGhGjkr3Xqen+s=
Subject key identifier: C1:46:A8:0C:E8:75:D4:B8:31:9D:C3:87:35:5E:18:3C:3D:A8:A7:E8
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number: 86
Signing time: Wed 05 Aug 2026 09:15:42 +0000
Manifest this update: Wed 05 Aug 2026 09:15:42 +0000
Manifest next update: Wed 12 Aug 2026 09:15:42 +0000
Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: oDWTlq8D9Wtof4G3U4L8DiW+ar9UdBRmWeQQG6ZJsFo=)
2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 09:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Validity
Not Before: Aug 5 09:15:42 2026 GMT
Not After : Aug 12 09:15:42 2026 GMT
Subject: CN=6a72ff3e-5e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:57:6d:a6:1a:19:f4:4f:91:f1:47:6a:91:
f5:73:ed:84:64:08:b0:4b:5e:6f:a3:ab:cd:4a:05:
f9:b4:59:b6:79:53:03:7c:e7:ae:a8:ec:ef:e1:1d:
ee:67:53:12:af:bb:fc:c2:1e:8d:24:78:5a:e7:ef:
24:6a:b3:f6:4e:bb:67:8a:33:a8:87:2f:38:4d:47:
59:fa:5f:a6:e7:0f:23:e6:b7:85:ba:f8:a1:4d:a5:
9c:c1:6e:e4:bd:03:ed:d8:43:cd:f4:67:d5:da:00:
05:fd:4c:d0:47:ab:74:e3:9a:98:61:21:e9:9b:8e:
16:2f:3c:70:ce:6e:74:fc:66:0b:c4:2a:47:dc:0b:
d9:ed:73:77:0b:d2:e5:c4:48:55:c9:37:a7:f4:78:
da:aa:ef:06:7d:23:ac:06:0c:d8:37:9b:97:78:b5:
e7:de:ab:6d:68:35:76:7d:ed:09:d1:f9:27:7c:53:
93:f3:34:4d:52:61:53:2a:8e:c4:8b:b1:86:8a:1d:
06:c7:eb:04:45:ae:d6:08:67:7d:ae:c8:07:54:9c:
b2:99:1e:a9:a9:82:bd:8a:a4:5e:d1:d2:4e:4f:3d:
d6:53:98:55:c1:f1:8a:8d:fe:55:01:dd:55:37:d2:
ba:64:19:4f:53:6d:20:4f:f5:d2:97:04:69:7c:7e:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:A8:0C:E8:75:D4:B8:31:9D:C3:87:35:5E:18:3C:3D:A8:A7:E8
X509v3 Authority Key Identifier:
keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:0e:d4:f2:04:c4:42:e3:14:1d:1a:79:27:4c:64:10:47:
02:39:50:d0:a0:b7:66:b8:00:71:bc:16:5b:de:93:63:48:41:
e5:6c:26:58:fd:b8:bb:a1:66:42:72:3e:a5:ad:36:10:28:af:
21:74:09:04:8c:62:7d:d5:b5:9c:d0:94:9a:2a:73:71:b1:a7:
e4:f5:cc:2a:47:a3:87:d6:24:98:ad:04:1d:3f:34:bc:26:b7:
ef:06:f8:81:ff:5e:89:f7:b8:74:84:e4:2d:2d:6a:90:4c:f3:
71:1a:88:b5:f6:97:d3:9a:f1:37:1c:3d:d3:a7:54:01:04:f3:
98:0a:c5:f3:b9:83:e4:51:03:91:24:0a:0c:f4:49:0a:73:e6:
f6:b9:83:2d:d7:2c:69:a5:a7:43:40:63:9e:3e:35:70:ca:11:
0d:f1:6d:89:2b:62:f4:a2:db:2f:7b:41:83:05:03:67:52:72:
21:48:da:cd:03:6e:e5:19:8a:fb:b3:18:a7:30:b8:48:8e:04:
83:08:39:3e:dd:d3:33:32:af:37:86:12:6b:be:a7:42:b3:8a:
24:f5:b7:84:bd:e8:c5:8d:26:16:fd:c5:6e:77:54:ae:fa:bc:
c9:c9:75:e8:d7:c4:af:69:61:7a:35:63:7e:71:7c:01:63:f2:
77:1b:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:14:57 2026 by rpki-client