
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: xvfWKQKYZ05yk0uxzPLCNJ73PM3l8j2NyiCT/3qD8Ds=
Subject key identifier: 70:61:0B:9E:A7:F9:2A:FD:3A:D7:29:9A:74:1B:06:DF:0A:64:8C:F3
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 07C9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 07B8
Signing time: Fri 04 Sep 2026 21:18:26 +0000
Manifest this update: Fri 04 Sep 2026 21:18:25 +0000
Manifest next update: Fri 11 Sep 2026 21:18:25 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: ZkOjb40LnvfPxYCPmHFK/w+sFip9Jl2yQSIXKdIFoQk=)
2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Sep 4 21:18:25 2026 GMT
Not After : Sep 11 21:18:25 2026 GMT
Subject: CN=6a9b35a2-cde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:92:0a:65:8a:a7:36:44:4a:25:6c:7c:12:
68:9a:d4:62:0f:3e:98:50:58:42:88:ce:9b:ee:ce:
cf:ec:0a:4d:e2:f3:a4:c5:19:c6:f2:de:39:01:e9:
26:b8:9f:0c:54:f8:d0:eb:eb:87:50:69:e5:b6:1c:
01:65:0f:e0:cc:70:34:ef:69:72:43:5f:07:97:03:
36:80:23:e1:13:89:3d:14:40:6d:fe:c8:3f:5a:0a:
5c:5e:34:c2:54:69:3c:75:18:e6:e6:5c:12:d8:cd:
cf:94:58:83:96:14:63:1f:9d:80:60:25:2f:31:54:
67:b7:de:44:ff:98:37:34:2e:cd:1a:96:93:35:af:
15:26:b1:79:86:07:7a:27:de:23:56:b1:47:5e:4b:
2c:4f:8e:75:0d:7d:90:d5:12:ee:0f:00:14:ec:99:
04:89:7e:2d:a9:cd:34:50:47:0f:ba:ef:b1:00:21:
0c:3c:61:b4:53:ed:1c:ff:2f:08:14:9d:df:56:f8:
d3:8e:10:70:b8:f6:40:6e:a3:c0:df:29:eb:7b:d5:
98:a5:fd:22:e3:78:3a:a3:49:e9:bd:f0:e5:d0:84:
2e:9b:da:fa:54:2d:7c:d8:a7:a2:42:e9:ba:a6:a3:
c7:63:c3:fc:d3:21:6e:f0:4b:16:3c:38:d1:37:fc:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:0B:9E:A7:F9:2A:FD:3A:D7:29:9A:74:1B:06:DF:0A:64:8C:F3
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:1a:3c:cd:f2:3a:53:2b:93:23:f4:24:bc:07:00:c8:ef:87:
40:a3:83:8a:43:03:e6:b9:ca:81:77:4c:9e:38:68:69:4d:ef:
82:f6:0e:6a:25:e5:bc:73:59:3a:1f:cc:26:e9:46:7c:7d:f9:
89:39:04:b6:3e:ed:57:b4:14:27:93:61:03:59:6b:a9:a6:93:
6d:b8:12:a7:f8:e8:60:04:e0:84:28:f1:e1:42:49:bf:d1:7a:
ca:fc:71:c2:f7:05:6e:40:14:14:70:45:5b:5f:55:ad:d1:1e:
43:ee:53:82:69:1f:ae:7a:b7:f9:00:d4:03:40:82:92:6d:b9:
11:76:4a:e6:0b:c3:11:05:68:ec:b2:28:45:02:68:cc:0b:15:
d9:39:8e:23:60:81:84:a6:5e:23:fe:1a:83:76:15:13:5a:80:
f3:09:74:ae:f1:e9:8d:2f:2d:8c:12:c7:03:0b:f1:a6:b9:01:
75:6b:7a:d2:6a:9a:66:ab:57:ba:90:ff:0f:fa:18:c5:32:64:
1b:86:fb:1c:dc:95:3c:78:84:aa:3c:0f:d6:2f:92:fa:7b:79:
79:6a:4d:a9:bc:5d:0c:cc:17:48:5e:ee:b0:47:22:89:74:62:
b2:c2:00:61:5c:f8:16:e9:6b:69:75:3d:4a:4b:dd:38:08:8d:
9d:f4:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:36 2026 by rpki-client