
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: F/VOglKaq+g8pv3jTCszzzLueRJprpjCgSFjXMn0RQo=
Subject key identifier: 69:45:78:F5:1A:B1:2F:EE:15:81:52:64:0F:F3:E3:DA:CD:AA:2E:7B
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 0354
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 034A
Signing time: Sun 05 Apr 2026 00:43:31 +0000
Manifest this update: Sun 05 Apr 2026 00:43:30 +0000
Manifest next update: Sun 12 Apr 2026 00:43:30 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: UD/Nyw9yg6uIVoSEyayoi0qP+cXmB3cVEpHTNAmDdU8=)
2: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: RLoDGqQrLMN8RtNfib91dVRLKMKiKWs7GUo1oIVrybg=)
3: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Nz0DVL+CvZ5dT8akmCAjwfXowXzmBOEn4Hxk/rEQ7LY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Apr 5 00:43:30 2026 GMT
Not After : Apr 12 00:43:30 2026 GMT
Subject: CN=69d1b033-6625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:02:ab:59:e8:86:fd:3f:20:b6:5a:81:ee:
54:09:b0:c9:89:b3:be:39:b7:ab:a2:80:3f:bc:97:
52:6c:01:64:78:1c:a2:44:ae:73:c2:86:e4:06:30:
dd:05:60:a8:ed:03:0d:9c:ef:39:8c:39:ad:6b:32:
40:fa:98:dd:22:71:f8:86:45:22:fe:b1:9a:02:9c:
8e:1d:c5:f7:5c:de:a2:a5:e2:14:1b:58:38:11:4a:
4f:5d:33:e0:33:70:ac:ed:24:67:54:ef:49:69:13:
4e:0e:57:84:fc:c9:a8:7b:43:00:4a:72:1c:d8:0b:
67:a7:a7:92:c5:d7:d3:4c:02:49:0c:ab:4d:0c:ff:
10:21:27:95:23:eb:54:2e:9d:f6:3f:73:0b:e2:8d:
35:be:1d:93:9f:2f:29:9b:92:cf:e4:25:8d:f2:55:
bc:eb:c9:08:94:d8:d8:f4:f6:db:c1:e3:72:c6:58:
4b:ae:8e:fc:3d:fe:01:d3:14:cd:b9:72:f4:19:27:
39:85:8d:42:92:4e:7b:ec:e1:07:e8:34:ad:3b:05:
b7:d8:a9:df:06:32:f2:eb:3a:de:0d:52:0d:ce:59:
ca:55:1e:7d:20:d1:12:9d:06:38:49:6e:d8:6e:7f:
c9:46:5d:a1:5e:1d:c8:be:21:31:df:46:e6:ca:0b:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:78:F5:1A:B1:2F:EE:15:81:52:64:0F:F3:E3:DA:CD:AA:2E:7B
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:40:45:06:d4:85:b4:8a:71:da:0e:73:6c:bb:13:d8:e9:cb:
de:d5:7e:6a:06:15:dd:42:13:43:b3:31:4f:26:f3:a6:ea:0f:
f5:1d:c0:c3:39:54:9c:0b:53:1a:23:ff:33:da:01:c0:ab:29:
3c:cf:5b:0e:17:79:be:88:cf:80:ea:0f:b1:f3:32:f6:2a:6b:
8b:91:76:76:f1:ae:2c:6d:8d:23:4f:77:0e:dd:8c:ae:a9:20:
ed:96:d9:78:fb:d4:73:1d:7e:80:2a:9b:e5:1a:ad:33:49:69:
d6:d5:6c:1f:00:15:b0:e4:b8:00:8c:5a:0e:82:38:b8:46:a4:
69:d5:3a:24:06:4e:20:c9:76:90:ae:c6:91:65:4c:9a:69:0c:
61:6a:10:d9:17:95:e3:4b:f4:a6:8e:52:c3:d5:f5:8f:69:a5:
4c:38:d6:7c:1b:18:58:b0:e8:5b:01:90:e5:dd:35:95:84:e3:
9a:23:98:83:46:2d:b2:e3:a1:e7:52:79:aa:3c:bd:85:80:51:
5f:14:b1:0e:26:88:40:71:21:7d:2f:ec:da:98:be:ad:34:46:
89:39:75:8b:74:a6:11:5b:74:dd:d7:a5:7c:31:88:da:d4:ec:
55:74:94:ec:e3:3b:42:ef:c0:5e:63:67:1a:27:5d:fd:09:a6:
8a:52:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:28 2026 by rpki-client