
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier: Kiz/8Fq73PezxunbUcMnys1a85q8a2nIArqwtmXx4yk=
Subject key identifier: 1F:44:DC:7C:C0:66:0F:DD:39:32:E1:F5:D0:7E:2C:02:5B:48:01:5E
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number: 0294
Signing time: Mon 11 May 2026 01:59:10 +0000
Manifest this update: Mon 11 May 2026 01:59:09 +0000
Manifest next update: Mon 18 May 2026 01:59:09 +0000
Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: Z19AJy8WuLPf3aVIWAinPZhUG+KBucwmK1e3AQ3ithE=)
2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Validity
Not Before: May 11 01:59:09 2026 GMT
Not After : May 18 01:59:09 2026 GMT
Subject: CN=6a0137ee-4947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:fe:f3:f0:ea:9e:3d:1c:15:47:91:f8:83:
34:3f:17:08:89:40:9d:70:10:34:4f:fb:2c:c3:e2:
fd:9e:34:89:50:b9:36:e2:05:77:7b:61:14:8e:bb:
d4:89:c7:fb:69:ab:c9:66:08:c5:52:a5:27:2b:48:
f4:69:19:54:2a:de:e9:8d:e1:87:51:86:9f:99:16:
46:18:40:1f:c1:17:16:97:8e:45:43:cf:a7:ce:77:
6d:cc:62:34:86:1e:79:76:ba:76:50:56:d5:79:bf:
44:96:3f:18:b6:00:4a:55:a4:f1:e3:96:f5:71:0e:
cc:3c:30:f8:63:c1:30:de:a3:35:75:93:95:9d:96:
29:6e:01:ba:ba:c8:fa:17:f5:ed:dd:ed:0a:22:98:
69:91:fe:3e:d1:90:a2:61:24:2f:55:83:2e:0b:be:
00:1d:7d:b0:22:10:1c:0e:5a:8b:a7:14:1e:5c:81:
e2:e4:8c:cd:74:84:d3:98:de:5e:4b:5e:f9:63:3c:
b3:b1:4b:61:a1:4b:2c:61:08:4d:79:d3:8b:3a:7d:
9f:40:6b:fa:e4:cd:38:5c:9e:81:01:11:46:aa:ce:
26:06:e8:7b:96:6b:0c:b2:a5:25:61:52:7d:bb:cf:
37:35:99:93:b1:9b:76:97:c7:0d:7c:6d:91:ec:71:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:DC:7C:C0:66:0F:DD:39:32:E1:F5:D0:7E:2C:02:5B:48:01:5E
X509v3 Authority Key Identifier:
keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:25:32:a1:3c:96:8c:e3:4b:57:82:2b:f2:51:ed:11:1a:fa:
f5:11:8a:82:02:0f:41:c0:0c:51:ac:48:92:a2:cc:eb:57:7c:
12:5a:c2:81:2b:8e:3f:58:3c:1d:0e:fb:94:00:58:1e:3f:ee:
c4:2d:cd:95:41:d8:5a:c3:72:9e:f2:dd:36:41:e6:61:3d:20:
fe:82:e4:df:cf:c9:6d:33:f4:00:d9:13:39:02:13:9e:0a:6d:
21:66:1e:95:05:28:87:7a:61:9c:54:f3:da:1b:28:33:a9:26:
20:5d:5a:5c:05:f3:ac:f9:0a:57:23:d7:19:5b:4b:92:5b:c2:
33:0a:2c:5f:c7:7a:ec:65:57:f0:de:f3:ca:6d:24:95:4f:df:
ae:de:f5:cd:b7:72:f8:fe:c9:8a:0a:15:e7:9d:2b:bd:f2:64:
7a:86:4d:fd:be:f4:5f:07:9b:e0:9c:70:97:1d:7a:38:a0:2e:
04:b4:aa:9e:ce:39:2b:09:a5:f7:16:88:9b:e4:98:7c:97:9d:
6e:9c:08:34:fd:74:87:23:fd:f0:c1:f9:e0:76:5d:c1:7f:c7:
a1:31:1f:be:f4:bc:58:21:b9:2a:df:5a:cd:05:77:2a:90:c4:
b9:1b:10:f7:81:59:20:09:d5:b9:ef:8d:49:0d:2c:8b:b9:ab:
26:93:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:55:55 2026 by rpki-client