
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier: Fq7qlUIGeqVXv7MEQ+DBxLOMmICdaKZp74eyqARksGk=
Subject key identifier: C4:A6:B4:1D:34:B7:57:C5:B9:9B:2B:2A:DF:13:11:60:5A:33:32:AA
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number: 5C
Signing time: Wed 13 May 2026 08:14:27 +0000
Manifest this update: Wed 13 May 2026 08:14:26 +0000
Manifest next update: Wed 20 May 2026 08:14:26 +0000
Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: W8TrCY+e0PLfvooz2K8wqyTP6WPax4DuwbuUJKpXdYI=)
2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Validity
Not Before: May 13 08:14:26 2026 GMT
Not After : May 20 08:14:26 2026 GMT
Subject: CN=6a0432e3-6eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:bc:7d:42:16:92:f8:46:99:e2:0a:87:7c:
8b:f5:a2:80:70:4f:6a:9e:63:88:ba:2e:64:37:2e:
d1:f5:94:81:c4:ef:01:b1:3b:72:5f:c1:15:82:f6:
9a:91:b0:97:3c:e9:61:9f:0e:12:97:40:d9:8b:9d:
a5:46:95:7c:2b:5b:0b:10:74:41:fb:14:dc:6a:5b:
34:e6:f4:32:1b:f3:06:c4:39:66:49:7e:97:ac:43:
74:45:fb:b9:a1:af:f3:a2:45:4e:32:a8:1d:b5:e8:
27:61:86:b0:20:6d:c3:54:ef:b2:39:d3:d6:5d:c8:
27:f4:d8:a3:89:7c:1d:76:54:3e:54:6f:0f:8e:1e:
f1:f6:09:e7:a7:b4:43:4f:21:ac:ab:b7:2f:84:8b:
7a:b8:66:45:fa:cf:17:bc:28:36:6e:1b:0a:eb:9e:
cf:af:ba:74:da:e8:65:3c:9f:9d:2f:10:d5:e7:66:
a9:86:ae:55:e0:75:d5:35:e5:6c:24:84:b4:bf:26:
40:ae:69:bd:e0:6d:f1:99:d0:b5:03:47:c7:cb:cb:
cf:2c:6a:b9:ba:f0:89:de:32:c1:36:34:b4:71:2d:
bf:89:85:f3:68:e8:8e:61:4d:e5:0e:33:75:7f:2c:
49:6b:bb:99:bf:0a:62:1d:9b:16:f8:54:88:3a:32:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:B4:1D:34:B7:57:C5:B9:9B:2B:2A:DF:13:11:60:5A:33:32:AA
X509v3 Authority Key Identifier:
keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f3:99:d6:57:6b:f4:f8:43:7d:2e:76:f8:7a:70:0e:80:65:
a1:79:9a:6c:47:ca:56:bd:b8:d2:c7:31:4b:ee:27:51:02:59:
34:a0:fe:55:08:e6:ad:a9:40:6c:8f:6a:e0:42:c6:a0:44:10:
cb:80:13:1c:7d:81:94:0d:7b:61:36:76:31:3c:32:c6:da:33:
53:14:cb:6f:5a:fd:02:79:0c:2d:ff:76:0e:ce:b0:57:98:25:
be:28:87:35:95:bb:b6:10:d9:c0:53:3f:99:61:f9:91:bd:27:
1b:24:28:0f:39:39:1e:f4:07:1a:5c:81:56:ff:a4:07:19:5d:
ef:62:3a:a2:6b:03:40:22:23:a7:ff:7a:72:fd:8a:45:55:c0:
20:7f:13:03:65:d4:64:4c:09:0a:d8:ae:c1:9c:fb:63:11:aa:
3d:12:85:c8:dd:e5:41:8a:16:2e:9a:d2:29:52:18:f7:c5:f0:
31:99:83:0b:6b:17:fd:b7:7e:60:6f:6a:3c:e3:35:76:d5:94:
f1:fd:f9:67:05:a4:98:15:4a:9f:22:76:0e:57:56:ae:05:c5:
3d:e9:4f:cb:1a:f3:5d:b2:82:dd:72:2b:84:99:2e:6d:b4:12:
b3:e4:9f:93:32:e5:ba:1b:d3:0b:5d:a4:06:15:66:dd:da:3c:
0f:b6:87:25
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2
ODM5OTJFMDAeFw0yNjA1MTMwODE0MjZaFw0yNjA1MjAwODE0MjZaMBgxFjAUBgNV
BAMTDTZhMDQzMmUzLTZlYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCk8rx9QhaS+EaZ4gqHfIv1ooBwT2qeY4i6LmQ3LtH1lIHE7wGxO3JfwRWC9pqR
sJc86WGfDhKXQNmLnaVGlXwrWwsQdEH7FNxqWzTm9DIb8wbEOWZJfpesQ3RF+7mh
r/OiRU4yqB216CdhhrAgbcNU77I509ZdyCf02KOJfB12VD5Ubw+OHvH2CeentENP
Iayrty+Ei3q4ZkX6zxe8KDZuGwrrns+vunTa6GU8n50vENXnZqmGrlXgddU15Wwk
hLS/JkCuab3gbfGZ0LUDR8fLy88sarm68IneMsE2NLRxLb+JhfNo6I5hTeUOM3V/
LElru5m/CmIdmxb4VIg6MuDbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxKa0HTS3
V8W5mysq3xMRYFozMqowHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF
ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6
NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB685nWV2v0+EN9Lnb4enAOgGWheZpsR8pWvbjSxzFL7idRAlk0oP5VCOatqUBs
j2rgQsagRBDLgBMcfYGUDXthNnYxPDLG2jNTFMtvWv0CeQwt/3YOzrBXmCW+KIc1
lbu2ENnAUz+ZYfmRvScbJCgPOTke9AcaXIFW/6QHGV3vYjqiawNAIiOn/3py/YpF
VcAgfxMDZdRkTAkK2K7BnPtjEao9EoXI3eVBihYumtIpUhj3xfAxmYMLaxf9t35g
b2o84zV21ZTx/flnBaSYFUqfInYOV1auBcU96U/LGvNdsoLdciuEmS5ttBKz5J+T
MuW6G9MLXaQGFWbd2jwPtocl
-----END CERTIFICATE-----
Generated at Wed May 13 12:37:04 2026 by rpki-client