
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: 6i6fP3nFLjZJ42CMkojTnBTjo2+lawnFAh/pC0fW6AY=
Subject key identifier: 72:5A:98:AD:72:6F:0E:1A:C9:73:72:B7:FB:C5:7A:B0:E6:22:4D:9F
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 07B2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 07A1
Signing time: Wed 22 Jul 2026 22:07:01 +0000
Manifest this update: Wed 22 Jul 2026 22:07:00 +0000
Manifest next update: Wed 29 Jul 2026 22:07:00 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: w8H4r/4AZ67OaLyRz7dYD3/3/xNrNJDzTDnOtUEiC/o=)
2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Jul 22 22:07:00 2026 GMT
Not After : Jul 29 22:07:00 2026 GMT
Subject: CN=6a613f05-64c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:34:ed:35:f9:f9:81:e5:39:26:01:3b:b1:
30:26:0e:cf:bb:d3:f1:4e:a4:e0:c5:eb:43:c0:93:
4b:63:e8:58:1c:41:f2:4f:e4:4d:4d:e4:bd:94:ec:
16:0d:c6:9b:4e:62:da:24:66:9a:89:98:5f:8f:33:
dd:25:99:9e:a6:ec:70:e0:51:41:bd:f8:6d:0e:5d:
cf:fe:64:37:d9:db:55:1e:4d:49:d4:c6:a1:e3:e3:
05:a2:78:13:ce:31:2b:58:18:4d:09:29:d7:66:a5:
11:2f:c6:84:a6:93:22:ff:80:09:7d:22:95:58:40:
d5:10:11:fb:87:50:8f:5c:f1:86:d5:35:4f:a4:84:
c5:fb:7c:7b:88:be:ca:f3:52:13:e2:b6:0b:49:3e:
04:fd:73:d6:85:f8:9c:fb:a9:f7:eb:f1:78:62:0c:
77:a8:84:88:6c:d5:75:66:44:1f:57:ff:07:01:28:
1e:18:a1:5b:73:99:85:24:4d:f1:48:77:94:2b:fd:
81:c6:01:ca:18:d9:de:41:65:e2:d5:7a:fd:b5:9f:
a7:22:bc:0e:6b:42:4d:e5:21:07:51:c7:cf:b8:4b:
52:ea:77:d7:5c:ca:d5:ea:d3:6d:10:ff:c5:f8:ed:
d0:3c:65:d1:47:11:39:ea:29:e9:2e:d9:8b:24:c5:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5A:98:AD:72:6F:0E:1A:C9:73:72:B7:FB:C5:7A:B0:E6:22:4D:9F
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:cc:f5:54:6e:63:44:92:74:7b:46:56:a4:b1:6e:62:5e:
40:87:ee:ef:38:ff:ac:b4:1c:b5:98:5e:46:d5:6b:9f:45:8d:
c3:1a:46:93:1e:79:41:24:88:48:df:47:35:bc:be:e7:10:ff:
97:88:59:7b:b4:33:a8:9d:2c:92:32:7b:dd:8c:ce:97:0a:2f:
4e:cb:3e:67:df:ea:66:64:e7:5f:e0:41:41:62:23:ea:4d:81:
f0:33:aa:88:ac:06:20:27:de:f6:2c:84:02:99:b5:cb:73:ca:
a1:f8:f5:41:bc:69:fc:ef:d3:18:f7:63:e3:27:d1:8b:69:98:
ef:1c:19:68:89:64:24:7d:25:10:95:8d:99:bf:12:30:4d:8c:
fd:9d:47:ce:bd:d6:82:75:ca:94:b2:5a:ef:bd:1c:0e:45:61:
fa:84:5f:5c:43:34:2d:5a:52:5d:91:e1:d1:88:86:c4:a2:78:
ec:87:cb:4a:42:f6:a3:9f:a0:b3:da:28:50:a5:dc:7c:67:cb:
6f:4c:87:0e:77:07:39:f1:f2:4d:cd:18:c9:a2:b2:bc:ca:91:
77:2a:df:e1:84:84:74:f1:43:9f:19:1f:7c:fa:27:1a:04:03:
7c:81:db:3d:08:b3:9d:d7:aa:d3:f1:79:d0:c8:af:81:09:3a:
da:c0:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:38 2026 by rpki-client