
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: V3mTdOHYWICPYkxZtg1SpLteEewQ7oHfH8nJo5eEOs0=
Subject key identifier: 3B:99:EF:EF:78:35:AF:32:A3:76:C5:C0:E3:28:93:48:CF:5C:E9:5A
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 0762
Signing time: Tue 24 Mar 2026 21:24:06 +0000
Manifest this update: Tue 24 Mar 2026 21:24:06 +0000
Manifest next update: Tue 31 Mar 2026 21:24:06 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: V3fzgmcq0PiG7mgG92aTB5AJ6JYtaErNXkLUV8ipIDw=)
2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: IMgY5KX7mjhs1FxB/RRtC5IiiBe2O0/2qvUyxWFk3zo=)
3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 6omc62Webil/W9/FGpWKXVbWprD/fHKuBJzIrSdw7ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Mar 24 21:24:06 2026 GMT
Not After : Mar 31 21:24:06 2026 GMT
Subject: CN=69c300f6-ff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:09:5e:db:b5:c4:43:77:e8:08:d0:dc:d4:
27:8e:c0:39:dc:6b:d3:cd:96:57:34:18:34:80:74:
c3:1e:3e:83:0a:87:a6:54:8f:44:8b:06:22:ce:10:
2d:b6:aa:ed:f2:42:39:e9:2a:fc:35:dd:41:e6:f5:
85:cc:0a:e3:63:4d:86:df:3e:a0:b8:7c:02:d6:f1:
15:c2:8a:f6:16:4e:2c:3f:1d:f8:4c:fb:82:c9:79:
33:aa:7e:84:03:9a:db:aa:62:15:88:cd:3d:96:54:
85:cf:a9:7c:8e:02:6b:a2:e0:e5:b8:56:d0:14:a5:
41:e5:f4:46:42:88:fa:48:49:d2:d6:f3:67:9e:9b:
6d:ea:b4:da:54:c3:37:71:66:94:17:ff:04:c0:1b:
68:e1:a0:32:c4:37:41:c9:de:2b:67:97:9e:27:90:
53:cf:9c:22:09:df:0d:a7:58:cb:d3:cf:d2:b6:55:
19:c4:66:02:50:ad:1b:37:0d:01:86:7d:48:67:32:
bc:95:f0:45:27:14:69:8c:0a:9e:34:b6:42:dd:ea:
d9:bf:1f:1f:f1:5c:90:b8:35:bd:8c:30:d9:be:60:
03:7a:8f:c6:02:75:ad:f3:1f:86:00:13:c6:26:65:
fa:28:9c:8f:f8:81:a8:69:ec:60:5a:83:d0:9e:43:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:EF:EF:78:35:AF:32:A3:76:C5:C0:E3:28:93:48:CF:5C:E9:5A
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cb:b0:73:14:10:cc:10:05:2b:f5:f9:fb:9f:ae:e3:b2:50:
06:68:37:a4:af:59:1a:9f:a4:bb:fd:d6:c4:c5:2a:0f:22:f4:
c5:37:f2:c5:1d:f4:e5:18:ae:a8:2a:26:f4:ec:bb:35:6f:7f:
5d:c7:fd:4c:4b:77:3c:32:91:13:43:db:0d:52:40:0e:79:27:
83:5b:e4:73:1d:56:b3:0d:67:ab:9d:8e:59:43:e9:53:4c:af:
08:86:ab:63:80:fd:32:68:63:2f:a0:b7:09:de:74:12:d0:6c:
75:31:33:89:44:64:04:8f:b5:e2:5d:c4:f6:c9:fb:59:97:a5:
64:6f:dc:98:36:b4:35:2a:ab:2f:65:28:9e:37:fe:63:84:5c:
3d:9d:1b:e2:05:ee:86:63:b7:0e:33:e4:63:b8:a8:6e:e4:3d:
bd:3c:4f:f9:28:e8:5e:c0:46:b4:28:a8:be:7a:aa:f7:32:f1:
36:33:9c:ae:3f:08:c2:97:a8:34:01:f4:0b:d1:e2:73:0b:2e:
fa:04:27:e5:4c:99:c0:05:a7:64:74:f6:f6:03:1c:1b:ec:b3:
43:a5:eb:28:06:20:2f:89:36:99:88:8e:e5:a6:de:71:fb:ec:
4c:4e:09:42:8c:74:84:f1:28:c1:f1:ff:dd:8a:2e:43:77:11:
8a:34:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:29 2026 by rpki-client