
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: ZNuBXTyQUtLvKpN4NC9z8bmxYXCBOmwxeeOX7YyjX/E=
Subject key identifier: 75:DF:C8:06:7B:D4:2A:FC:D9:47:47:7C:1D:B0:DC:BA:EE:81:6E:5E
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 07D2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 07C1
Signing time: Tue 22 Sep 2026 21:11:00 +0000
Manifest this update: Tue 22 Sep 2026 21:11:00 +0000
Manifest next update: Tue 29 Sep 2026 21:11:00 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: J0OAXHv4qORSIJlB0S7PAQ+ZV4Psg6SN14spU9op1Sw=)
2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Sep 22 21:11:00 2026 GMT
Not After : Sep 29 21:11:00 2026 GMT
Subject: CN=6ab2eee4-ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:66:a4:ba:56:d4:0d:08:d5:fb:71:cd:71:
e9:64:24:c1:0e:1a:f9:a7:66:e7:e3:4e:71:e4:d4:
c0:6f:61:4f:ee:22:5f:16:48:52:84:42:de:cc:e6:
ab:da:e5:86:91:b8:ef:bc:ab:99:3d:98:1e:40:f9:
de:c8:fe:fd:35:d8:35:c8:3b:34:78:f3:dc:38:f0:
0a:43:66:14:30:c3:cf:b7:f9:09:38:55:f8:23:43:
67:80:75:9b:55:54:7b:08:99:de:fa:63:99:f7:2d:
33:2c:83:ba:3e:7e:d5:9b:c2:6a:14:20:df:e7:da:
a0:2a:3d:48:e7:f5:84:79:a6:34:4d:05:26:7e:fd:
86:69:fd:6c:bb:97:c1:c9:f2:21:29:a2:e3:f5:25:
bd:59:b2:6b:41:be:77:70:02:86:a7:8c:ef:ed:28:
f3:16:94:c3:54:be:76:a1:5b:a5:71:5f:7c:76:a8:
df:77:31:0a:3e:84:cf:8f:43:d5:47:23:6d:df:a1:
66:02:06:3f:2c:c2:c6:70:46:71:7f:68:b7:26:77:
44:19:ca:5a:20:43:c5:f5:b7:84:c5:61:34:d5:9e:
86:54:79:cc:b2:ee:fe:57:9f:a0:0d:ae:f3:66:6d:
91:ae:25:9b:03:ef:dc:cd:48:e4:34:5a:b0:4d:b6:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:C8:06:7B:D4:2A:FC:D9:47:47:7C:1D:B0:DC:BA:EE:81:6E:5E
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:f6:01:b7:b4:70:08:84:84:ea:52:c4:4e:0c:db:8e:64:
be:6b:50:ea:2d:2a:79:3a:07:63:c1:32:a4:32:20:06:fd:86:
90:62:74:ad:30:9a:ec:94:b0:21:04:a9:a0:81:36:43:03:05:
66:17:65:51:48:93:9e:f6:e0:4a:e9:f8:dc:86:4c:f2:23:7e:
20:d9:07:04:a2:2f:22:03:2d:a7:26:7a:30:e9:18:69:77:35:
1c:21:87:0f:d9:5f:10:fa:fc:fa:5e:75:62:e6:d5:c6:f6:c3:
c0:b5:0e:21:e9:7f:d0:ea:4f:31:12:14:1b:43:83:84:3a:1e:
d8:fc:d9:7a:17:86:09:68:27:84:a0:93:be:60:83:74:8d:cf:
6d:82:68:91:30:c3:bf:36:2a:e0:d1:ec:7f:0b:aa:cf:ed:e6:
b4:22:27:80:8a:96:88:c0:e2:04:43:bb:21:22:c7:67:04:f9:
fe:ac:93:e8:7e:b9:44:ed:1c:87:af:41:b1:2a:94:21:b3:ad:
e6:16:b8:00:98:ca:34:c4:66:7c:f6:02:95:ab:22:1a:8f:81:
d4:04:13:da:59:c0:66:50:27:a3:73:c5:d9:2d:a9:11:ae:a5:
92:4f:a1:13:de:d7:36:b9:91:77:31:60:e3:66:24:22:4c:29:
d9:b0:d8:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB
REQ3NkVBMDEwHhcNMjYwOTIyMjExMTAwWhcNMjYwOTI5MjExMTAwWjAYMRYwFAYD
VQQDEw02YWIyZWVlNC1hYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjz5mpLpW1A0I1ftxzXHpZCTBDhr5p2bn405x5NTAb2FP7iJfFkhShELezOar
2uWGkbjvvKuZPZgeQPneyP79Ndg1yDs0ePPcOPAKQ2YUMMPPt/kJOFX4I0NngHWb
VVR7CJne+mOZ9y0zLIO6Pn7Vm8JqFCDf59qgKj1I5/WEeaY0TQUmfv2Gaf1su5fB
yfIhKaLj9SW9WbJrQb53cAKGp4zv7SjzFpTDVL52oVulcV98dqjfdzEKPoTPj0PV
RyNt36FmAgY/LMLGcEZxf2i3JndEGcpaIEPF9beExWE01Z6GVHnMsu7+V5+gDa7z
Zm2RriWbA+/czUjkNFqwTbaPNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXfyAZ7
1Cr82UdHfB2w3LrugW5eMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC
RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2
Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10
VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW/X2Abe0cAiEhOpSxE4M245kvmtQ6i0qeToHY8EypDIgBv2GkGJ0rTCa7JSw
IQSpoIE2QwMFZhdlUUiTnvbgSun43IZM8iN+INkHBKIvIgMtpyZ6MOkYaXc1HCGH
D9lfEPr8+l51YubVxvbDwLUOIel/0OpPMRIUG0ODhDoe2PzZeheGCWgnhKCTvmCD
dI3PbYJokTDDvzYq4NHsfwuqz+3mtCIngIqWiMDiBEO7ISLHZwT5/qyT6H65RO0c
h69BsSqUIbOt5ha4AJjKNMRmfPYClasiGo+B1AQT2lnAZlAno3PF2S2pEa6lkk+h
E97XNrmRdzFg42YkIkwp2bDYYA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:33 2026 by rpki-client