
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: kItIxVkbA7/EkAsE8GdBpln3jcypHWGx+3L+8s/kDdY=
Subject key identifier: FE:01:AA:05:AB:A7:62:D1:7F:B1:F6:71:80:FA:19:A9:76:58:9B:75
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 03B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 03A4
Signing time: Fri 25 Sep 2026 00:28:02 +0000
Manifest this update: Fri 25 Sep 2026 00:28:02 +0000
Manifest next update: Fri 02 Oct 2026 00:28:02 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: M4CKpWx4HZnYV9VTdr3TYto4Kq1Mu0VKyhCHry9ddoI=)
2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Q6NYe2Vl6swnL94bFMvFyQ1nEGZFVn7Br4W4RJTVQEQ=)
3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: OIfGssLEQpbD7cZsL0poYC+ggBlzdXE7TwY8gIPebIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944 (0x3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Sep 25 00:28:02 2026 GMT
Not After : Oct 2 00:28:02 2026 GMT
Subject: CN=6ab5c012-2ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:f8:51:a9:25:d3:7a:4f:e6:91:4c:01:a6:
11:b8:2e:bf:3d:65:58:68:b4:d8:03:4c:30:fe:43:
0c:62:94:58:88:f3:bc:f6:23:21:97:f2:00:4d:15:
80:2e:49:1b:e7:c3:72:f6:17:7b:80:e6:ab:21:c6:
52:25:7d:fc:09:54:a6:83:37:8e:e2:97:c1:af:60:
b0:cf:3d:2f:6d:c3:7a:54:d8:d6:e0:02:ec:9e:c5:
f4:fc:47:86:ce:6b:db:bf:b3:c6:22:a8:1c:0e:ed:
0c:d2:eb:b2:3e:0d:50:ec:12:0b:86:49:ca:9e:ce:
d5:ae:36:b5:43:fd:c6:fd:c0:a6:fd:8d:8b:e3:66:
5a:07:c9:df:1c:a2:fb:6a:c0:f1:11:6b:c5:69:be:
e3:d7:36:4c:38:5b:8f:c0:80:a2:3c:4c:12:da:f4:
ed:d9:c4:48:3b:2e:dc:ef:9b:90:ae:cb:a7:25:a5:
c5:f0:20:57:7e:77:3f:b7:65:cf:c4:00:1b:d0:b5:
f8:66:90:a9:0f:44:9c:1b:e9:20:84:44:05:a5:fc:
bf:12:cb:0f:17:b6:9d:ae:11:01:49:9c:7a:05:ce:
33:90:dc:54:9e:a2:52:ca:e1:64:3f:6e:67:b3:e8:
13:25:32:da:e8:a9:94:9c:18:58:a9:38:d8:17:a7:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:AA:05:AB:A7:62:D1:7F:B1:F6:71:80:FA:19:A9:76:58:9B:75
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c3:6a:2d:ab:eb:40:01:6f:ef:68:42:e7:35:fc:43:28:06:
a9:8e:18:3e:6e:e8:73:fe:c2:11:54:4a:a0:fe:aa:72:98:dc:
45:85:98:37:74:aa:87:17:1e:27:b4:eb:b0:64:9f:4e:a5:4d:
0e:d2:7e:a2:77:9c:47:f4:ce:d8:5f:70:02:bc:53:f6:f1:c8:
05:8d:3c:2c:77:a3:89:47:50:29:21:ef:61:27:af:41:80:03:
a6:94:d1:3d:f2:12:a3:ad:62:86:f9:f3:db:bc:b3:83:3e:d9:
fc:1f:73:11:c9:67:36:55:c1:74:e3:8a:90:b9:de:33:97:f7:
55:bb:7d:7f:ca:bc:e8:81:f6:48:35:00:b1:96:c9:53:ff:61:
b1:21:c1:d6:f6:00:46:d4:2c:2b:34:1b:f8:5c:d8:f9:3d:23:
16:58:a5:3a:cc:9d:ff:22:d4:6c:99:36:77:1d:e1:18:b1:f0:
9e:7b:bf:9d:8a:66:61:db:d7:80:2f:61:2a:58:82:d8:04:b7:
e5:5d:a3:83:da:1a:0e:a6:92:72:a7:03:7a:73:66:93:12:1d:
a1:11:87:ee:ed:83:6d:6b:59:3c:1b:8d:43:67:5d:09:e0:59:
1a:00:46:86:79:6f:8a:7e:6b:b2:6a:c4:60:78:a6:36:f6:e2:
66:69:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:04:05 2026 by rpki-client