
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: kKylJ3vUh85ln1G/9Za/7FF8G3noWlEdH7gc9ZJBTpU=
Subject key identifier: A1:66:00:55:FB:03:13:51:AE:36:84:40:E1:74:70:C4:EB:69:E4:7A
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 0344
Signing time: Wed 25 Mar 2026 00:37:49 +0000
Manifest this update: Wed 25 Mar 2026 00:37:49 +0000
Manifest next update: Wed 01 Apr 2026 00:37:49 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: 2oXow5MwTEz0wVIkVD8Xtd5qqDmSmLdfuuXBEq7Uapw=)
2: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: RLoDGqQrLMN8RtNfib91dVRLKMKiKWs7GUo1oIVrybg=)
3: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Nz0DVL+CvZ5dT8akmCAjwfXowXzmBOEn4Hxk/rEQ7LY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Mar 25 00:37:49 2026 GMT
Not After : Apr 1 00:37:49 2026 GMT
Subject: CN=69c32e5d-8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:8d:fe:26:13:95:e0:65:e5:c2:54:1b:0f:
b1:30:83:b6:4c:8f:30:99:f5:f9:53:ce:fa:94:67:
eb:61:d7:ed:0f:80:84:9c:e0:9d:02:b9:b0:31:01:
8d:0c:a6:b1:4b:60:9f:4f:13:96:bf:e8:a0:ca:9c:
2d:b3:df:cc:2f:ba:ea:c6:27:d3:0c:87:6c:99:2f:
22:f8:ab:d2:4d:9e:a3:8c:f0:7e:36:00:0b:26:cb:
78:59:f0:16:6f:05:6a:6a:94:cd:7f:d1:e4:91:6e:
40:bd:a5:4d:0a:be:0c:49:51:cd:40:50:a5:25:f1:
1b:54:3b:ed:3b:7f:ee:fa:89:d3:82:05:32:92:c4:
cb:22:fe:b3:f1:b2:c0:6b:58:91:c8:3c:37:1c:ba:
49:52:39:b9:40:02:c3:bd:07:cc:83:ac:b3:04:72:
a3:bb:ef:ef:e6:b2:cd:d6:25:e2:96:f1:5f:ec:28:
1e:5b:5e:5a:57:d9:76:06:b3:bf:c7:51:9d:e4:06:
cf:b0:0b:21:2d:fa:fe:31:4b:b0:cc:c4:01:98:c6:
ca:b7:7c:06:df:48:d4:80:a0:4a:03:de:12:52:fc:
a3:63:33:84:b6:59:87:2b:cf:c4:b5:ee:41:d1:61:
96:72:33:8d:a8:8f:5a:4d:f8:cd:ee:6b:c8:50:06:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:00:55:FB:03:13:51:AE:36:84:40:E1:74:70:C4:EB:69:E4:7A
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:16:21:50:d3:99:98:55:dc:f0:11:d1:78:8e:d2:67:74:10:
91:5d:c7:50:2b:b3:31:dc:b4:d4:19:d9:be:81:31:e0:70:cb:
93:7a:87:70:a5:4e:b7:39:20:80:30:6d:c3:c0:0e:fd:44:4e:
56:59:2b:c7:46:f2:6a:58:3d:42:3b:8d:fb:0d:d4:25:ec:6a:
cb:5c:6c:c0:4e:0e:d4:ee:ea:7d:34:f3:c7:90:18:9f:28:a8:
b0:ac:10:77:e0:21:5a:75:f7:e3:93:4a:9e:59:4a:d5:77:60:
9f:27:67:54:d5:02:e3:4a:53:41:91:b3:ee:4c:5b:d0:de:d1:
d5:78:da:2c:51:a2:46:0f:c8:f6:d1:3a:43:2f:4a:24:08:42:
11:03:92:b6:78:2c:89:52:c5:cd:1d:60:f2:6b:43:1c:8f:ba:
e5:51:1f:a8:96:fe:cf:65:e6:43:8b:0e:f2:d6:a1:1e:d3:f8:
13:58:00:99:51:01:b5:67:6a:bb:a1:df:74:6c:02:52:6b:f7:
4c:a4:87:fa:12:81:ad:60:ef:80:23:6e:14:4f:8f:5f:bf:ab:
19:d5:fe:33:0d:1d:56:34:67:31:47:0b:43:c0:9f:c7:40:dd:
19:8d:7b:06:db:95:16:04:2a:93:8d:db:b7:3d:b7:d1:b2:e2:
3e:9d:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:00 2026 by rpki-client