
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier: j92KB2PhEedQ/me6YGcUELgNKekVz+v8bNM8vM0VMl8=
Subject key identifier: C3:67:CC:DB:7A:A4:5F:B1:92:08:AF:1B:EC:41:A3:D9:12:12:C5:B2
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number: 4F
Signing time: Fri 17 Apr 2026 07:58:11 +0000
Manifest this update: Fri 17 Apr 2026 07:58:11 +0000
Manifest next update: Fri 24 Apr 2026 07:58:11 +0000
Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: PMkMn95N03sC3N6sOnetTrNhVVpvKJeGxX/MuJh88fU=)
2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Validity
Not Before: Apr 17 07:58:11 2026 GMT
Not After : Apr 24 07:58:11 2026 GMT
Subject: CN=69e1e813-9662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:81:04:27:51:41:7f:fc:64:61:bf:dd:d4:
6f:37:81:69:77:98:a8:d3:d7:8a:fe:c9:08:50:19:
2f:e1:2b:27:66:40:b6:50:2b:77:86:a2:02:d1:7b:
11:e5:d9:d5:cc:54:90:91:36:8e:75:bd:32:d6:e4:
e7:45:20:51:33:12:d1:7e:86:a7:05:bd:12:73:cc:
96:1a:19:35:87:cd:48:e4:b1:a3:f2:52:2c:68:b2:
de:85:dc:e8:44:4b:9e:6d:ae:2f:2c:d6:31:31:1a:
5b:2a:57:ed:2a:d0:0c:00:f0:0f:c7:f2:bb:de:2c:
87:6c:2b:5b:63:a6:aa:4f:ee:4d:ef:f1:91:3b:09:
13:9c:c9:3d:02:50:e6:e8:41:02:0e:58:ee:a9:e8:
02:ad:36:58:93:61:25:a0:fd:c5:ac:20:94:de:3f:
42:34:cf:0b:c1:a0:1e:92:6f:97:69:f9:e2:2e:db:
97:5f:d4:a8:33:49:cb:1d:ce:79:8e:04:c3:1c:f7:
17:2c:c0:be:6e:dc:79:48:be:89:6a:3a:d5:cf:59:
81:08:c4:5e:e3:50:37:fa:24:1f:75:85:17:60:47:
d6:93:1e:49:4c:49:1d:00:a1:56:b3:eb:35:6e:df:
a7:66:7c:74:95:d0:4b:f9:86:93:78:3b:38:b9:4e:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:67:CC:DB:7A:A4:5F:B1:92:08:AF:1B:EC:41:A3:D9:12:12:C5:B2
X509v3 Authority Key Identifier:
keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:c6:73:18:d8:f0:bf:3b:a4:c6:f4:d6:4c:d9:8d:cc:05:
4c:fa:e8:60:a8:f2:5f:c2:81:d4:e9:f0:ed:1e:fd:22:54:27:
72:49:23:de:f5:62:12:8f:43:f9:aa:4f:4f:1a:d4:8e:fd:94:
2a:aa:d7:27:47:c2:bd:46:79:08:11:b4:b0:ff:cb:e8:8b:54:
be:3b:3a:28:e6:53:81:7d:1e:25:96:6d:f1:53:64:52:7f:fb:
67:48:95:ac:e3:2e:20:58:b6:18:c5:30:63:0e:ee:18:7e:2f:
96:41:3a:51:7e:0e:32:82:30:89:ce:6d:32:9e:84:70:fc:b1:
3a:49:7f:c5:b2:32:17:e3:93:01:62:19:6f:2f:d9:a5:d6:1a:
4d:48:2a:d9:eb:fe:91:8d:59:1d:9d:9e:e5:08:28:78:f3:22:
f8:cd:19:ed:29:12:16:76:88:aa:de:a7:7d:4c:69:6c:38:18:
2e:ed:05:6c:ec:f9:97:94:e2:18:f5:3a:6a:79:9e:7c:ed:2d:
39:da:b4:ce:89:09:0c:81:0c:83:e7:7d:94:f9:e1:2f:d9:e3:
39:85:0e:74:73:aa:ce:9d:a6:db:13:0d:5a:49:1d:ac:c2:3c:
8d:09:91:7d:c9:e9:e0:5a:61:f3:b2:57:e5:59:eb:0e:7c:f3:
0d:f1:da:05
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2
ODM5OTJFMDAeFw0yNjA0MTcwNzU4MTFaFw0yNjA0MjQwNzU4MTFaMBgxFjAUBgNV
BAMTDTY5ZTFlODEzLTk2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCl5oEEJ1FBf/xkYb/d1G83gWl3mKjT14r+yQhQGS/hKydmQLZQK3eGogLRexHl
2dXMVJCRNo51vTLW5OdFIFEzEtF+hqcFvRJzzJYaGTWHzUjksaPyUixost6F3OhE
S55tri8s1jExGlsqV+0q0AwA8A/H8rveLIdsK1tjpqpP7k3v8ZE7CROcyT0CUObo
QQIOWO6p6AKtNliTYSWg/cWsIJTeP0I0zwvBoB6Sb5dp+eIu25df1KgzScsdznmO
BMMc9xcswL5u3HlIvolqOtXPWYEIxF7jUDf6JB91hRdgR9aTHklMSR0AoVaz6zVu
36dmfHSV0Ev5hpN4Ozi5Tr8DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw2fM23qk
X7GSCK8b7EGj2RISxbIwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF
ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6
NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCJ1sZzGNjwvzukxvTWTNmNzAVM+uhgqPJfwoHU6fDtHv0iVCdySSPe9WISj0P5
qk9PGtSO/ZQqqtcnR8K9RnkIEbSw/8voi1S+Ozoo5lOBfR4llm3xU2RSf/tnSJWs
4y4gWLYYxTBjDu4Yfi+WQTpRfg4ygjCJzm0ynoRw/LE6SX/FsjIX45MBYhlvL9ml
1hpNSCrZ6/6RjVkdnZ7lCCh48yL4zRntKRIWdoiq3qd9TGlsOBgu7QVs7PmXlOIY
9TpqeZ587S052rTOiQkMgQyD532U+eEv2eM5hQ50c6rOnabbEw1aSR2swjyNCZF9
yengWmHzslflWesOfPMN8doF
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:37 2026 by rpki-client