
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: xiKHE8GxIhLEWdVQc31BS1Q8Cphz8sQ5gceRypIANWk=
Subject key identifier: 7A:60:89:3C:07:B5:06:B9:1D:4D:1B:A5:24:3F:68:4F:C4:7D:62:78
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 0761
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 0754
Signing time: Sat 28 Feb 2026 22:11:18 +0000
Manifest this update: Sat 28 Feb 2026 22:11:18 +0000
Manifest next update: Sat 07 Mar 2026 22:11:18 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: ADezcr2dFd634OJH/arU7ReSRvLep9j3g4+MGevOISE=)
2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=)
3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Feb 28 22:11:18 2026 GMT
Not After : Mar 7 22:11:18 2026 GMT
Subject: CN=69a36806-a234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:2b:e4:b9:76:30:a8:92:56:0d:f2:bb:d4:
4f:27:37:80:5e:e6:92:51:2d:47:8e:d3:3b:6a:c8:
e9:fa:72:8d:44:dc:d4:a1:52:73:04:c5:4f:ba:e2:
6c:f0:f3:64:51:eb:84:c7:0c:cc:14:20:50:6e:69:
74:b4:4f:d4:1d:50:bc:2a:e8:23:88:b2:5c:89:9f:
4e:a7:f3:2b:04:4d:88:e6:5c:9f:a1:98:4e:2d:d6:
97:2d:5b:26:4c:9f:72:9e:69:fc:66:c2:1a:a4:85:
b5:0e:88:27:46:13:fa:e4:6f:ba:06:28:30:10:6c:
7a:55:b4:72:86:a7:02:aa:77:10:ee:c7:a0:96:0e:
10:db:74:03:3f:9d:ef:d0:8e:18:a6:65:80:78:75:
9e:68:4f:64:f8:a9:3b:94:94:4f:9a:03:2f:07:c1:
ce:32:11:62:70:1b:12:09:39:28:fe:52:17:5a:21:
88:3b:84:e2:0c:82:05:6f:a0:d5:2c:e6:92:fd:49:
68:50:6b:1c:0b:b9:79:27:04:66:60:f6:62:9a:2e:
29:85:f8:a7:6e:be:21:18:54:91:c5:7d:75:fc:74:
3b:ad:29:2f:96:6e:1d:3b:ec:62:7f:86:94:a9:34:
63:54:ad:d0:e5:f0:19:80:70:68:60:9e:2c:36:31:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:60:89:3C:07:B5:06:B9:1D:4D:1B:A5:24:3F:68:4F:C4:7D:62:78
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:0e:72:5d:6c:64:2c:3f:20:af:64:b1:18:eb:01:22:cc:
cb:24:eb:1e:dc:3e:30:fc:6b:0f:21:86:b3:75:62:08:98:0b:
13:de:b6:27:ef:a0:26:1c:c0:d9:dd:a6:fd:0d:f3:a5:1f:19:
f1:c6:3b:f3:08:03:d9:65:85:78:c0:84:80:f4:51:48:a4:21:
52:e1:b3:c9:5d:43:8f:65:e4:6e:2b:db:66:56:99:ca:31:c9:
38:ad:08:a8:64:b8:f4:92:4e:4d:fc:e0:14:da:0a:d5:ed:5b:
f6:21:88:0a:1b:a0:ee:04:97:b2:82:b7:7f:c9:12:6f:fb:9f:
80:9b:f2:c7:21:36:87:26:c8:02:83:ee:51:7c:92:4e:7c:61:
fb:63:17:09:b2:19:f0:97:54:d3:5b:f9:67:13:a5:01:8a:11:
2b:f4:f3:e0:7e:4a:c4:16:a2:db:d9:08:fe:40:a0:ce:31:2d:
e1:04:e9:85:75:ed:37:76:34:f3:51:50:08:89:52:a4:4f:ed:
5b:7f:40:38:ef:18:88:2f:bd:fb:fa:68:ad:37:1b:7a:55:ca:
be:78:10:38:cd:30:03:42:54:7e:c6:a5:07:5a:bd:39:63:b8:
63:f7:21:7f:d8:cd:23:83:ea:f0:7d:24:d1:e6:01:0c:cc:8d:
0c:b1:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:20 2026 by rpki-client