
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: sVHVxfCw+gBOcd6Ah5AsxoxxbtKwMRipf1p735H/UBU=
Subject key identifier: 49:78:40:B1:C4:AA:26:97:47:41:81:00:33:47:F7:CB:9A:2B:00:9B
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 0771
Signing time: Sat 18 Apr 2026 21:31:40 +0000
Manifest this update: Sat 18 Apr 2026 21:31:39 +0000
Manifest next update: Sat 25 Apr 2026 21:31:39 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: kOYYrr8lm7S6rN+JHL9OateR1BS09jXLyzWvyztC/e0=)
2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Apr 18 21:31:39 2026 GMT
Not After : Apr 25 21:31:39 2026 GMT
Subject: CN=69e3f83c-da92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:c3:a3:0b:a8:cb:21:76:46:06:aa:c1:6c:
06:b7:c9:ad:99:e5:29:b9:23:68:05:92:b3:3c:bf:
9a:a3:b8:c9:6e:4c:24:ac:b3:c6:a8:bc:b3:f9:4e:
ae:10:ca:d7:49:e2:47:e9:22:f4:ab:55:29:a9:44:
69:67:e8:b3:85:97:fb:78:61:d3:25:e9:e8:56:2d:
a7:84:7a:7c:21:8b:80:47:d1:de:f5:ac:21:a2:02:
72:7c:25:47:80:e4:0d:4d:a7:ca:04:36:02:04:ae:
f1:73:2d:b5:ea:c9:ef:36:70:47:62:b9:89:0c:29:
08:e8:24:b6:ac:34:61:d8:73:f5:7f:36:11:1e:86:
f6:42:8b:fd:76:f0:4f:5d:06:6a:64:9e:f4:20:3d:
b7:81:e3:e2:67:fe:d2:8b:20:34:e0:0a:e0:02:23:
7c:bb:72:7b:ed:4a:a4:d1:56:08:66:b4:7e:e2:be:
7e:81:9b:7c:61:05:60:e1:8c:39:cc:2d:5c:87:9e:
a5:0e:95:39:39:d7:6f:60:d8:93:b1:2e:89:d4:bc:
30:c6:85:18:7b:71:a8:f6:8f:27:b7:83:4a:75:c9:
fc:13:dc:3b:94:1e:b4:7c:93:66:ef:35:3a:3c:1e:
37:4f:20:f0:f3:f5:68:7a:fe:a5:07:d9:93:39:12:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:40:B1:C4:AA:26:97:47:41:81:00:33:47:F7:CB:9A:2B:00:9B
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:37:0f:86:6e:0d:75:91:17:7f:2f:44:ac:fd:83:a8:e2:00:
76:93:27:cc:54:5f:40:7c:6b:76:c8:8b:70:df:9f:ce:36:c2:
ee:06:e5:75:f9:25:93:0e:a5:96:17:c3:8a:d2:90:df:8c:24:
74:bf:8b:6e:00:89:9c:88:34:34:42:68:96:f6:f5:ca:2a:cd:
c6:80:f4:9e:c9:80:58:0e:54:d8:fe:96:53:69:c1:71:9e:16:
8f:d7:ec:b9:06:3e:e2:df:a3:9a:20:60:85:b0:ee:15:17:3d:
64:4a:41:c3:b6:bc:14:9c:6c:2f:b8:77:64:c2:28:0e:95:6d:
ba:5e:f2:24:3b:f6:c2:89:92:50:20:69:41:8d:db:f5:b8:2e:
31:64:70:b5:b1:17:11:7f:58:78:64:f5:15:e0:71:85:3a:82:
48:75:84:eb:4c:f2:a6:d0:e3:49:f4:32:78:8a:e2:cc:1b:f1:
fa:b1:ea:d1:52:a1:dd:fc:94:3f:08:1d:58:c9:93:7e:44:dc:
c4:ce:2e:20:94:d4:a3:df:e8:04:07:03:f7:11:4a:40:cd:1a:
db:57:25:92:e9:b9:59:9c:f8:f2:a3:e5:b9:45:d0:8e:79:0c:
7e:90:41:a6:54:85:e7:bb:8b:31:da:a3:3b:54:f7:aa:cb:0d:
ec:5d:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:57 2026 by rpki-client