
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: pTIzFpeSJ38YShdz+u8u/sErv0j8AkRavU9oVKIGUQQ=
Subject key identifier: 0C:27:FC:DC:08:D4:B9:73:61:D4:8F:AD:29:FF:9B:E1:EA:A7:67:D1
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 035A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 0350
Signing time: Fri 17 Apr 2026 00:50:42 +0000
Manifest this update: Fri 17 Apr 2026 00:50:41 +0000
Manifest next update: Fri 24 Apr 2026 00:50:41 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: pHqsZFwXPuBhcl/yNNQjwyQKE4uoxZu6VQoMK0+0Xy0=)
2: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: RLoDGqQrLMN8RtNfib91dVRLKMKiKWs7GUo1oIVrybg=)
3: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Nz0DVL+CvZ5dT8akmCAjwfXowXzmBOEn4Hxk/rEQ7LY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Apr 17 00:50:41 2026 GMT
Not After : Apr 24 00:50:41 2026 GMT
Subject: CN=69e183e2-f5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:6d:a5:ca:c4:5e:52:52:02:aa:4f:8a:f2:
7b:1b:7a:0d:a0:4e:1b:cb:3a:c6:46:87:83:dd:ea:
37:ac:9e:c8:6d:9a:7f:b1:e9:2f:e4:13:16:d3:d2:
4c:f5:eb:9d:7b:b3:f8:da:b1:e1:1b:08:d5:3c:23:
56:3e:85:0d:9a:d7:24:5f:1f:f8:d6:1f:4f:2f:a9:
23:77:f7:d5:7b:1b:64:b9:8b:21:37:79:04:53:0e:
4e:58:6a:1b:eb:34:c1:03:a0:22:67:cb:56:6f:23:
30:c9:17:b5:40:4f:22:25:cc:44:44:ec:27:50:43:
f5:b5:ce:60:95:a1:c8:22:d7:8e:f9:13:db:c0:66:
6d:66:45:f2:85:77:81:05:10:c0:bc:13:f2:c0:c9:
c4:04:88:59:cf:c0:aa:6c:03:32:b7:b4:14:be:67:
f0:35:34:3c:87:76:74:97:14:dc:12:38:1f:95:43:
39:99:94:79:47:b4:51:74:fe:bc:bb:e7:ce:8d:49:
d1:7c:2a:ea:df:ba:f9:d2:af:f6:01:a1:0a:48:f3:
8d:e3:00:4e:2a:67:4c:fd:7d:da:0e:2a:5e:38:1c:
77:b3:99:fc:71:8f:a7:85:47:43:1a:49:d5:3f:ef:
31:33:a8:e8:21:57:60:5f:f1:f5:8a:1c:2a:3e:3f:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:FC:DC:08:D4:B9:73:61:D4:8F:AD:29:FF:9B:E1:EA:A7:67:D1
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:07:86:94:d7:a6:aa:6c:69:27:ee:70:c5:13:98:e4:18:
59:e9:d7:20:06:92:07:9e:b2:8d:b0:74:b6:0b:f2:c5:4f:d2:
14:5d:90:ab:8a:5c:32:2f:a3:c9:f1:b7:a2:a9:6f:bb:2b:31:
ba:45:fb:72:e6:6f:c1:c1:1d:88:28:91:e6:cf:45:3b:14:fb:
19:f1:e1:17:f9:fd:32:a8:13:28:4b:f8:c9:ce:61:14:fb:e4:
66:dc:3b:ec:a0:96:e2:b4:a7:f7:23:c8:09:4b:f3:48:4e:ec:
a1:93:5c:25:45:7e:19:4d:61:93:75:0f:5f:87:01:12:2d:36:
68:e0:f9:ce:8a:37:88:65:bb:b3:de:dc:8b:e0:1f:3f:22:6f:
fc:c9:5b:1d:a0:23:0b:41:53:83:28:8d:a8:8e:73:2d:32:75:
9c:6e:e3:66:52:2f:33:bc:6b:52:77:47:6c:cd:67:a6:17:57:
5c:2b:15:6e:cf:a5:4f:1a:94:4e:d2:54:b4:27:14:32:ea:9b:
7d:10:52:55:28:ed:04:61:f5:37:9c:28:4a:c4:3b:ba:67:ea:
f3:b7:de:3f:e0:d0:a6:0e:b4:c6:ef:b1:71:af:9d:b3:af:1a:
8d:20:41:94:27:67:9f:7a:dc:99:05:d8:68:dc:b5:4c:04:ba:
23:5e:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:20 2026 by rpki-client