
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: XBmI+FeLRmY6t9nLovHzdBzkCXVv9YG4yR4+H/w3EAY=
Subject key identifier: 61:42:FD:31:B8:94:F6:D6:B6:91:DB:6B:25:6D:C8:BC:2B:C8:9E:20
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 037B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 036F
Signing time: Sat 13 Jun 2026 00:52:00 +0000
Manifest this update: Sat 13 Jun 2026 00:52:00 +0000
Manifest next update: Sat 20 Jun 2026 00:52:00 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: C61P2lpTEjlqvWCCCW+ouBOUT9QmU8ll7RsvhGrEDrY=)
2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Q6NYe2Vl6swnL94bFMvFyQ1nEGZFVn7Br4W4RJTVQEQ=)
3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: OIfGssLEQpbD7cZsL0poYC+ggBlzdXE7TwY8gIPebIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Jun 13 00:52:00 2026 GMT
Not After : Jun 20 00:52:00 2026 GMT
Subject: CN=6a2ca9b0-508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:93:a3:2e:47:a0:ce:ba:45:ca:eb:31:c6:
d0:0d:ea:32:15:27:45:77:3c:0d:5f:08:9d:a8:5f:
c8:15:c6:72:0a:73:57:b9:10:da:b6:90:bf:b1:37:
c5:0b:e9:eb:4d:c0:a9:cd:3a:91:bd:30:68:80:45:
2a:45:23:4a:c1:a5:5a:20:92:4e:c8:12:05:0a:f2:
de:3a:c1:45:01:c1:a4:b1:f2:49:1d:54:df:f9:2e:
46:2a:fb:a7:8a:93:29:67:e9:b3:f9:d8:ac:33:ee:
1e:1b:87:7f:ba:d0:08:51:5d:3c:ce:8a:ec:ae:cf:
24:83:f9:8d:a3:70:4a:09:8f:5d:80:89:a3:2e:d0:
15:b9:10:92:8b:54:07:0b:8e:cb:2f:3c:3c:d1:8a:
36:61:b3:5e:3d:c3:68:ad:4e:7a:ff:47:bb:d1:8b:
ba:06:3c:4d:20:b5:b1:b5:df:3b:82:e7:f4:a4:f8:
18:38:59:96:2f:12:e5:ac:3c:b4:ed:4e:22:39:ea:
e6:04:b1:c2:45:2a:c7:f0:b1:28:d4:1e:44:ee:db:
81:e8:d8:87:97:6b:d1:bb:62:ad:d1:b0:45:33:0f:
43:d4:6a:03:5a:ce:73:04:94:3d:45:9d:27:dc:b9:
bf:80:24:13:9d:18:81:c1:dc:d9:2b:2c:44:b2:17:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:FD:31:B8:94:F6:D6:B6:91:DB:6B:25:6D:C8:BC:2B:C8:9E:20
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:54:1c:22:95:3a:e6:49:9e:d8:e2:4a:d5:ef:6e:c3:61:
d3:23:2e:14:49:2b:cf:98:31:80:02:22:d4:79:94:ea:04:9c:
60:78:ed:24:c5:9e:39:bf:2e:ca:9d:5b:53:34:d7:bd:eb:13:
50:68:f9:bc:66:c8:87:8e:1c:8a:03:23:d4:2a:b2:1e:ab:4f:
a8:fa:73:dc:ee:ef:17:2c:98:06:c7:b5:c6:d5:0a:89:84:e2:
db:91:69:58:a8:cf:0c:b4:4c:82:e1:b2:40:1b:55:b7:0d:72:
eb:6a:ce:12:c9:57:64:1f:d0:38:25:eb:e9:1f:4d:53:d0:6a:
4d:5b:e1:95:35:3d:43:e5:e5:4b:78:f1:c7:ce:17:a1:e5:1c:
7a:e5:1f:79:63:96:b3:50:90:11:bb:45:d9:cb:a4:a9:d2:45:
cd:c0:88:49:56:e6:60:ff:41:d6:c6:2f:b8:cd:1c:e6:d5:37:
74:be:a9:bc:fc:8b:04:5c:53:e6:13:2b:5d:a5:b5:34:fa:a8:
7d:53:05:55:47:72:ba:49:2c:fa:08:dc:98:ea:fb:66:9b:d6:
44:ab:2e:33:3f:2d:ab:d8:6d:6c:b6:49:d6:31:c0:3e:87:bb:
1d:0f:b8:2c:99:6b:10:b9:bd:66:78:c8:55:6b:92:b8:97:e8:
14:d5:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:07 2026 by rpki-client