
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: wV3qN01Z6ghjzTMqkAXKd9m/2Z/zW8u4HEQYu5qPKa4=
Subject key identifier: 72:09:21:69:42:B3:AF:B9:7D:B9:5A:84:EA:E7:42:A2:25:60:F7:80
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 0391
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 0385
Signing time: Mon 27 Jul 2026 01:52:43 +0000
Manifest this update: Mon 27 Jul 2026 01:52:43 +0000
Manifest next update: Mon 03 Aug 2026 01:52:43 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: 2oucEfs6hP9pwK69yWqphlpGpBu/+hIMUGd+6W/NSvg=)
2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Q6NYe2Vl6swnL94bFMvFyQ1nEGZFVn7Br4W4RJTVQEQ=)
3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: OIfGssLEQpbD7cZsL0poYC+ggBlzdXE7TwY8gIPebIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Jul 27 01:52:43 2026 GMT
Not After : Aug 3 01:52:43 2026 GMT
Subject: CN=6a66b9eb-21a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:a5:34:df:9e:d3:69:a4:64:b1:e1:d4:6f:
8d:97:b1:88:b9:c2:fa:80:bf:61:cb:46:20:2a:0b:
27:e4:53:03:df:ab:1a:4d:08:9c:d3:8e:a5:16:8f:
46:54:ae:e7:b8:a9:89:64:f0:f3:af:66:eb:ce:78:
1b:d5:fe:98:5b:fd:3a:2e:6a:f8:03:03:66:e4:90:
3c:1c:70:4d:63:58:99:2d:eb:b1:93:a5:e0:80:d9:
3e:74:59:65:75:04:d9:09:64:a4:c9:bc:b7:cb:bd:
68:86:5a:20:76:80:db:0e:4d:0a:a0:8c:c1:6f:89:
f3:d6:ed:52:be:66:f9:7a:e1:b7:e8:d1:46:8f:4c:
64:2e:15:ca:dc:ae:d0:7b:7f:aa:6a:ee:3f:74:64:
3d:14:d4:bf:33:f7:e4:7d:43:f0:b1:9d:7b:ea:49:
fb:07:3d:5d:3e:78:c1:42:b5:b5:bb:55:e2:e3:2f:
3d:df:00:eb:c0:e9:37:cb:54:45:78:36:9b:18:f6:
57:95:bc:55:c5:87:4d:e5:24:e3:9a:04:91:a4:d1:
9d:20:a8:4e:5e:74:3c:e7:1a:d2:2c:74:8b:5e:17:
8f:07:d0:a5:d0:33:c1:07:ae:ee:cf:53:0e:6a:bf:
1f:ce:e4:ba:e0:88:93:e8:e2:e1:fc:75:69:27:46:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:09:21:69:42:B3:AF:B9:7D:B9:5A:84:EA:E7:42:A2:25:60:F7:80
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:19:e4:be:15:66:b3:dc:0a:a2:eb:9b:3f:91:08:3b:43:
d0:e1:a2:9c:5d:c3:9a:ba:b2:3b:70:73:23:a8:5c:11:7a:93:
87:db:8c:da:e9:32:3b:0f:8a:ed:41:ea:9b:17:22:10:e4:fb:
15:31:24:7d:f2:76:bc:6f:f0:ab:4b:c5:e0:c1:53:88:ef:21:
41:a7:c8:97:d1:3d:3c:53:58:d3:49:7e:40:66:44:c6:7b:79:
36:a2:6d:0a:05:ed:1b:45:1a:5b:87:9a:a4:34:f5:f7:17:4d:
14:37:32:54:2b:9e:8e:41:56:72:ad:07:15:aa:e7:df:38:e4:
7b:97:b7:0d:ad:01:0c:13:01:66:cb:3f:f6:70:4a:95:83:6c:
d2:ef:05:8f:fb:fd:a8:83:61:95:51:ca:1f:48:fc:fe:9d:f2:
89:d5:a1:4b:66:75:af:97:2d:ad:7e:0b:7f:28:f4:6e:b6:d8:
b7:05:a0:2f:25:57:92:fe:5a:b0:1c:e8:ef:44:eb:df:7e:2f:
a4:de:a8:8c:f6:25:89:e9:c7:ee:6c:ae:27:86:78:02:a3:e3:
d8:3b:74:21:d8:35:4e:d7:36:ce:d8:1a:67:79:93:b6:0d:92:
ee:54:f8:c6:37:e6:f8:0f:71:18:09:f6:c2:92:ab:f0:7a:de:
3b:3f:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:29 2026 by rpki-client