
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier: KffSjQ6bJw8x/14s6HdEvqFDKXOdn5KOWrFexs68qWs=
Subject key identifier: A9:52:04:42:49:4E:8D:5B:F1:6A:B2:DE:9A:67:A1:E1:79:14:DA:07
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number: 01C2
Signing time: Sun 05 Apr 2026 03:30:32 +0000
Manifest this update: Sun 05 Apr 2026 03:30:32 +0000
Manifest next update: Sun 12 Apr 2026 03:30:32 +0000
Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: AuWVDIYmruWc+8HSTdP1890vEs8sMxbV5G71AiFI+Kc=)
2: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
3: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Validity
Not Before: Apr 5 03:30:32 2026 GMT
Not After : Apr 12 03:30:32 2026 GMT
Subject: CN=69d1d758-012c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:12:64:43:f4:22:bb:49:4a:bd:72:12:6b:
62:76:97:82:39:7b:63:e6:66:3a:4b:86:e4:7a:9d:
19:44:ad:08:ca:8e:eb:05:04:f1:c7:ad:8b:d6:69:
ac:75:44:e8:7f:40:35:68:71:11:da:67:a2:d8:a4:
c4:23:b6:41:91:55:d9:22:f5:7f:d8:10:72:b4:e2:
08:7c:8a:33:d6:a2:24:a8:fd:54:27:80:6a:60:53:
eb:57:14:5b:7e:14:f2:78:9b:93:d6:c2:ff:1b:43:
33:2a:96:b9:21:bb:db:bb:e9:1c:ec:38:4d:5b:ca:
b9:40:39:fc:ce:98:ef:bf:57:bc:7b:0d:ac:f8:14:
a2:8e:df:fe:cb:42:64:d1:02:2d:91:a5:55:18:17:
7e:83:87:45:23:ec:f8:59:5f:a5:1a:49:1d:e4:6c:
99:ff:1d:a8:af:d4:ee:25:dc:91:fb:87:1e:6a:75:
b7:f5:b7:dc:79:8f:b3:d6:48:7a:a8:a5:9a:8e:5b:
e7:d1:06:cd:5f:4d:ed:99:55:5c:0a:25:d4:e7:f0:
be:a4:3e:1c:b1:08:2e:eb:25:c4:8a:ed:23:cc:6e:
1c:de:4e:f5:5c:07:e9:e5:cb:8e:de:80:7e:0b:6f:
c7:ea:8e:b4:46:20:6f:b0:6d:1f:f6:0d:05:65:91:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:04:42:49:4E:8D:5B:F1:6A:B2:DE:9A:67:A1:E1:79:14:DA:07
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9e:49:a5:d8:35:e7:c3:6d:a3:2d:32:64:e1:74:32:b8:2a:
7e:05:09:9c:65:9f:85:90:39:88:70:3e:6c:db:70:62:ed:bb:
a9:45:47:ae:24:2d:2c:5d:ec:12:31:86:63:cd:5c:58:df:77:
9d:da:b9:22:4b:df:2a:41:d3:c6:a4:b6:8d:db:e0:e0:0b:8e:
b0:d0:b5:1f:21:ce:84:01:d9:6d:55:38:21:a7:a3:c3:ef:5f:
39:b5:65:27:0a:a1:6a:52:22:00:ac:1d:66:13:63:03:1e:f8:
c6:6f:85:17:37:fe:c1:85:19:ac:b7:27:44:12:45:ec:b8:7b:
65:61:59:fa:12:58:bf:70:bf:92:0e:91:cf:74:26:26:f6:8d:
6a:11:8c:6e:b9:c1:58:43:c1:ff:36:23:a7:d4:7d:a5:b0:0c:
4c:aa:08:50:95:2a:05:4b:0e:ee:4c:20:eb:10:e8:5a:7c:56:
8c:8e:87:e6:90:06:8e:f5:7f:52:9a:99:d2:fa:b5:05:3d:16:
f3:ae:7b:22:3a:54:f6:12:e2:7f:f7:8f:55:df:2f:95:b6:52:
35:bc:30:1e:04:b7:0a:7e:9d:24:48:1e:1b:ee:97:9e:9d:8f:
0d:ec:ff:ab:41:1a:fa:52:d4:38:c0:0a:3b:aa:8e:8b:84:b2:
29:60:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:09 2026 by rpki-client