
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier: JB+vfZ1YSSlcNp3grzhifVd9XXDcb7itrhS6ZjIW008=
Subject key identifier: A7:B5:AD:73:49:93:D2:18:15:E0:9C:9F:50:6E:64:68:61:DF:41:2C
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 1330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number: 1305
Signing time: Fri 20 Mar 2026 16:52:23 +0000
Manifest this update: Fri 20 Mar 2026 16:52:23 +0000
Manifest next update: Fri 27 Mar 2026 16:52:23 +0000
Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: bdqNSCai6SOiwsC9zxEXNuTo5KdqRj4wnZEW03YTdV4=)
2: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: 96/u/vfI+bwY9VG+LkNCPlB++nMFvbH2aJWjRVlgcT0=)
3: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: QFWUYSiZUJc8h7YGZVvOm14atuGAeik2TO0HfRh5JB8=)
4: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: pA/9FBNMln0DoNLtOKkiTbgr8bTJzminkkAizik/o0Y=)
5: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: BhycUplre6fTkJAbGpyBSXmycS7IRjXv3cPTzMpBNhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4912 (0x1330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: Mar 20 16:52:23 2026 GMT
Not After : Mar 27 16:52:23 2026 GMT
Subject: CN=69bd7b47-4527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:f9:b1:dd:8f:fd:19:6d:bd:d4:b4:6d:62:
3c:ce:1f:0e:6b:55:22:50:d7:44:f0:56:1d:6d:49:
52:a0:c6:14:34:94:c4:d7:ad:01:e8:e8:e9:81:97:
ca:c2:d6:bf:5d:d9:32:51:61:11:a1:69:79:d6:88:
65:4f:b7:78:93:c4:d2:3c:c3:b6:19:7b:06:2c:a7:
7d:87:d7:2a:d8:5a:e1:24:ec:88:12:6b:e3:8d:ec:
71:38:4c:91:5a:d7:2f:6d:ac:2b:ac:2b:08:5c:85:
5f:9d:42:29:cc:d9:9a:9c:de:6e:86:c2:3b:93:f1:
6f:da:02:56:dc:b6:b9:64:8d:ab:36:de:1e:05:2a:
49:20:83:a9:20:cc:08:89:c8:d1:85:15:6b:52:8d:
92:6d:52:aa:de:40:f9:d1:cf:7d:0c:3e:8b:4d:bc:
6d:2b:58:a9:45:67:8b:0e:14:89:42:db:79:99:fa:
fc:c8:6d:45:b6:46:b8:18:55:6c:5d:11:c1:a5:01:
0b:37:ad:1c:f5:59:4d:d5:5b:0a:cf:bb:34:53:85:
dd:02:f4:e1:f8:90:c6:48:aa:ef:06:97:aa:be:0a:
74:d7:9f:9d:12:0d:16:07:21:44:69:09:4a:76:ea:
5d:5b:e4:82:bc:ec:95:e3:ad:cc:4f:91:2a:3c:1e:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B5:AD:73:49:93:D2:18:15:E0:9C:9F:50:6E:64:68:61:DF:41:2C
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:66:81:9c:27:fd:1f:52:e9:1f:c0:7c:25:18:ba:b1:a4:d1:
8a:a5:f7:11:3d:28:ea:a0:9c:5a:24:1f:b0:c1:8a:98:af:64:
78:a1:e7:24:e1:37:5a:2f:81:87:d8:42:03:10:de:c3:8e:69:
73:62:45:4e:75:04:94:bd:c3:29:f6:8d:06:9d:24:77:41:5a:
45:7d:c2:33:f4:04:53:a3:06:f3:9f:6f:70:63:2a:d6:9e:01:
b2:f2:52:48:3a:22:a2:ca:b8:e2:4b:e0:6e:87:93:db:da:3d:
b6:ec:06:b6:16:4e:67:9f:3c:17:b1:73:0e:40:9d:60:5f:22:
16:cb:46:5b:2d:f6:1f:a6:db:f2:50:ca:54:bc:2b:e0:50:83:
e4:f2:a8:e3:d6:c2:6b:be:93:b9:7e:bd:fb:bc:41:89:45:e4:
3b:bf:cd:96:d6:d6:a5:2b:50:94:82:f2:13:3c:44:38:5f:89:
2b:46:c7:e4:d2:b0:b9:e5:78:fb:d2:88:bd:96:7f:d7:8e:f6:
04:1a:65:f4:0a:88:75:d0:22:19:66:15:54:81:f8:68:39:77:
aa:25:ae:b8:6e:07:9a:a6:25:4d:44:51:91:e8:bb:43:84:f7:
ef:19:77:50:40:2f:0b:f3:a7:1d:bd:23:43:2a:b3:9f:43:55:
f0:91:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:54:42 2026 by rpki-client