
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier: mgnXlYOlDc3V1lyeWFNU1s8xP0ahxFh3gg1LIlxMOM8=
Subject key identifier: B2:FB:96:89:E1:30:90:7F:74:71:E5:F5:6E:0F:D3:B6:76:07:D3:84
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial: 0729
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number: 0721
Signing time: Sat 04 Apr 2026 21:37:40 +0000
Manifest this update: Sat 04 Apr 2026 21:37:40 +0000
Manifest next update: Sat 11 Apr 2026 21:37:40 +0000
Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: Psk0hn3woIqjktxXRzjytiZjasmWIcPZ9JbR4sxBub4=)
2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: Ck2Qok/2TKHWJ1WhyS73ofFb+puPh3hrhRRG4T4K9QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Validity
Not Before: Apr 4 21:37:40 2026 GMT
Not After : Apr 11 21:37:40 2026 GMT
Subject: CN=69d184a4-807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:b4:f8:5f:e0:fb:d9:fb:4c:c0:4a:c4:b9:
cd:97:26:1d:9c:05:8f:cb:48:97:a3:76:7b:78:41:
85:42:d8:16:e5:db:ab:5f:25:59:0d:b0:26:16:ba:
b2:51:fc:43:df:b8:96:88:0a:98:e4:92:37:28:fb:
d1:0f:4b:5f:ce:87:18:61:76:0d:9a:63:f6:23:ed:
fb:6d:97:3b:be:a0:9c:22:ab:59:fd:c3:1d:50:98:
fa:3d:72:b6:52:59:b6:55:b2:1e:4b:e1:ff:6e:c1:
67:55:3b:2c:cc:2a:f1:93:7b:ea:af:34:05:62:f8:
8e:00:76:89:a6:10:46:f5:59:51:98:a4:28:67:f8:
46:a2:ab:77:64:0d:3e:03:29:40:fa:5e:57:67:cd:
73:1e:a0:a9:83:c7:bf:fe:76:46:4e:fd:37:35:b3:
ff:64:28:31:7b:9c:d0:d7:68:c4:ae:9a:bd:b4:22:
e0:1f:ac:c2:f1:a0:fd:17:dc:ea:3f:48:4a:c7:42:
cb:a0:b6:49:cf:00:c5:72:f1:ed:cd:62:45:50:5d:
64:33:9d:91:13:03:63:c6:f3:92:bc:d2:22:16:6c:
ca:ac:5c:13:6a:85:38:a4:b4:b1:5b:d1:22:c0:86:
3d:a5:df:2a:23:09:b8:54:b7:19:20:03:c7:bb:06:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:96:89:E1:30:90:7F:74:71:E5:F5:6E:0F:D3:B6:76:07:D3:84
X509v3 Authority Key Identifier:
keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:01:3f:b0:8a:cc:24:e5:d8:c5:59:33:94:ad:dc:26:91:
b2:0e:ff:34:a5:cc:21:a7:b5:08:fd:19:a7:02:99:03:de:d5:
e0:48:bb:c3:58:d3:38:d0:e1:4a:d6:21:47:c1:58:36:26:ea:
aa:be:08:1a:cf:20:2e:63:d7:41:bb:21:39:b8:54:73:39:44:
35:92:19:1c:ef:54:18:65:be:41:96:64:1b:bb:56:ef:14:8b:
c9:4c:cc:8f:a2:ff:2c:45:5e:9c:b6:d2:8b:86:89:09:9e:55:
8a:8e:f9:5b:8f:b2:d5:9c:23:37:91:e5:c4:eb:4c:87:8b:08:
aa:bd:9c:81:f8:09:50:da:37:4e:47:87:52:67:da:ff:45:d4:
b7:1f:f7:e8:18:15:1b:3e:b0:3d:36:73:f6:2c:4b:29:54:5a:
b0:c4:a3:7f:23:85:e5:2c:91:d6:0e:fb:80:e3:72:53:39:3f:
e6:3e:e2:7d:0b:a2:55:73:bc:c4:d7:e2:0b:47:8e:a2:2c:a6:
a5:d5:b8:7b:10:1b:4a:11:d8:0f:70:74:c5:23:1e:db:61:14:
4d:a2:17:7c:c4:cc:cc:c8:16:07:f6:97:19:97:8a:ce:48:35:
7e:65:da:dc:df:f1:e5:63:46:86:d3:e7:81:12:39:9d:06:5c:
f9:d6:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:47 2026 by rpki-client