
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
File: 72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json)
Hash identifier: wCISDVnvHRWgqSZR2GCpm9I77l+FSUXSm0Aa0z1xkDM=
Subject key identifier: A5:66:AB:99:07:05:03:E6:1F:19:A0:FA:7F:44:37:FA:EF:96:AC:F1
Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
Certificate issuer: /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
Manifest number: 01EF
Signing time: Sun 05 Apr 2026 02:49:39 +0000
Manifest this update: Sun 05 Apr 2026 02:49:39 +0000
Manifest next update: Sun 12 Apr 2026 02:49:39 +0000
Files and hashes: 1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: H2BlPqB5Ij4X9S2KuaKQ06eVkA75r65/n/XpTgZP8OQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Validity
Not Before: Apr 5 02:49:39 2026 GMT
Not After : Apr 12 02:49:39 2026 GMT
Subject: CN=69d1cdc3-7686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:fa:64:9d:73:f3:26:de:67:96:e3:61:c3:
6b:c5:d9:06:13:8c:f9:23:06:ed:a6:9e:de:9f:75:
d5:2a:2f:4c:7e:c9:50:43:bc:7e:60:99:2f:2a:ff:
66:a3:c3:23:5a:7d:61:3f:0b:65:78:be:73:df:5b:
04:ef:2b:4b:8a:ef:c4:62:48:46:aa:38:84:06:5c:
d3:dd:16:24:37:28:53:f1:c9:4a:14:9a:8a:96:24:
a5:20:80:5b:20:53:35:da:2a:a7:c1:4c:96:49:d5:
e9:a2:1e:b5:f6:d9:01:24:b0:fe:65:c2:3a:56:03:
36:4a:c4:b9:44:71:0d:0f:c3:e9:7c:fd:39:50:48:
af:24:62:7b:43:e8:48:89:7c:7c:20:c5:4b:a3:70:
98:b7:6f:a4:29:b4:52:1e:56:3b:8f:b3:d3:eb:57:
16:99:ec:91:ae:1c:0b:6b:ec:98:45:5b:74:a7:cb:
03:2d:39:7f:b9:88:d3:98:db:20:07:a9:43:da:16:
23:58:d7:e6:6a:0b:cd:5e:b4:40:71:a2:e5:4f:84:
9f:82:94:56:c6:b8:d7:fe:36:1c:dd:0b:00:d3:d1:
42:48:1b:ce:34:c6:42:cf:2c:1f:ca:7a:c4:ae:8b:
f1:9e:68:fe:b3:40:9c:1f:1f:1f:6d:76:a1:5d:1a:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:AB:99:07:05:03:E6:1F:19:A0:FA:7F:44:37:FA:EF:96:AC:F1
X509v3 Authority Key Identifier:
keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:06:33:01:6c:ad:58:d6:27:fb:59:7e:66:be:85:b9:b2:
0f:55:1f:86:de:2d:f2:c1:33:57:dc:9f:8c:56:22:a7:2e:0c:
85:3b:24:37:2f:a9:71:1c:90:62:7b:6f:3e:d9:2c:ec:f3:40:
56:6f:49:17:23:41:8c:39:d2:76:5d:cc:3d:a1:a9:fe:23:bb:
37:3b:78:ee:f2:9d:b9:72:16:83:86:06:9e:83:d7:95:c3:56:
3d:e1:c4:63:29:d5:26:64:4d:39:d3:f3:91:e6:07:f3:d7:ee:
16:de:b2:aa:c2:5f:61:5f:4e:76:08:e0:48:01:9d:4a:09:30:
8a:b2:1c:56:33:02:ba:90:2c:8d:69:10:a0:6b:ae:19:9b:4a:
1d:ad:f1:b1:f0:6a:55:98:82:b7:de:b1:c1:ff:04:66:2e:21:
b2:5a:51:5d:a7:b5:dc:88:bc:38:75:d8:9c:34:4d:72:cd:b8:
c6:71:ad:81:60:0c:ac:ce:fe:87:a5:44:16:7b:db:39:ba:9f:
06:15:f3:49:6b:da:6e:75:43:9d:89:9f:11:16:31:0b:98:73:
9d:a4:ff:ac:d4:99:54:5d:44:a3:ac:d3:3a:cf:78:fc:fa:82:
32:c1:90:db:99:22:07:cc:65:33:0a:b9:eb:1a:08:8d:be:d2:
15:37:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:12 2026 by rpki-client