
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json)
Hash identifier: wzwEeiyl9Z8V1KQTxj2VPt7qXUuWC5V11s3kFvV9mBQ=
Subject key identifier: DA:1E:FB:8E:D0:46:7B:8B:2B:D6:08:53:11:E2:85:BA:12:BD:3F:8C
Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Certificate serial: 08DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
Manifest number: 08CF
Signing time: Mon 22 Jun 2026 20:27:29 +0000
Manifest this update: Mon 22 Jun 2026 20:27:29 +0000
Manifest next update: Mon 29 Jun 2026 20:27:29 +0000
Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: YYtdk/PIvo+B3gRndvYwx+GlnQ1zpFpikpgXbsmeqQM=)
2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: +PCxlBcrUQ01gjtIwgn/yayahZV/k+s8u1ahf84hyOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Validity
Not Before: Jun 22 20:27:29 2026 GMT
Not After : Jun 29 20:27:29 2026 GMT
Subject: CN=6a399ab1-d227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:70:fd:41:60:6f:b1:3a:36:63:01:23:bd:
6a:2a:2d:9f:7e:68:de:92:97:1b:62:50:01:e5:ca:
79:32:b7:37:e8:14:77:aa:46:aa:93:bc:2c:1a:f9:
76:e4:b6:24:98:32:4e:1a:5f:5c:47:2e:3d:1f:8d:
d3:94:e3:2e:e2:a4:2d:c8:23:31:be:6a:77:9b:d2:
ef:8e:7f:45:51:62:ef:7a:ce:64:c4:f0:2c:9a:2d:
9b:03:fd:4c:d5:4e:4a:68:f6:4c:7b:29:95:37:88:
31:41:af:47:90:0e:c1:0c:9a:44:15:47:1b:08:cc:
b2:a2:f2:4a:3e:d1:29:80:36:18:78:f1:cf:f0:5e:
d7:49:6e:00:2a:78:6a:13:b9:c7:13:59:d9:aa:83:
f2:51:fa:8d:a6:1d:20:24:52:f2:8e:b2:0b:e2:12:
8e:78:73:15:0c:af:c6:5f:83:26:be:7a:cf:77:82:
25:16:aa:09:69:3f:1b:d1:6b:0a:35:18:67:96:31:
93:a4:18:2e:c5:e9:e8:2d:98:37:57:a3:ac:aa:e8:
97:c6:ad:d8:ee:c2:22:f6:55:95:a0:08:88:81:d9:
b2:a1:a5:72:61:a7:4f:b6:e4:39:e2:1f:af:46:f0:
6f:08:d4:a9:8b:3b:55:f7:23:c2:a9:50:6e:af:9b:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:FB:8E:D0:46:7B:8B:2B:D6:08:53:11:E2:85:BA:12:BD:3F:8C
X509v3 Authority Key Identifier:
keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2d:15:0e:8a:fd:3a:61:43:7a:50:41:3a:f2:b3:fa:1b:f7:
69:47:ca:a2:97:30:18:be:65:91:5b:29:42:fe:62:8b:1b:7c:
46:0f:f0:a4:f5:b4:67:59:17:7d:4e:13:af:78:cf:40:4f:ec:
7b:70:b6:9c:ab:b2:71:ba:3b:ec:f5:67:5d:9a:94:fb:1f:a7:
c0:55:15:3c:b7:6f:0b:10:60:16:5e:86:25:9b:45:7d:b4:52:
d1:41:3c:6c:b0:72:c4:bb:52:a3:1d:bc:70:46:80:ba:3f:84:
be:d3:32:8e:2b:b2:fb:f3:72:db:29:e7:0c:f6:ed:6f:6a:d6:
25:6d:bd:4d:22:09:84:67:37:2a:72:fa:a1:81:16:ca:91:ce:
8e:fb:57:b5:7a:e1:e8:c4:31:7b:58:59:80:83:61:77:67:d8:
a8:4e:6d:9e:03:c6:26:a2:32:d8:0c:4d:d9:44:6d:7f:7b:9b:
e6:75:14:28:1e:9b:4d:9f:c0:57:18:a0:42:d4:2f:68:b3:6d:
ae:ca:07:33:b0:55:d0:48:b2:24:12:f1:9a:34:bb:af:7a:ed:
f9:74:5c:43:79:14:c2:4f:9d:a7:80:b9:f6:23:5a:32:66:b1:
3d:fe:49:d0:be:03:64:5c:2b:cd:23:80:06:8d:0e:7b:8b:42:
25:63:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:07 2026 by rpki-client