
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json)
Hash identifier: Z6zFq0L6S1R1Dlh37fRyE8sn/Tgln4ibdwXRCKc1R14=
Subject key identifier: 90:93:40:CF:44:B9:FF:5D:93:2D:61:DF:5F:49:DE:50:64:CD:E9:68
Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Certificate serial: 08B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
Manifest number: 08A4
Signing time: Sat 04 Apr 2026 20:17:52 +0000
Manifest this update: Sat 04 Apr 2026 20:17:52 +0000
Manifest next update: Sat 11 Apr 2026 20:17:52 +0000
Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: igkGTcVzklh1j3s7ZESOh4anP1oeaa1H/DglsM6FPb4=)
2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: cBxkgJsthKBviRSkPw5GD8Pfh6SKDkyp5oP6Tqej7Fc=)
3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: xUz8CM0rwzNbwUJqreXLQ7ha+Fr0ZDfUr6Mhc66h53Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Validity
Not Before: Apr 4 20:17:52 2026 GMT
Not After : Apr 11 20:17:52 2026 GMT
Subject: CN=69d171f0-14db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:2b:da:cb:4b:74:10:54:85:01:ed:be:d1:
32:10:f5:a5:ce:f9:1f:ca:2d:c6:9f:f1:f5:8a:28:
ad:ee:17:48:31:38:94:3c:6a:46:ef:0e:95:bc:55:
9a:97:16:5c:4a:f3:03:25:e8:38:38:a4:e1:c6:d9:
74:06:87:36:fa:7e:fd:d1:e5:b4:32:30:21:62:88:
46:75:d1:c9:9c:a9:56:4f:eb:f9:86:35:56:50:02:
1c:77:99:57:4a:07:84:fd:37:07:65:7c:bd:7f:1e:
e6:2d:e8:d4:ce:07:e8:6d:29:57:c1:da:c9:ce:c5:
65:42:01:e0:86:fa:ec:98:d6:c5:6b:9c:7e:ff:63:
5e:5a:6d:a9:98:b0:c7:bd:3a:a7:69:32:e2:59:98:
86:3b:9b:28:91:f8:15:dd:84:64:78:29:2d:71:94:
43:9a:b8:d8:06:80:9f:c5:ba:94:27:41:ed:56:23:
20:ae:f8:4a:fb:05:51:c7:43:68:44:04:0a:22:2e:
f6:98:e0:94:a2:45:48:a9:da:d9:7a:f0:b0:d3:a6:
ab:b9:b1:f8:20:b4:4d:88:1e:a7:69:77:7c:fb:36:
9c:ec:de:ed:f9:23:63:e9:37:9f:ce:79:62:19:60:
9d:28:b8:34:4f:b8:c2:6a:2c:cc:1b:f1:93:55:eb:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:40:CF:44:B9:FF:5D:93:2D:61:DF:5F:49:DE:50:64:CD:E9:68
X509v3 Authority Key Identifier:
keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c5:32:cc:3d:07:ec:4d:56:65:aa:f7:8d:cd:11:fc:cc:db:
35:9c:85:b5:c6:b0:df:d9:21:f6:ad:a4:24:e5:95:4a:bd:49:
0e:6d:7e:a2:ba:8c:78:bf:c3:1f:52:db:f2:b1:74:b1:06:42:
4d:3a:0d:43:da:06:c9:9b:9d:e8:d0:b1:64:80:77:08:53:2d:
38:50:17:33:8d:e9:a9:40:1a:f1:fc:7f:22:40:83:61:42:fb:
d4:01:c7:e3:66:9f:18:88:15:77:85:f5:f8:6d:e5:dd:8e:d4:
2b:97:44:8f:f8:a4:53:3a:15:bb:f5:e1:b3:3c:98:57:2f:12:
2d:09:2e:d0:a9:44:8f:f6:f3:17:4a:d2:82:cc:e3:bd:49:a1:
0b:ca:e4:fa:5d:83:ab:a6:73:98:eb:ce:ea:fc:ab:36:f7:ac:
42:8f:0a:83:65:b2:f4:4d:60:72:e6:a0:cd:62:2b:77:3f:c7:
7d:ca:76:41:2a:bd:13:79:80:2e:68:6c:cf:34:37:aa:c7:05:
0c:93:75:8c:d7:ff:1f:d7:7f:22:09:29:84:cf:28:f2:30:10:
fc:68:d9:02:b9:4d:11:98:6a:04:38:15:e9:6f:57:21:c6:fe:
6a:23:a9:3c:d3:c7:95:1f:7c:08:53:b8:6a:3e:d5:4e:b8:1f:
85:80:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:44 2026 by rpki-client