
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier: kR9D5a79y3zsJJ+5L29XB+SifnfvbiK5NezB8MrMS2w=
Subject key identifier: 2A:CC:5E:AC:B5:99:EF:0F:B7:42:87:C1:D2:76:78:1E:3E:01:74:C6
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number: 01D9
Signing time: Thu 21 May 2026 03:48:33 +0000
Manifest this update: Thu 21 May 2026 03:48:33 +0000
Manifest next update: Thu 28 May 2026 03:48:33 +0000
Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: VtAqGMDmxtzhjtQhJ/K8g/CMWPGqxR2Yql9KvvzSabA=)
2: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Validity
Not Before: May 21 03:48:33 2026 GMT
Not After : May 28 03:48:33 2026 GMT
Subject: CN=6a0e8091-7cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:b0:3c:92:c5:a5:6b:ed:f1:0a:99:2c:2c:
01:2c:6b:cc:70:ae:3a:ce:6a:a2:83:48:cb:50:8c:
2b:f4:3f:f5:ad:1f:ff:54:ec:d1:0d:98:ce:4d:c6:
39:a8:6d:fd:dd:3c:e3:dd:2c:98:c4:f5:44:4b:ea:
55:37:15:ed:3d:6b:c8:ad:32:0b:e7:55:6a:12:0f:
30:5f:ad:cf:14:9f:6e:50:7e:2c:8e:b1:77:26:43:
b4:29:c5:fd:55:70:47:48:aa:d2:3c:87:f4:be:39:
b8:ca:16:a2:98:d2:3c:fd:03:c0:c4:8a:b7:72:0c:
f5:6e:a7:d3:2a:4a:89:b3:53:c5:d1:72:76:da:7d:
08:84:d5:f0:14:e0:b1:70:07:26:42:d9:41:20:2b:
f2:31:4f:f0:5a:10:40:92:4d:70:a9:ca:c8:84:54:
04:dc:ed:5c:5e:1f:54:5c:c8:a2:a5:a0:c7:59:82:
7d:9d:ba:df:f2:cd:d0:b4:72:ee:7d:d7:cf:37:ba:
ad:47:e4:9e:a2:59:d3:a9:35:46:7c:8a:23:4b:b7:
ad:3d:7a:e7:aa:ee:52:ac:6c:14:b8:ae:81:13:ab:
e7:3f:41:ea:69:b6:c5:2a:cc:b1:c6:6c:b8:fe:3d:
c2:dc:11:55:5a:73:0b:9c:81:e3:33:69:d9:26:ec:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:5E:AC:B5:99:EF:0F:B7:42:87:C1:D2:76:78:1E:3E:01:74:C6
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6b:63:03:3c:4b:39:40:cb:25:50:74:e2:85:c7:34:c0:ad:
18:c4:f1:56:df:70:a9:dd:b2:63:20:52:93:ef:c8:8a:98:3b:
6e:30:77:ec:0c:3e:78:03:3e:52:e6:d8:a6:f7:c5:d7:94:fc:
9a:32:a0:90:a8:0f:a7:fe:89:fb:e6:b9:1e:1f:3c:45:05:d2:
50:f4:44:89:10:dc:4c:81:72:c3:60:42:b8:91:37:e2:30:be:
c3:e5:c8:47:22:e4:53:80:97:7c:10:13:b7:a3:86:22:f9:85:
70:2e:c9:de:aa:df:bd:a2:ac:81:89:d1:a1:e5:cc:f0:bb:79:
dc:d2:58:02:48:a9:f0:62:a6:d7:54:b5:c8:cf:f2:f7:4b:48:
2a:54:56:cd:07:0a:93:8a:cf:36:32:ca:b3:a2:b5:f5:d9:29:
85:ab:4e:ae:3f:f4:64:ee:26:2f:05:21:73:d2:dd:bd:ef:58:
cf:6b:eb:3b:e2:0c:f0:45:7e:6c:21:87:af:96:b4:38:4e:8b:
af:22:73:9c:65:08:78:34:0b:4f:89:99:70:37:2d:9e:5f:6d:
56:a8:e1:d2:7a:ae:d7:7a:bb:5d:c8:64:c8:34:06:a3:98:e2:
19:2f:d9:49:6f:57:4e:ff:d8:ee:f9:d2:e9:ac:b4:5b:c1:7e:
e3:6f:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:28:51 2026 by rpki-client