
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier: kKVHUvrfy9/YHvUE/3fruEkGW3l2x0eyHja3fW58U78=
Subject key identifier: 11:1E:D9:46:35:82:7E:E4:D0:F9:96:3E:6A:FB:45:84:2A:CF:1E:22
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 75EF29E24F61AE98E1DDBDDED879A659C23F52EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number: 0550
Signing time: Thu 10 Sep 2026 03:16:30 +0000
Manifest this update: Thu 10 Sep 2026 03:11:30 +0000
Manifest next update: Fri 11 Sep 2026 04:16:30 +0000
Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
2: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
3: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
4: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 2D9kbxeu9eRP4stYYQhBIutvj1WtpMhJO8Qz+lcCtNE=)
5: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
6: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
7: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
8: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=)
9: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
10: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
11: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 04:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ef:29:e2:4f:61:ae:98:e1:dd:bd:de:d8:79:a6:59:c2:3f:52:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Sep 10 03:11:30 2026 GMT
Not After : Sep 11 04:16:30 2026 GMT
Subject: CN=111ED94635827EE4D0F9963E6AFB45842ACF1E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:5e:7c:d5:1a:75:6b:c0:23:95:8a:cc:de:
43:8c:0f:29:5b:0c:da:f0:9e:43:0b:75:42:18:db:
29:0c:2f:ab:56:92:3b:16:b7:6c:d6:ca:85:3e:5b:
c3:e2:f4:65:82:52:af:6b:8d:1c:47:9d:62:35:e5:
00:dd:9a:a5:ba:14:17:64:8a:35:bf:7f:a4:a1:81:
d6:a7:5e:e5:d6:07:08:22:b4:e5:9c:d8:c8:17:83:
5a:96:44:ba:3e:02:ab:2b:aa:3c:64:fc:43:02:10:
bd:30:88:bc:29:11:a9:8e:fc:52:be:61:dc:42:86:
b9:47:71:81:42:52:ab:e7:13:87:d7:ac:3d:10:da:
4b:a2:36:fe:5d:16:db:da:b4:81:b6:13:4c:d1:f7:
c5:c1:3d:77:9a:f9:90:45:ca:11:e5:de:b2:10:82:
8d:ce:d4:0f:09:81:88:a2:07:b4:5c:3e:6b:02:16:
92:79:3c:5c:25:a7:f6:ad:27:ec:07:8e:32:a8:64:
f0:21:dd:08:78:a2:c2:10:e6:05:68:39:61:dc:b9:
e9:bf:dd:8c:ac:21:12:32:46:05:67:b0:68:b6:4a:
ae:49:0e:60:b3:e8:98:73:fc:0d:ef:3b:60:76:48:
30:27:3a:54:b4:02:cd:d9:cb:44:21:b8:69:4d:fe:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:D9:46:35:82:7E:E4:D0:F9:96:3E:6A:FB:45:84:2A:CF:1E:22
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:b4:fd:c0:88:4c:97:69:22:37:51:b4:89:5e:68:9e:89:
3a:0a:b7:90:95:fe:89:9b:76:0a:59:e8:dc:a0:f0:42:0b:62:
d5:c2:0d:91:d6:2a:38:81:6f:05:f7:22:f8:41:e1:49:32:db:
07:e1:dc:34:ee:40:97:91:1b:e7:47:75:87:6e:f2:a0:13:63:
e3:5e:59:a5:f4:14:9a:b3:05:05:87:68:8b:2d:4a:dc:1a:a9:
fd:9b:7f:e3:8e:84:f2:d1:42:75:04:32:35:cf:37:21:5d:d4:
fb:d0:cc:6f:09:7a:07:1f:12:1d:d6:cb:31:17:f0:db:93:fc:
63:ce:3f:eb:de:d4:d3:d3:0b:29:4e:53:82:79:b6:04:ca:5f:
1c:e7:34:b4:3c:dc:f3:35:7d:32:1c:d3:4d:cd:5d:c6:da:32:
05:aa:cd:3b:5b:47:3e:8b:e1:9a:56:7b:e4:97:a9:4c:b4:38:
47:82:db:66:86:d5:95:fb:94:c3:c8:b9:59:b7:73:60:60:ef:
9b:a7:08:37:10:34:c8:5c:06:40:20:ec:a6:7e:94:d3:d1:41:
05:ee:12:b6:a3:19:81:39:26:19:5d:55:a9:95:0e:a8:10:45:
45:be:97:4f:76:7a:23:aa:fd:e1:4b:0f:66:b9:5e:f8:04:9a:
8f:5e:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:30:25 2026 by rpki-client