
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier: 8Kg9fsqt2NWHBwjZYjeZuRLxi8eO+U4Ia36EAlL1j54=
Subject key identifier: B4:9E:1D:04:D2:5F:0A:8B:8D:0A:F0:DA:19:8C:20:13:4A:42:ED:9E
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number: 0211
Signing time: Wed 25 Mar 2026 02:22:36 +0000
Manifest this update: Wed 25 Mar 2026 02:22:35 +0000
Manifest next update: Wed 01 Apr 2026 02:22:35 +0000
Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: FMMYvFMTN6kO2Xo/EA5rFKGXKAblAOr3kGSwmobC3EM=)
2: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: LgvzbH2Wh3cXgvtAocTygSfF5GcgHU1jmYJ8OJmW4QA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Validity
Not Before: Mar 25 02:22:35 2026 GMT
Not After : Apr 1 02:22:35 2026 GMT
Subject: CN=69c346ec-98a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:c1:76:e9:33:e2:5a:b1:b0:af:47:b2:44:
d4:d3:25:43:e2:e7:b1:15:43:2a:0e:b7:c5:00:6c:
31:db:b6:73:c7:5c:aa:b1:02:c1:a8:06:53:49:a8:
6a:20:6a:11:6f:f3:ff:37:f1:f9:a6:07:fe:0e:bb:
03:27:0e:26:9d:96:2c:e1:fc:b8:d5:3e:e4:40:3d:
40:13:85:54:6e:2a:da:4c:57:d9:b6:d5:c6:ed:10:
59:d7:ec:8a:32:55:f3:e0:5a:b0:0b:e3:a3:14:d3:
36:38:56:34:f7:31:f0:68:d5:03:cc:6d:68:0c:c6:
2e:09:74:ee:d1:6e:18:c3:0e:7c:a1:14:fa:e2:9a:
fd:28:c4:c0:0a:8e:e1:52:54:62:8e:09:14:b2:a8:
a2:c2:0b:7b:70:e5:2d:03:10:3a:67:ee:1e:08:13:
da:f7:9b:96:12:98:c9:07:13:d0:c7:f2:04:7c:2b:
13:db:b4:c8:1b:ee:bc:84:94:eb:37:f0:71:32:37:
16:25:c0:ac:f6:66:ea:eb:b8:c9:5a:aa:fc:84:14:
4b:65:cc:9b:b9:95:73:58:c3:99:dc:b8:19:cb:59:
e8:fb:da:a9:fe:fa:81:89:fd:83:da:09:4a:1c:8b:
b5:0a:a6:8d:32:c2:ba:69:2f:a9:e0:59:52:6f:eb:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:1D:04:D2:5F:0A:8B:8D:0A:F0:DA:19:8C:20:13:4A:42:ED:9E
X509v3 Authority Key Identifier:
keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:c0:f8:d1:c6:2d:93:7f:07:f4:6c:fb:c7:26:a0:b5:e5:
ef:6e:c7:c3:c8:1a:32:d9:e7:bf:4b:97:f3:97:12:b8:29:83:
29:9f:ab:a8:a2:2d:59:02:0e:a8:35:b3:a2:f6:37:fd:07:29:
64:ed:b9:72:cd:b1:7f:24:ba:79:d9:1b:a8:37:7b:24:79:65:
a2:5a:52:b7:c1:11:24:74:45:30:9e:c0:22:97:2b:f7:3e:0c:
0d:f2:2d:25:b3:1b:c7:2e:b8:90:9c:c6:0d:0e:92:b4:b9:f1:
cd:15:35:48:c2:a4:b2:2c:a7:b9:2e:7e:3c:47:14:5b:86:cb:
7c:ca:1d:4f:0a:65:91:c2:ca:1c:de:01:a3:4f:df:c1:3b:fa:
7a:17:cc:57:e1:47:5b:3a:97:9e:64:65:8f:6b:48:03:33:00:
0c:6f:1b:44:9a:8b:eb:f1:0f:07:b8:77:b7:c4:7d:08:f0:5c:
7e:86:35:94:b6:c1:36:23:dd:a7:1f:be:21:9a:a6:44:53:4e:
00:64:5d:83:23:0e:74:a8:76:c4:52:b4:c6:f0:b7:09:ce:e1:
ea:da:0b:e9:d8:bc:df:08:df:c6:f5:76:d3:9c:34:41:9d:3c:
fd:83:b8:85:1a:49:1d:ba:64:96:3a:36:0f:10:cb:af:f9:6b:
48:a0:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:47 2026 by rpki-client