
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier: dIuxeEtJYUkChjqFCYwE8u2sKKK/TMDnnSun9gM3FiY=
Subject key identifier: B6:FE:F7:23:29:3E:8B:51:4B:9A:D3:E1:56:90:EB:BE:B7:B9:A4:8E
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 3595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number: 3585
Signing time: Wed 22 Jul 2026 15:03:19 +0000
Manifest this update: Wed 22 Jul 2026 15:03:18 +0000
Manifest next update: Wed 29 Jul 2026 15:03:18 +0000
Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: 9d4NUekRveaiqBi8GBjmsc1b60sDdvYKLKpjN2qolqQ=)
2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: 56iFltMvcWWzpgKTSJKCJMcFxtjBPwUJV2j1BYAuQeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13717 (0x3595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Jul 22 15:03:18 2026 GMT
Not After : Jul 29 15:03:18 2026 GMT
Subject: CN=6a60dbb6-faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:cd:e8:46:cd:00:46:b1:d6:6b:80:48:37:
af:6a:bd:b3:c2:a7:48:79:7b:10:91:a6:af:43:a8:
2e:aa:f9:d5:92:70:d1:6d:78:8c:79:e5:62:f3:db:
ac:dd:2d:02:18:cf:5f:73:e7:25:24:57:dc:93:3a:
91:99:63:d3:8f:46:8d:b3:47:5d:cc:e1:19:5d:68:
81:a4:fd:74:91:09:73:98:f5:4d:b9:ee:a3:ec:dc:
09:3e:f7:54:46:11:51:c6:5b:a9:50:c9:94:38:6c:
11:88:77:65:f2:c0:08:a4:de:71:d1:1e:57:b0:74:
f6:40:dd:5c:b0:77:d7:e0:28:57:92:bb:9e:3e:ae:
41:6c:41:81:1a:fa:13:1d:d9:c8:cf:f0:ab:50:80:
33:90:a7:89:67:76:07:84:09:bc:44:95:91:7d:af:
7b:47:8a:e6:b6:4b:e6:c7:7f:b6:b2:dc:0b:16:a2:
cf:b2:55:50:89:9b:b0:56:55:71:1a:57:f5:9c:57:
50:b4:c9:75:91:c9:d6:8f:5d:8f:72:fb:31:60:00:
ba:67:76:a3:43:a1:25:8e:f9:09:45:b5:e7:96:c7:
a3:a1:cb:14:62:10:bb:02:82:18:49:77:c8:96:89:
89:ee:43:5d:ce:cc:2b:68:ca:17:46:33:83:09:ec:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:F7:23:29:3E:8B:51:4B:9A:D3:E1:56:90:EB:BE:B7:B9:A4:8E
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:48:2d:00:d0:e6:09:ad:79:8e:ff:f9:b7:8e:c8:1a:6d:43:
05:a8:97:62:c4:8f:be:a8:ef:ae:29:be:52:a9:45:c3:3c:3a:
ce:6c:ab:09:33:8a:72:c2:66:10:be:19:a7:f2:92:1c:c7:e5:
12:5f:14:db:7b:20:30:99:91:f7:93:b3:24:23:98:b7:03:78:
27:ee:ca:1e:14:55:ec:02:63:bb:4d:e4:ff:5d:b6:0f:31:cb:
e2:ae:6a:15:a1:06:17:88:01:5a:df:87:2d:b5:cc:a8:50:7d:
f3:29:2d:cd:04:c6:2c:9a:e9:70:79:b8:ed:26:33:d2:17:77:
b4:52:3a:9c:52:33:2e:34:d6:1f:2b:b2:88:94:d0:a7:06:07:
19:f8:64:8b:65:0e:53:88:6d:92:fd:1e:83:01:61:f4:f6:99:
22:3a:fb:5d:5d:5d:80:e7:f5:90:2f:d5:68:bc:ca:72:bc:ec:
1a:db:da:83:e5:4e:97:31:84:29:de:00:d5:5b:a4:79:eb:6d:
29:b5:6b:41:58:f5:72:5a:d6:fa:f6:6f:b0:11:0d:e3:81:d4:
d3:31:51:e2:d6:a6:5f:3b:2d:df:ea:d9:d7:5e:35:1d:7f:e7:
d1:5a:3e:d9:a7:ec:84:51:3e:1a:50:19:0d:b5:2d:28:03:b2:
2e:6e:af:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2
QzQ4OEREMTUwHhcNMjYwNzIyMTUwMzE4WhcNMjYwNzI5MTUwMzE4WjAYMRYwFAYD
VQQDEw02YTYwZGJiNi1mYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGjN6EbNAEax1muASDevar2zwqdIeXsQkaavQ6guqvnVknDRbXiMeeVi89us
3S0CGM9fc+clJFfckzqRmWPTj0aNs0ddzOEZXWiBpP10kQlzmPVNue6j7NwJPvdU
RhFRxlupUMmUOGwRiHdl8sAIpN5x0R5XsHT2QN1csHfX4ChXkruePq5BbEGBGvoT
HdnIz/CrUIAzkKeJZ3YHhAm8RJWRfa97R4rmtkvmx3+2stwLFqLPslVQiZuwVlVx
Glf1nFdQtMl1kcnWj12PcvsxYAC6Z3ajQ6EljvkJRbXnlsejocsUYhC7AoIYSXfI
lomJ7kNdzswraMoXRjODCey7ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLb+9yMp
PotRS5rT4VaQ6763uaSOMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE
OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew
VmJiYU1XRHQtUHRzU0kzUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuEgtANDmCa15jv/5t47IGm1DBaiXYsSPvqjvrim+UqlFwzw6zmyrCTOKcsJm
EL4Zp/KSHMflEl8U23sgMJmR95OzJCOYtwN4J+7KHhRV7AJju03k/122DzHL4q5q
FaEGF4gBWt+HLbXMqFB98yktzQTGLJrpcHm47SYz0hd3tFI6nFIzLjTWHyuyiJTQ
pwYHGfhki2UOU4htkv0egwFh9PaZIjr7XV1dgOf1kC/VaLzKcrzsGtvag+VOlzGE
Kd4A1VukeettKbVrQVj1clrW+vZvsBEN44HU0zFR4tamXzst3+rZ1141HX/n0Vo+
2afshFE+GlAZDbUtKAOyLm6vkQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:16 2026 by rpki-client