
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier: xCGtCOtGJu1h2Kvwv3sPqBZ28Ch9zHNA0qzpyFivWps=
Subject key identifier: E5:ED:37:5B:9B:0C:A9:50:48:FA:06:77:1B:DA:B3:8A:31:6D:C2:46
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 356E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number: 355F
Signing time: Tue 12 May 2026 15:01:29 +0000
Manifest this update: Tue 12 May 2026 15:01:28 +0000
Manifest next update: Tue 19 May 2026 15:01:28 +0000
Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: ulV1noqGab4COzG8ZzqRTYb83JBQ73yt37g1nL+Nw9Y=)
2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: ub2UwmJHfTSxoavuI6+2HDPbk/zf32PQjhZJmlUwhnE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13678 (0x356e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: May 12 15:01:28 2026 GMT
Not After : May 19 15:01:28 2026 GMT
Subject: CN=6a0340c9-3c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:36:f0:d0:eb:aa:d8:5b:f0:3f:d0:d0:10:26:
6b:27:7c:28:07:05:7d:6f:73:32:59:80:74:67:14:
ba:d0:24:88:12:80:3e:d6:a3:40:e7:7f:ea:f3:bf:
a9:07:15:bd:8e:e7:56:cc:f5:2f:40:2d:00:29:22:
bb:e8:95:c5:a1:3c:d7:ab:cb:d2:0d:cd:8c:41:08:
89:b1:f6:55:70:6a:cd:08:97:48:62:c1:25:56:a9:
15:66:55:da:61:1a:e1:d8:0e:69:08:63:59:4f:a1:
9b:5a:f7:3c:76:67:d0:1a:8c:6b:e0:56:4b:f7:ea:
13:58:a8:9d:4c:01:8c:b3:24:03:e6:cf:09:f4:a7:
7d:97:bf:82:1b:fb:20:04:d7:ee:c0:62:ab:01:d1:
29:d4:cd:5c:c5:30:61:84:b0:cb:2c:60:2c:b8:f4:
21:6d:68:4c:a6:9b:27:84:c1:89:dd:7d:c2:e2:37:
6e:f9:f5:b2:2e:d9:6a:99:99:0c:45:01:30:59:b4:
f2:b4:25:08:ef:e0:56:54:09:94:c6:b8:35:d9:47:
76:88:67:af:39:9c:97:ad:a8:fb:36:59:f1:f1:e3:
49:33:28:e8:2e:08:b7:c6:38:17:9f:72:a1:de:98:
a6:3c:be:be:13:ce:22:61:d8:7d:5f:e5:60:15:53:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:37:5B:9B:0C:A9:50:48:FA:06:77:1B:DA:B3:8A:31:6D:C2:46
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:7b:87:cb:4f:74:06:fa:95:3e:25:1d:f3:f6:ca:9f:1c:73:
85:16:d1:e5:5e:2c:03:35:cd:fe:37:0f:49:ab:93:3a:94:33:
5a:5b:67:78:46:84:15:8c:95:8a:3a:95:b9:06:3b:94:38:9c:
d8:34:49:9e:0a:0e:54:e8:54:03:54:4b:c2:7d:9e:84:0d:3d:
5d:df:f6:27:3d:73:ea:f8:c7:49:e0:bd:ac:14:7d:24:ea:62:
a1:91:de:aa:82:3b:ad:62:37:7f:7e:84:c2:f7:0f:ed:4a:de:
3c:b7:68:b5:e3:0b:d5:08:4f:8e:3e:7d:89:cb:cc:b1:f6:0a:
83:b4:68:7b:3b:29:86:6b:ec:1b:6b:0d:f5:0c:66:05:25:21:
e0:1d:5f:32:08:fd:fd:37:cd:a7:d7:21:5a:45:05:93:bb:d3:
07:6e:18:01:9a:8b:93:d4:cf:a5:ec:ed:57:20:7e:ed:57:30:
61:07:16:87:23:71:cd:07:c2:82:96:32:64:ca:1b:cf:6a:a9:
21:27:f0:f2:1d:33:af:4f:73:89:1c:22:b3:06:ff:56:e4:7e:
56:17:c7:58:ce:c4:82:4f:d4:82:b9:9d:25:af:46:b7:86:cd:
f9:f1:bb:6b:82:9b:b8:e1:5d:4d:5f:61:6c:0a:17:04:a3:37:
fa:f1:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:56 2026 by rpki-client