
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier: gtJIVDvEW+Lzcphsr2Eo/jpNocfLpaKDSlJbPK8B9Jo=
Subject key identifier: 72:10:B0:8A:B4:69:1C:C4:EB:1B:2C:D2:35:01:2D:3F:94:5A:AA:3E
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial: 126B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number: 125B
Signing time: Tue 24 Mar 2026 17:00:09 +0000
Manifest this update: Tue 24 Mar 2026 17:00:08 +0000
Manifest next update: Tue 31 Mar 2026 17:00:08 +0000
Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: Jn5iiw+ryocqhzILQoGh9R0grH2iNFntQC68N7NrDRw=)
2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: FX/SXWeGmSorowMzitSzBZ8lzXgrcgho0mITKsxeeLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4715 (0x126b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Validity
Not Before: Mar 24 17:00:08 2026 GMT
Not After : Mar 31 17:00:08 2026 GMT
Subject: CN=69c2c319-1282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:d7:cb:69:b7:9c:62:6c:25:f5:9c:3e:97:
c2:84:93:4d:0a:9e:f2:1a:9d:72:25:dd:58:1c:1e:
38:6e:3c:51:85:df:af:c2:5d:fc:c5:ad:ad:2d:2c:
97:5e:02:5b:41:a4:58:0c:f0:17:99:11:ab:91:a3:
84:ae:aa:7e:27:8a:06:c6:6d:58:e9:26:1f:9e:8e:
ad:cd:1c:0d:d5:a2:47:c4:48:5f:8a:6e:51:da:ab:
60:f9:29:31:e3:ac:ac:49:bc:4b:3f:ee:b3:29:29:
4d:00:2a:20:59:72:12:69:36:8c:7a:91:cb:e9:e3:
89:bf:10:f3:4a:56:14:01:fb:bf:a9:e2:e9:04:66:
d2:71:c6:43:77:3f:93:20:43:80:0a:de:6d:03:6e:
33:82:db:17:01:c7:c7:d1:46:16:18:a4:40:4f:d8:
08:68:25:bf:b8:78:83:b1:78:b0:46:61:d3:85:9b:
b2:18:a1:a4:0c:3f:30:bd:f0:4d:17:a3:ea:e9:66:
af:64:9b:77:26:a9:03:c1:24:1d:fc:7d:4e:b3:d7:
6d:9c:22:ac:f5:53:ea:bb:c8:db:58:30:3a:af:ed:
bf:94:6a:b5:50:45:94:23:52:5f:59:14:07:07:b6:
b7:0d:e7:f8:e4:ab:d4:6c:08:35:67:31:dc:80:a1:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:10:B0:8A:B4:69:1C:C4:EB:1B:2C:D2:35:01:2D:3F:94:5A:AA:3E
X509v3 Authority Key Identifier:
keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:31:33:8d:a5:80:b3:19:bb:07:36:40:be:9d:7f:c5:44:
7b:b7:22:76:89:54:0e:44:01:5c:89:cf:56:d0:23:67:32:2e:
82:2c:e3:f6:50:55:59:61:66:6c:9f:68:33:7e:dd:51:fd:8b:
81:3a:2b:bc:32:62:ca:e9:d1:07:48:3e:96:98:10:47:ea:73:
e0:d4:6c:00:a5:1b:9c:35:97:1f:d5:82:07:de:fb:5c:fe:bb:
8b:4e:a3:b1:d6:b6:c5:4a:e5:0d:0b:c7:77:24:61:cf:55:66:
9c:eb:9a:46:67:fc:5b:94:93:ea:01:c9:3d:8b:32:d8:99:d4:
fb:4a:19:4a:78:d2:15:14:ff:76:68:9e:e2:ae:50:8e:ed:25:
75:43:91:30:48:7f:71:a6:09:df:63:81:45:99:6d:8a:b4:87:
50:9b:83:b2:83:c8:26:17:d6:aa:5a:8b:05:2f:03:41:ce:6e:
78:2e:d9:74:f2:3b:52:86:c2:f6:cb:66:29:72:ee:81:81:2e:
f2:24:78:ac:35:d2:ba:1d:17:46:d9:a3:49:f9:b6:17:4f:79:
9b:40:81:fa:18:ac:e5:4c:3b:cc:74:bc:f5:b9:95:3f:f8:2b:
f6:e4:73:f2:00:40:90:6e:99:79:ca:b3:f8:63:e1:f7:92:5a:
43:5e:b9:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy
Q0NDMjFENjcwHhcNMjYwMzI0MTcwMDA4WhcNMjYwMzMxMTcwMDA4WjAYMRYwFAYD
VQQDEw02OWMyYzMxOS0xMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQfXy2m3nGJsJfWcPpfChJNNCp7yGp1yJd1YHB44bjxRhd+vwl38xa2tLSyX
XgJbQaRYDPAXmRGrkaOErqp+J4oGxm1Y6SYfno6tzRwN1aJHxEhfim5R2qtg+Skx
46ysSbxLP+6zKSlNACogWXISaTaMepHL6eOJvxDzSlYUAfu/qeLpBGbSccZDdz+T
IEOACt5tA24zgtsXAcfH0UYWGKRAT9gIaCW/uHiDsXiwRmHThZuyGKGkDD8wvfBN
F6Pq6WavZJt3JqkDwSQd/H1Os9dtnCKs9VPqu8jbWDA6r+2/lGq1UEWUI1JfWRQH
B7a3Def45KvUbAg1ZzHcgKFgZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIQsIq0
aRzE6xss0jUBLT+UWqo+MB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz
QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX
NTdua3Yxc01nWElzekNIV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcY4xM42lgLMZuwc2QL6df8VEe7cidolUDkQBXInPVtAjZzIugizj9lBVWWFm
bJ9oM37dUf2LgTorvDJiyunRB0g+lpgQR+pz4NRsAKUbnDWXH9WCB977XP67i06j
sda2xUrlDQvHdyRhz1VmnOuaRmf8W5ST6gHJPYsy2JnU+0oZSnjSFRT/dmie4q5Q
ju0ldUORMEh/caYJ32OBRZltirSHUJuDsoPIJhfWqlqLBS8DQc5ueC7ZdPI7UobC
9stmKXLugYEu8iR4rDXSuh0XRtmjSfm2F095m0CB+his5Uw7zHS89bmVP/gr9uRz
8gBAkG6Zecqz+GPh95JaQ165BA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:25 2026 by rpki-client