
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier: IszR61j14hSx1OX2S0R+LkiOeFusa3R183pyv0c5dZA=
Subject key identifier: AE:9E:D4:52:C6:6F:89:8F:4A:7A:AA:10:D0:00:50:01:79:13:66:01
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial: 0723
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number: 071B
Signing time: Tue 24 Mar 2026 21:34:29 +0000
Manifest this update: Tue 24 Mar 2026 21:34:29 +0000
Manifest next update: Tue 31 Mar 2026 21:34:29 +0000
Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: nKSm+Atga9wcZyndhgvAnFtlx2n/WMJmolzePhSd+Qk=)
2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: Ck2Qok/2TKHWJ1WhyS73ofFb+puPh3hrhRRG4T4K9QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Validity
Not Before: Mar 24 21:34:29 2026 GMT
Not After : Mar 31 21:34:29 2026 GMT
Subject: CN=69c30365-aaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:b0:69:9f:3c:9a:ff:78:7f:7b:73:20:f7:
d0:ff:d2:1c:8a:90:7a:e6:52:a6:78:42:ec:cd:0f:
cc:2c:37:3e:06:47:02:b8:f4:b9:c0:c8:8b:c2:c1:
9a:ce:ed:b4:94:75:c1:a9:ec:87:68:b2:27:fb:e6:
d9:54:fb:33:db:f4:b6:8c:ef:fc:33:65:2d:be:ab:
c2:9c:c4:cb:27:c9:fa:88:58:13:4a:60:e6:e7:f4:
21:e4:e4:91:c0:12:9e:95:17:78:4d:fc:3f:c2:5f:
e1:5b:2c:19:21:2e:ff:4c:d4:b1:22:06:ab:93:89:
2c:37:f0:05:36:4e:42:4e:81:f8:46:24:69:db:d4:
39:f0:84:92:16:1c:d5:1e:4d:d3:15:0e:20:93:76:
44:9c:6e:d5:ad:0c:74:b9:ca:59:bf:8c:55:82:68:
b8:da:6b:d0:8b:19:88:42:ba:79:63:93:a0:c8:0f:
45:27:99:b5:63:89:28:8a:be:cd:f8:af:2c:68:5d:
33:c8:57:f7:58:a2:d9:40:b9:57:f1:a7:96:01:85:
2b:e1:1e:35:57:41:b2:03:14:8f:40:b8:c5:eb:c9:
39:7d:1b:50:55:37:45:2f:c0:86:bd:be:17:2d:6f:
80:4b:ad:81:ed:1f:0d:c6:2d:7e:ed:83:ce:26:72:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:D4:52:C6:6F:89:8F:4A:7A:AA:10:D0:00:50:01:79:13:66:01
X509v3 Authority Key Identifier:
keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d9:8f:3b:03:47:8e:82:f5:32:ef:1d:28:57:19:72:29:da:
47:14:8a:35:6c:c0:4d:ea:4e:4c:34:c5:b5:3c:c2:ac:c9:9a:
a9:1d:9b:38:7d:23:ac:7d:8d:cb:6a:6f:ad:7e:a3:b7:16:9f:
7c:48:47:f4:6d:ec:12:e5:f0:ab:ee:8f:1d:fa:85:97:8f:32:
64:fd:1b:98:ac:eb:5f:0c:a1:1a:18:25:77:50:4b:43:41:f1:
46:ba:73:da:e5:4e:ba:32:6e:94:29:01:a6:99:6d:1a:33:61:
b7:c4:59:bb:02:b9:5e:c9:ab:bc:7f:ba:74:d6:df:56:16:a8:
7b:23:99:a8:42:de:4b:20:6c:f7:a3:d7:08:3f:30:fd:4d:71:
f9:ed:92:3d:7b:4b:e8:f6:8f:10:5f:76:11:6d:a8:26:bc:14:
26:aa:5f:8e:0e:32:73:a9:71:ee:a6:61:c0:39:6e:00:09:18:
6d:3d:e4:1f:1a:f4:c1:aa:40:e9:86:12:6f:f5:2c:4b:b5:6d:
f7:58:44:15:89:78:e8:05:cd:7e:6b:fe:c8:af:31:48:60:3f:
70:04:40:8d:2a:b7:65:90:23:c5:68:4a:8c:ed:22:05:17:a4:
a3:82:9f:5d:f5:a7:32:23:24:35:66:4f:dd:b1:33:43:29:5a:
10:90:71:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJFMzcxMTAvBgNVBAUTKEVGRDcwNzY5RjdFODU1RDI1N0EyNEQ2QTFENDkwMzk1
MEFCMzY5RDMwHhcNMjYwMzI0MjEzNDI5WhcNMjYwMzMxMjEzNDI5WjAYMRYwFAYD
VQQDEw02OWMzMDM2NS1hYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvSwaZ88mv94f3tzIPfQ/9IcipB65lKmeELszQ/MLDc+BkcCuPS5wMiLwsGa
zu20lHXBqeyHaLIn++bZVPsz2/S2jO/8M2UtvqvCnMTLJ8n6iFgTSmDm5/Qh5OSR
wBKelRd4Tfw/wl/hWywZIS7/TNSxIgark4ksN/AFNk5CToH4RiRp29Q58ISSFhzV
Hk3TFQ4gk3ZEnG7VrQx0ucpZv4xVgmi42mvQixmIQrp5Y5OgyA9FJ5m1Y4koir7N
+K8saF0zyFf3WKLZQLlX8aeWAYUr4R41V0GyAxSPQLjF68k5fRtQVTdFL8CGvb4X
LW+AS62B7R8Nxi1+7YPOJnILRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6e1FLG
b4mPSnqqENAAUAF5E2YBMB8GA1UdIwQYMBaAFO/XB2n36FXSV6JNah1JA5UKs2nT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkUzNy82QTM1RTNEMDc2
NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1ZkSlhvazFxSFVrRGxRcXph
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc5Y0hhZmZvVmRKWG9rMXFIVWtEbFFxemFkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkUzNy82QTM1RTNEMDc2NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1Zk
SlhvazFxSFVrRGxRcXphZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYNmPOwNHjoL1Mu8dKFcZcinaRxSKNWzATepOTDTFtTzCrMmaqR2bOH0jrH2N
y2pvrX6jtxaffEhH9G3sEuXwq+6PHfqFl48yZP0bmKzrXwyhGhgld1BLQ0HxRrpz
2uVOujJulCkBppltGjNht8RZuwK5XsmrvH+6dNbfVhaoeyOZqELeSyBs96PXCD8w
/U1x+e2SPXtL6PaPEF92EW2oJrwUJqpfjg4yc6lx7qZhwDluAAkYbT3kHxr0wapA
6YYSb/UsS7Vt91hEFYl46AXNfmv+yK8xSGA/cARAjSq3ZZAjxWhKjO0iBReko4Kf
XfWnMiMkNWZP3bEzQylaEJBxSQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:34 2026 by rpki-client