
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier: 8Ys8hmLEKKnaNnT3dMKRgwUNKPqnuFCqvm00tuwm/pM=
Subject key identifier: 59:9B:95:9A:46:97:BC:F7:88:34:0A:19:B8:14:C6:CA:76:81:AD:46
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number: 01D4
Signing time: Mon 11 May 2026 03:51:05 +0000
Manifest this update: Mon 11 May 2026 03:51:04 +0000
Manifest next update: Mon 18 May 2026 03:51:04 +0000
Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: RIfyfIuL6blJe4t9x82BB4zNRsTp1WC8A/LV158q1qM=)
2: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Validity
Not Before: May 11 03:51:04 2026 GMT
Not After : May 18 03:51:04 2026 GMT
Subject: CN=6a015229-abab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:e6:48:e1:0d:6b:81:f4:e9:bb:8c:59:9f:
bf:49:c2:de:7f:da:1a:0e:07:67:99:00:59:7b:a2:
0b:10:71:54:52:98:7e:69:0c:39:6d:9f:01:56:41:
8b:8c:8e:41:ab:93:fe:ae:db:9a:49:a5:99:39:e2:
36:78:bb:42:8c:4f:14:13:38:22:06:b3:26:d2:05:
f3:02:00:0f:25:06:fa:59:ba:5c:f9:f5:20:a3:09:
66:91:4e:a0:e9:4b:ee:98:f5:b7:76:4f:67:b9:9b:
31:3b:d6:59:24:f1:b1:bf:cb:81:1f:70:a8:a2:c6:
ef:49:52:d2:49:79:06:dd:12:4e:61:c2:c8:49:ee:
4f:c7:13:09:e2:1f:c5:72:b1:ee:bd:cb:e9:49:bc:
7b:3c:5c:4c:7a:19:71:89:af:dd:25:d2:0d:f0:bb:
cd:50:ec:19:e5:b7:c2:3e:75:7e:9d:f4:27:c8:94:
81:88:a7:11:74:7a:78:47:e0:19:a6:e9:6f:57:1a:
8b:19:e8:60:f7:80:2e:0e:25:0a:ce:c6:86:b5:4c:
1c:f7:9e:17:e7:29:4d:25:60:10:78:bb:11:09:64:
df:dd:21:33:5e:ab:da:fa:fb:cf:96:d5:13:0b:ed:
eb:0e:b4:40:fb:04:38:71:8c:34:a3:72:60:06:ab:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:95:9A:46:97:BC:F7:88:34:0A:19:B8:14:C6:CA:76:81:AD:46
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f3:f6:07:24:56:e6:56:09:00:58:ad:04:fc:cb:a3:0f:c8:
c4:f9:22:1a:fa:0b:98:92:bc:dd:5b:54:6b:49:ae:a2:01:6d:
89:82:54:4d:b4:58:94:16:96:83:a1:4b:42:32:cd:e2:63:da:
ba:3a:91:6b:a7:d4:2d:5a:e8:81:fa:fe:bd:9a:01:0d:f1:32:
f3:18:06:a5:3c:63:27:08:f7:bb:8e:ee:41:1f:e8:56:82:d8:
dc:71:f2:b5:cc:92:4c:59:71:48:76:70:d2:fb:f9:36:11:d0:
3a:8f:bf:90:0b:50:01:d2:72:40:ec:16:3d:ac:dc:5a:a9:8f:
db:67:a7:a4:2e:0b:dd:31:f6:82:51:c9:36:e0:5e:49:ef:ed:
dd:74:21:4b:bc:28:b6:b9:b9:a0:3c:de:da:fc:18:0c:94:ae:
9d:db:f5:77:92:2f:c0:39:08:53:42:2c:42:4b:bf:08:8c:42:
2b:b1:e1:5a:81:55:1a:69:c7:e2:1d:32:f2:78:b2:18:31:7c:
af:26:f0:b6:e6:e2:35:36:a6:41:94:74:0e:7b:7c:28:39:3c:
b6:8c:13:af:54:75:0f:5c:54:f5:14:8a:6a:31:a5:66:ba:fc:
ae:05:15:ef:ff:99:32:b9:49:f4:f2:6f:7e:93:fd:c9:84:be:
56:99:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:39 2026 by rpki-client