
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier: o1vk+JzTLKGVgjE0L0aNny+TbWv6Ld2N4h6oBElZ6qg=
Subject key identifier: D2:0C:22:16:86:B5:53:CF:C2:5A:02:0C:6F:ED:94:06:B1:03:FC:51
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number: 01F8
Signing time: Thu 23 Jul 2026 04:45:55 +0000
Manifest this update: Thu 23 Jul 2026 04:45:55 +0000
Manifest next update: Thu 30 Jul 2026 04:45:55 +0000
Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: PD7d644/tz5J496iAiUUckCncu7NqE0BSY6qzUFLLQw=)
2: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
3: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Validity
Not Before: Jul 23 04:45:55 2026 GMT
Not After : Jul 30 04:45:55 2026 GMT
Subject: CN=6a619c83-bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:e1:f3:47:50:5b:3d:9b:76:b8:a9:34:73:
34:35:6e:ed:33:df:eb:c8:b3:80:fd:f5:11:4e:a7:
24:df:53:81:7b:f1:45:fb:82:23:ad:01:9d:45:2a:
1b:c1:6d:3a:a0:7a:6f:c9:e1:b3:b3:f5:c9:1f:bf:
93:1f:d9:10:8b:d2:02:3f:f8:8f:c8:85:62:5c:c5:
e9:d0:38:07:c7:1d:48:6a:26:4a:b6:70:ea:ed:67:
10:6b:11:34:8b:d2:b3:14:b9:30:b7:d9:68:f6:00:
54:d4:cb:0b:bb:42:13:d5:85:59:2d:56:4d:f6:f5:
18:8e:00:fd:b6:08:10:1c:12:55:7c:b4:42:66:79:
48:ad:bb:0b:4b:1c:59:cf:be:f0:27:7d:a1:96:2b:
ba:e7:ec:58:31:94:32:46:8b:da:d2:8a:74:a4:14:
c7:ea:fd:ac:1b:24:83:19:14:40:25:4f:03:76:92:
2a:7e:c5:54:6c:54:30:0f:fe:47:0c:d2:ad:ba:35:
60:aa:46:73:f0:fd:71:98:7a:c8:67:08:69:58:73:
c8:e9:47:90:31:65:7a:5c:71:a8:48:e2:ee:21:44:
bd:de:e7:2c:2a:1f:8a:fc:1b:4c:19:96:c5:36:bd:
3b:b7:27:4f:95:ef:7d:4b:4d:e6:f6:56:22:a2:67:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:22:16:86:B5:53:CF:C2:5A:02:0C:6F:ED:94:06:B1:03:FC:51
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:2b:1b:f6:40:36:6a:63:b8:ce:6e:c2:68:99:6d:af:8c:
94:c0:05:ca:b7:35:e0:56:e4:36:58:c2:a6:64:91:44:96:72:
1a:3b:06:3e:26:c2:18:ad:ec:0e:87:ec:e3:65:54:03:ad:05:
e6:7c:fc:9d:70:1e:ba:6d:c2:86:91:cb:af:9f:02:10:f5:8e:
f9:b8:84:f5:53:94:fa:66:19:98:8c:60:17:3e:83:f7:83:88:
4e:5d:b9:1d:aa:49:2a:b4:01:db:bb:e8:18:45:75:84:2e:49:
fd:09:9c:81:d1:64:e5:d6:5c:05:9c:15:05:b4:da:9b:a7:2d:
50:21:e5:13:e0:71:35:28:98:29:97:9b:3b:ce:cd:31:f1:4a:
33:f7:d3:8d:47:8f:c3:3b:8e:2c:0a:03:ac:b7:ad:30:16:e8:
89:3f:0b:e7:48:ca:25:df:fb:44:52:1c:13:20:9c:b5:e2:b8:
57:71:21:dc:0d:b1:03:6f:8e:26:2e:0e:00:a0:a5:e8:a3:25:
7b:8c:ea:d5:b2:dd:4f:7a:6d:60:20:80:32:d3:c5:be:0e:8c:
28:80:bf:cf:a7:d3:26:bc:57:96:ac:bc:98:89:5d:85:79:c9:
35:e6:50:7c:fb:c4:6a:b9:a4:1e:e4:cc:8d:8c:9b:9e:a4:01:
f0:92:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:19 2026 by rpki-client