
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier: 1kCvTDrDIZqI2jZFk6bypnfOhibV6Xt5C0Y2Og7jyK8=
Subject key identifier: 35:21:38:84:03:A6:3A:9A:9F:CE:ED:BB:D1:4D:BA:88:77:C9:31:57
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number: 021D
Signing time: Fri 17 Apr 2026 02:38:51 +0000
Manifest this update: Fri 17 Apr 2026 02:38:51 +0000
Manifest next update: Fri 24 Apr 2026 02:38:51 +0000
Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: TLdus7SPxbvrmvpQZJ7Mc0Uhbr5y+WFQi8jgFLFeRrU=)
2: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: LgvzbH2Wh3cXgvtAocTygSfF5GcgHU1jmYJ8OJmW4QA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Validity
Not Before: Apr 17 02:38:51 2026 GMT
Not After : Apr 24 02:38:51 2026 GMT
Subject: CN=69e19d3b-c207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:4f:6c:03:5f:0a:7b:cf:e9:58:8f:29:3f:
3a:1c:d1:13:d8:90:a2:e6:60:df:cf:a8:6a:d1:74:
29:cd:10:2f:9e:7c:7c:60:7a:b6:fa:2e:a5:42:48:
ba:62:7f:7b:c3:c7:f2:f6:7c:f2:ec:69:a3:08:02:
d9:0a:ae:ef:83:13:05:96:18:41:7d:42:56:75:e7:
6d:b4:54:11:ba:b9:eb:14:86:1b:2c:6d:08:27:ba:
74:de:b4:ee:65:44:be:07:54:a2:e4:b2:1f:5c:ba:
2f:48:70:68:8f:dc:84:3d:f4:9b:e5:66:df:bf:b2:
4f:b2:12:aa:0f:4a:76:26:08:4f:8b:f9:b1:7c:a8:
d8:8f:6b:1b:3a:a4:d8:bc:af:cb:54:d6:63:43:20:
fe:fd:d5:8a:a8:1e:92:f8:c1:1b:95:63:aa:66:5c:
ae:54:b2:4e:ad:a2:3a:a2:24:4f:01:89:bc:87:63:
0a:0d:22:d2:a5:f0:1c:71:6c:0b:40:f2:f2:7f:9e:
38:71:6a:05:4f:69:b3:8e:02:70:3d:20:61:ab:b5:
9c:12:0a:af:d7:2b:ce:39:e5:37:ed:a6:83:ea:0d:
37:fc:4c:92:f5:75:3c:70:2b:f0:89:ac:4d:5a:9a:
f6:a6:4d:43:ab:61:8d:26:e5:ea:78:69:1e:d5:3a:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:38:84:03:A6:3A:9A:9F:CE:ED:BB:D1:4D:BA:88:77:C9:31:57
X509v3 Authority Key Identifier:
keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:50:06:7b:a7:ed:bf:a6:5c:58:c9:c9:d1:71:b5:af:7a:
b9:b8:fa:8a:6a:4c:0f:2a:d6:18:7c:d5:a7:d6:41:31:a7:59:
da:c8:f4:e3:36:ce:46:81:43:21:5d:b5:6f:7d:32:b8:38:6c:
98:fe:43:df:e5:82:f2:db:b6:d0:7c:80:00:5a:c9:ac:ad:4b:
f7:b5:13:43:3a:e1:e9:98:8f:40:ec:de:9d:6a:81:e7:a1:8c:
52:3d:57:8a:a9:6c:27:07:66:11:01:e7:c0:41:83:71:e7:62:
a3:1b:6b:86:d1:61:8c:9e:0e:96:36:75:e0:a0:86:22:04:a4:
39:d5:ab:dc:be:c7:ef:08:7a:d4:e5:22:2a:56:59:86:f5:fa:
94:0f:60:13:4e:be:fa:d3:80:5f:9b:58:24:df:1e:e4:a6:8a:
7c:ac:d8:d0:5f:d5:91:08:8e:33:4b:49:c7:e8:14:27:25:9c:
e6:d4:75:6c:7d:83:ee:f7:cd:1b:89:62:56:3c:dc:24:43:51:
64:39:22:ff:47:d1:6a:11:c7:46:08:92:b4:58:5e:df:36:03:
cc:c0:e0:11:75:2f:f6:6a:4e:a1:5e:5e:4b:c8:f9:58:cd:09:
ae:ab:24:34:25:8f:32:f2:46:d7:a6:eb:5b:0f:7c:f0:a3:a3:
92:48:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:24 2026 by rpki-client