
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier: iryA/yJR6aQtN8LgwW4moPCZIN9o3gxq66tiCq9vAJo=
Subject key identifier: 05:D7:2C:8E:A8:4E:9A:48:1F:AC:EE:4B:CC:C6:7B:FD:97:25:62:BC
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 131F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number: 12F8
Signing time: Sat 28 Feb 2026 17:06:21 +0000
Manifest this update: Sat 28 Feb 2026 17:06:21 +0000
Manifest next update: Sat 07 Mar 2026 17:06:21 +0000
Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: BvuEKPP/A12+PLz+rXh753wwQvppoAQtpHbxZahEFvg=)
2: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: nxXSdnwoUfmzLx95eiSN62zk0YbQxEgJtgpJheqOOz4=)
3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=)
4: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: WXCmLL//FoCjMGfjt8pRmkTjKi9B4euZO4lNoEtZDGU=)
5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4895 (0x131f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: Feb 28 17:06:21 2026 GMT
Not After : Mar 7 17:06:21 2026 GMT
Subject: CN=69a3208d-7f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:f8:44:ee:43:fb:17:73:3e:74:31:19:45:
0d:b4:a7:4b:d6:81:c6:80:36:4e:bc:b7:23:2b:13:
e7:9f:8f:35:33:9d:c4:dc:b1:8e:0b:04:52:58:d8:
4b:e6:bf:a6:c6:aa:df:15:c0:48:18:70:09:e6:06:
88:4e:4a:e1:fc:bc:1d:1b:8d:6c:b0:65:87:fd:5a:
10:99:6e:c9:04:06:31:da:2e:d9:f5:cf:34:45:d3:
0e:06:06:52:1a:7a:27:29:25:07:61:92:92:c0:18:
3e:9a:fa:c6:7f:f4:f3:e0:44:ae:cd:36:e5:44:f6:
3f:c4:bd:88:6b:3d:40:50:44:1e:64:a2:35:b6:87:
8e:30:95:61:cb:f6:17:13:33:fe:a8:ac:43:62:b9:
40:89:ea:da:9e:ba:f1:3d:5d:94:cf:29:91:f1:55:
32:e9:84:95:1b:57:6a:df:3f:4a:d7:65:0c:37:ac:
8d:ef:0f:d0:43:22:6f:0a:3d:75:76:83:05:36:d7:
71:f1:7e:fd:84:81:84:76:cc:99:21:50:2d:e7:5f:
0e:82:f2:ae:5d:d3:68:99:a0:ab:d9:79:c4:9a:76:
0e:9f:f8:25:a9:5f:2d:ce:42:21:fd:2e:b0:a8:31:
36:a7:e3:84:8c:00:20:71:e2:d4:42:24:f7:93:87:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:2C:8E:A8:4E:9A:48:1F:AC:EE:4B:CC:C6:7B:FD:97:25:62:BC
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6b:f7:f6:f7:94:3c:55:9b:f4:4d:00:cf:06:ae:54:98:f5:
1e:cb:41:de:3c:37:91:a6:6f:37:6e:6b:13:31:73:f1:76:1e:
35:4c:ee:1f:22:55:1f:c3:6c:18:57:92:5b:f6:c2:e0:da:76:
0e:4a:56:b3:df:62:b3:62:c0:c7:c3:bf:f3:a5:09:c3:91:60:
65:41:0e:5d:ba:2b:a3:6d:e3:b2:df:78:eb:10:c7:a3:2a:7e:
c9:5d:50:4b:6e:2d:fc:c0:8b:87:12:25:03:40:af:14:62:10:
86:93:88:cf:58:5f:bd:c8:ac:60:65:85:4c:6b:79:cd:79:28:
81:1e:76:37:f4:53:27:65:19:46:3a:96:c9:a8:d2:dc:8d:23:
9d:ea:1c:bf:51:2d:33:e6:5d:c8:fb:e4:be:d1:5a:72:78:f6:
2d:20:e2:58:26:d0:0e:d1:d8:93:63:2d:a7:23:0d:05:0a:b0:
23:5f:18:d6:d5:81:5e:b4:ba:a8:f1:a1:fd:e0:15:cf:70:88:
c3:3e:4d:78:d8:8a:31:92:65:72:24:5c:6c:2d:18:44:09:39:
f5:46:75:80:22:f8:be:d7:d1:cf:75:e6:fa:f6:e4:3c:cc:2c:
8b:aa:f4:a8:e2:ca:b9:a2:52:3d:a8:17:2a:03:27:e0:9c:80:
20:44:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:51 2026 by rpki-client