
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier: 7lDuEtOTm41fg5jE7rDUe1/+RwB1NEb4Lc/69FZ1Mw4=
Subject key identifier: B5:72:3C:44:B3:5D:DE:0C:8D:1C:5E:4B:07:96:5D:19:0A:9F:8D:D3
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 139E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number: 136D
Signing time: Mon 28 Sep 2026 17:02:29 +0000
Manifest this update: Mon 28 Sep 2026 17:02:28 +0000
Manifest next update: Mon 05 Oct 2026 17:02:28 +0000
Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: 27ORKK+R7y1+8UPEma56ms4tWvWTRSq3pPj59V8jApQ=)
2: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: mfo6BYkWVfZpnu+glUHzyovdLshNnH3m/MtZdby+qOY=)
3: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: 3yk/ejxMXjoeC3zuRzAqWAckUsjuzATu0Y+B562HVTM=)
4: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: qPTI/BGOaPiA+Ijb2fpDa3jM09PINNTUUy/wyXi8Tlc=)
5: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: 7EPo/flJodzTo6ZQPpsGfoF7ns5UVMsBGxpdCAuapx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5022 (0x139e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: Sep 28 17:02:28 2026 GMT
Not After : Oct 5 17:02:28 2026 GMT
Subject: CN=6aba9da5-58df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:a9:f2:21:c0:b9:c4:4f:93:78:ca:6d:cb:
1e:09:aa:cf:a7:63:c4:84:62:ab:e1:b5:fc:8b:c9:
92:cd:bf:91:fe:43:e1:7f:6b:95:80:65:65:1e:01:
5a:d4:f4:a9:d8:20:29:59:97:04:9e:81:72:a3:e2:
1d:86:ae:9b:02:08:2f:84:99:62:b2:d9:76:dd:27:
01:82:9e:cc:70:22:3f:8c:9f:99:d5:f2:13:69:f2:
a0:88:b9:a2:e5:8f:ae:af:2b:96:8d:02:f7:67:b5:
3e:bb:39:e5:2c:55:6f:c4:03:48:7c:bc:f5:a2:e1:
87:ac:ee:33:99:06:12:82:ef:a3:cf:48:39:c9:a3:
e7:74:89:46:90:76:ba:3e:86:f2:d9:cf:86:1b:bf:
4f:be:4b:c5:7e:1f:c6:eb:c9:0a:44:f5:40:6e:4b:
00:f7:2a:e7:25:7b:ef:a0:9d:6b:75:1a:7a:05:a0:
af:2f:2c:d9:3d:ff:65:d5:5f:b5:96:b6:4c:97:32:
01:78:44:85:08:a2:cf:cb:e9:24:45:4d:44:73:2c:
97:37:75:73:64:bc:6e:a5:98:c3:59:50:9c:10:23:
62:e7:e3:f1:0e:99:e5:32:ca:25:5d:78:b8:8a:52:
23:42:22:b2:17:77:ed:7c:9a:74:b3:28:6d:ff:46:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:3C:44:B3:5D:DE:0C:8D:1C:5E:4B:07:96:5D:19:0A:9F:8D:D3
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:eb:5c:67:0b:9f:5d:89:fd:89:de:df:ef:10:fb:4d:b2:19:
e5:36:a0:6f:d7:51:4e:67:c2:ba:9f:d0:fc:34:10:67:7f:8e:
ed:94:4c:8e:a1:56:28:77:54:4d:c4:7a:f1:08:20:aa:0a:2f:
4e:04:70:8c:aa:74:57:cf:60:b9:33:c3:e7:96:8c:21:61:86:
b0:c7:9b:de:d7:f3:ce:ae:85:4f:b7:3e:49:33:12:af:16:f4:
0f:57:16:53:de:58:6c:fc:2c:f0:fd:e7:fe:fe:d8:26:05:a6:
85:ff:e7:46:31:cc:5b:86:2a:d7:4d:5d:2e:73:ea:28:f6:72:
22:c6:2b:3a:75:45:55:86:41:70:a8:21:d0:6b:94:a3:b0:94:
7f:6c:3e:2f:b6:0d:96:be:16:0b:cd:ab:55:a7:48:95:28:f4:
93:45:e6:87:e4:80:1e:63:68:19:a1:a4:63:02:45:29:bb:ea:
b6:07:01:4d:8e:49:ac:19:ba:26:ba:6b:e4:3d:f8:ce:66:0b:
f1:59:93:b5:bc:f3:10:50:5b:aa:04:28:da:d0:f7:7d:94:f6:
ae:5a:57:c1:5f:30:61:d6:a1:21:f6:0f:ef:af:72:91:ec:54:
80:e4:ae:3b:1e:b4:d3:d0:90:66:fb:d6:bd:b4:31:2d:e4:4a:
98:60:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:00:16 2026 by rpki-client