
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier: iVPhxm9sksq0FgaJ2lJdCtJDLaN3AsP/Muh9sxY+PQ0=
Subject key identifier: 72:03:35:3A:B2:65:70:96:03:A2:B9:70:CE:BF:2D:01:3D:D2:2F:A5
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number: 070D
Signing time: Mon 02 Mar 2026 02:55:28 +0000
Manifest this update: Mon 02 Mar 2026 02:55:27 +0000
Manifest next update: Mon 09 Mar 2026 02:55:27 +0000
Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: QudgjfykpifOP8B7GKXcwlgJmcomTDjXUB5XjjUY/Nk=)
2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: lSiw0ZKtnqmlCmw/p0LMDiFIrmdzESI5PtUQLtbhTZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Validity
Not Before: Mar 2 02:55:27 2026 GMT
Not After : Mar 9 02:55:27 2026 GMT
Subject: CN=69a4fc20-8639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:05:11:aa:a5:3c:76:aa:33:29:d4:ee:c3:
d2:b2:d3:aa:81:3f:02:70:5e:22:33:8b:53:7f:58:
be:c8:cc:92:31:c9:52:01:52:d5:a2:d3:a5:f4:bb:
6d:55:9a:cb:ab:3b:d9:92:fc:5e:3a:da:12:07:9c:
08:ba:c3:5f:b9:47:e8:d0:14:ee:89:c1:21:65:6a:
cd:21:16:9f:6e:88:e2:33:89:27:23:dc:a0:f5:50:
79:66:c1:53:6c:fb:f8:be:57:0d:1e:c9:dc:12:e7:
5b:c9:30:de:88:78:02:55:ab:e7:38:a6:8c:2f:30:
44:d8:c1:65:a7:a0:14:e9:18:0f:7e:62:4b:8e:03:
96:ec:a2:d3:0c:21:ec:e8:64:0b:74:e9:8c:71:a2:
22:ae:6a:40:48:77:38:6d:40:a5:ae:4d:38:3c:44:
68:06:4c:3a:7a:80:cb:e9:97:06:fd:e0:a2:82:7b:
9b:08:8d:70:41:ee:36:14:b0:4f:04:b4:9c:77:e8:
dc:ba:64:08:21:81:2c:e0:19:3e:d9:65:3a:aa:e2:
60:3a:ca:55:e8:72:b3:8f:6b:3a:9f:8f:7b:9c:2d:
a9:d4:f6:81:57:cc:a4:11:c9:4d:f5:2d:d6:f4:ff:
18:29:93:be:b6:0e:9e:8f:77:98:7a:c4:2c:d3:9d:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:35:3A:B2:65:70:96:03:A2:B9:70:CE:BF:2D:01:3D:D2:2F:A5
X509v3 Authority Key Identifier:
keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:08:ff:35:93:c4:ab:cd:b4:b5:52:f9:59:5a:e1:e6:75:f3:
a0:af:01:08:dd:01:a3:d8:c0:8f:b9:16:52:47:d2:9b:b2:11:
17:21:e0:89:2b:6f:8d:57:ec:29:58:d6:2b:4a:34:76:1e:d0:
0c:41:51:3b:77:9d:19:57:e9:d4:44:44:ef:b4:03:d4:03:49:
41:28:8c:13:d0:57:7e:5d:71:bc:5a:53:3c:8f:5f:b0:89:d5:
6e:9b:c0:79:6b:4d:9d:c7:5c:5a:48:c0:a3:ca:cb:c3:d9:99:
b4:08:6a:71:21:7e:05:6c:78:ac:d5:a3:82:07:95:66:79:c2:
13:89:0f:fd:ce:1a:4b:45:35:b3:b5:dc:7b:82:2b:4f:ab:45:
98:9d:eb:75:5f:c2:dd:e0:78:53:d4:7a:91:11:ff:25:31:14:
17:4a:cf:0e:ca:58:13:10:71:19:8f:bc:70:f1:25:b7:8c:6d:
85:d0:13:65:bc:fa:94:9b:03:68:d7:c9:16:4b:a2:19:e9:ad:
df:a4:08:6a:86:d1:c4:94:cf:75:f0:84:c3:27:51:08:62:93:
3a:59:21:51:6b:e6:60:a1:bd:f5:96:97:ae:25:93:f2:47:88:
78:08:83:bd:21:4d:b9:c7:58:d6:10:ab:8e:b8:34:bd:c8:4a:
ff:02:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:47 2026 by rpki-client