
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json)
Hash identifier: bQsfJe080655OOLd8jzyxIrrbmQRjVTSHnZu3LkGHTs=
Subject key identifier: E3:AC:7F:39:FD:DD:A5:10:D3:67:1D:F3:C7:91:8F:42:9C:FD:9F:59
Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Certificate serial: 089B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
Manifest number: 0890
Signing time: Sat 28 Feb 2026 20:52:45 +0000
Manifest this update: Sat 28 Feb 2026 20:52:44 +0000
Manifest next update: Sat 07 Mar 2026 20:52:44 +0000
Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: 6XmSPy2UfEEGS3PHwVxwf80SmBL6i6EgAYJQHOrEp4E=)
2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: y//kTgBCu8ds1cgaGUUv5fTwfVuBn5T3llDXWqV3GRs=)
3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: Koez5aai5hyPFgaFmxx5YzeOBoMBdmjCYKXC5XMX7bU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Validity
Not Before: Feb 28 20:52:44 2026 GMT
Not After : Mar 7 20:52:44 2026 GMT
Subject: CN=69a3559d-b031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:bb:f8:e8:1e:f5:bf:fe:a0:92:bc:bd:76:
b1:8b:7d:7d:cb:d8:42:dd:b4:eb:61:c8:4b:e7:6a:
5e:e3:33:11:43:e1:f6:90:99:47:df:d4:a0:c3:68:
7e:fc:72:e9:23:9d:11:74:9c:55:9c:ca:84:5b:31:
9b:6f:65:9f:88:7e:62:49:b0:a3:cb:2c:00:e3:7b:
c8:90:75:57:65:32:4c:d9:11:e7:30:07:17:79:51:
33:17:f2:7f:76:a6:47:78:6f:ac:65:30:23:8f:34:
1c:9d:69:66:5c:96:3e:e7:f6:bc:a5:d8:13:4a:e8:
38:3f:3f:9e:85:a8:bf:a9:88:b9:04:a3:23:40:fc:
30:4a:a9:a3:a1:82:ba:16:69:f5:cb:a0:39:03:98:
87:20:d4:e6:08:09:71:8e:0f:ab:e8:35:9f:5c:72:
c0:46:54:89:a1:c9:98:59:95:02:51:e4:d7:05:5f:
21:09:9a:18:83:a1:e6:ef:69:d5:2a:d1:2c:37:48:
95:11:11:2a:6e:8e:c6:47:4a:81:73:34:02:75:84:
88:1e:c8:32:e4:40:f1:b6:e0:e7:7a:2a:3e:63:e6:
6a:28:30:01:b5:ef:ad:e1:08:f9:9f:ca:bb:84:ac:
d0:38:41:60:e4:9d:49:b7:be:63:58:df:7d:52:95:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:7F:39:FD:DD:A5:10:D3:67:1D:F3:C7:91:8F:42:9C:FD:9F:59
X509v3 Authority Key Identifier:
keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:74:a8:b4:13:da:c6:00:63:8d:87:87:50:95:dd:46:b5:29:
0d:ff:46:2a:48:fd:ad:ac:bf:10:60:d2:3b:40:6a:87:de:aa:
35:1b:ac:e0:92:0b:a5:8b:ce:04:f1:74:78:62:bd:7c:77:bc:
95:09:91:bc:07:e8:16:a4:89:f8:c8:fa:15:62:e1:7d:a8:4e:
77:30:49:b2:40:fa:ba:82:dc:b2:ce:6b:5c:a1:ba:d6:fc:17:
35:64:ec:eb:c4:8e:27:5e:4b:2b:ca:e2:48:b6:5b:51:ca:88:
b2:91:6b:1c:dc:ae:56:5e:ae:7a:bf:0d:bc:f2:83:5a:66:35:
15:69:7c:93:7a:76:46:0d:c4:e5:dc:03:67:de:7d:b7:19:c8:
2d:c2:25:91:a9:d5:ad:6c:74:02:58:1e:31:96:ff:c7:e7:f1:
68:4a:3d:36:dd:89:52:e3:fa:65:07:bf:75:14:26:9c:58:89:
86:7e:a7:ff:2e:32:ba:a6:01:42:9d:24:0a:2a:fd:98:f3:2b:
f1:e1:00:b2:e7:45:0c:af:9e:59:21:5f:4a:33:89:ac:bb:98:
8f:f9:2e:12:68:ab:e6:7e:1f:ad:58:4f:3b:4b:05:da:92:be:
09:2f:9c:c9:a5:1c:58:fd:1c:da:76:ab:2d:4a:76:fa:3b:ae:
fc:56:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:13 2026 by rpki-client