
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier: B9oi8bkWfLkFEWCF0pv74W9w201NsMEidUNr1GlzuWI=
Subject key identifier: 97:1F:25:88:22:73:94:13:88:54:D7:00:8E:38:4E:D4:CE:09:B1:10
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number: 0217
Signing time: Mon 21 Sep 2026 03:08:15 +0000
Manifest this update: Mon 21 Sep 2026 03:08:15 +0000
Manifest next update: Mon 28 Sep 2026 03:08:15 +0000
Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: v20CQm7IY+iHLJ4PAolJ6k2e4UQUN7HI9o3Ly3rWQNk=)
2: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
3: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Validity
Not Before: Sep 21 03:08:15 2026 GMT
Not After : Sep 28 03:08:15 2026 GMT
Subject: CN=6ab09f9f-19b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:39:e4:bd:65:d2:af:aa:08:76:e3:52:43:
4a:c3:97:01:20:1c:f2:0f:b4:8c:89:8c:4b:a0:13:
71:3e:51:86:a7:ab:ae:16:c1:32:da:1f:6f:e1:e2:
66:64:31:b0:38:39:70:0b:36:1d:44:19:fd:77:6b:
1b:e2:3c:0b:f8:dd:90:7c:27:21:6d:d2:c8:dc:3d:
88:7a:48:1a:4f:5c:07:3b:72:6f:ed:05:12:8d:ab:
1d:e2:f0:c7:9a:a3:bf:f6:0f:1a:eb:77:f2:d7:81:
6b:c7:38:79:01:bd:c1:90:2e:fc:6a:db:65:55:11:
63:0e:d3:46:be:0b:8c:0f:08:05:28:28:6b:04:60:
14:3f:d8:55:ef:7d:77:97:05:3f:82:55:b8:34:55:
b8:8a:2b:20:5c:a6:e0:55:22:c4:df:f1:28:94:6c:
db:de:9d:51:37:db:af:94:e5:58:42:ce:e4:66:6e:
f8:d2:4c:6f:90:93:e6:4d:94:4b:15:b0:42:47:c5:
d1:62:0b:5b:65:82:85:49:67:de:cb:98:f4:75:8b:
70:55:ad:d8:eb:26:44:96:57:87:a8:11:dd:50:66:
65:8f:25:d1:48:7d:6f:a1:ca:cf:05:b2:96:fb:8c:
b4:2f:f2:45:d2:03:7b:27:f4:a8:0e:90:c0:d9:01:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:25:88:22:73:94:13:88:54:D7:00:8E:38:4E:D4:CE:09:B1:10
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0e:22:06:2f:21:60:68:e9:a4:51:00:83:9e:6a:8a:bf:5a:
b2:71:e1:c7:93:db:e1:43:41:1b:4d:e8:a5:2f:89:46:4b:13:
5e:4e:88:74:9d:ef:b2:b3:c8:30:8d:c0:d2:e7:c8:05:dc:71:
af:95:69:45:40:cf:23:e2:0d:82:a2:d9:fd:09:73:9e:cd:37:
bd:03:7d:db:dd:7d:6d:4f:51:6a:00:73:df:c3:af:05:d1:d3:
dc:6f:a0:18:85:cf:be:58:e1:4f:fa:90:a8:b6:82:30:ab:e3:
02:16:7c:5c:c8:78:ee:e1:28:24:0e:e1:04:64:88:93:9f:b0:
17:23:49:76:6c:1b:ea:08:1d:3f:a1:3a:e5:39:3a:ac:aa:9e:
07:74:d2:5c:e8:3b:9a:bf:c0:e3:ce:56:47:2d:73:6f:a0:06:
07:0c:9b:66:b8:fc:9f:ff:76:2a:51:90:d5:f9:da:a8:e0:cf:
58:30:5d:d2:b9:8b:62:7c:dc:e4:a3:c2:21:46:d6:28:89:ab:
9c:9c:53:4f:e6:41:f7:c4:f6:29:47:fb:1f:e9:4f:d3:50:96:
f3:0a:02:f3:62:9b:0a:7f:2b:d2:c2:09:59:73:1e:c2:21:75:
03:f0:6a:a2:31:43:af:0f:77:d8:20:bc:13:fd:7b:ff:4b:cf:
cc:4d:71:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4
MDgwRTk3MzAwHhcNMjYwOTIxMDMwODE1WhcNMjYwOTI4MDMwODE1WjAYMRYwFAYD
VQQDEw02YWIwOWY5Zi0xOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAriE55L1l0q+qCHbjUkNKw5cBIBzyD7SMiYxLoBNxPlGGp6uuFsEy2h9v4eJm
ZDGwODlwCzYdRBn9d2sb4jwL+N2QfCchbdLI3D2IekgaT1wHO3Jv7QUSjasd4vDH
mqO/9g8a63fy14Frxzh5Ab3BkC78attlVRFjDtNGvguMDwgFKChrBGAUP9hV7313
lwU/glW4NFW4iisgXKbgVSLE3/EolGzb3p1RN9uvlOVYQs7kZm740kxvkJPmTZRL
FbBCR8XRYgtbZYKFSWfey5j0dYtwVa3Y6yZElleHqBHdUGZljyXRSH1vocrPBbKW
+4y0L/JF0gN7J/SoDpDA2QEuUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcfJYgi
c5QTiFTXAI44TtTOCbEQMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD
RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE
eVFBUFpmY0Z5VzZBZ09sekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADA4iBi8hYGjppFEAg55qir9asnHhx5Pb4UNBG03opS+JRksTXk6IdJ3vsrPI
MI3A0ufIBdxxr5VpRUDPI+INgqLZ/Qlzns03vQN92919bU9RagBz38OvBdHT3G+g
GIXPvljhT/qQqLaCMKvjAhZ8XMh47uEoJA7hBGSIk5+wFyNJdmwb6ggdP6E65Tk6
rKqeB3TSXOg7mr/A485WRy1zb6AGBwybZrj8n/92KlGQ1fnaqODPWDBd0rmLYnzc
5KPCIUbWKImrnJxTT+ZB98T2KUf7H+lP01CW8woC82KbCn8r0sIJWXMewiF1A/Bq
ojFDrw932CC8E/17/0vPzE1xXA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:20 2026 by rpki-client