
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier: pLZcNtJFSwgurdzQ/UjL0UZuOJig/0eTS2M82HouRJQ=
Subject key identifier: F0:D6:77:CE:0E:8F:33:F0:1D:22:78:73:E1:3E:A6:66:EC:3F:E5:2E
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 405F7509A07B06A8AF012A3C3B22FE42A7A6331B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number: 048D
Signing time: Thu 16 Apr 2026 14:18:20 +0000
Manifest this update: Thu 16 Apr 2026 14:13:20 +0000
Manifest next update: Fri 17 Apr 2026 15:39:20 +0000
Files and hashes: 1: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=)
2: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
3: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: PCgVf+AhYjEhXgKn/MROWUwpupEUgVHfSs/B4LPHcvU=)
4: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
5: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
6: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
7: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
8: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
9: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
10: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
11: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 15:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5f:75:09:a0:7b:06:a8:af:01:2a:3c:3b:22:fe:42:a7:a6:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Apr 16 14:13:20 2026 GMT
Not After : Apr 17 15:39:20 2026 GMT
Subject: CN=F0D677CE0E8F33F01D227873E13EA666EC3FE52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:f0:ba:0f:9a:c7:67:9f:67:a1:c3:49:1f:
8d:98:a6:d3:96:ff:9c:16:a6:bb:57:0c:cb:a5:6d:
fb:1c:91:98:5c:50:d2:89:43:7c:5d:7b:bb:00:7b:
55:e7:97:3c:15:e8:c4:4a:5c:69:10:1d:ed:99:2d:
88:ae:c0:50:8c:92:2d:61:57:07:c9:88:6f:00:c0:
6b:bd:c8:03:e5:c8:af:2c:57:f8:0b:0e:c9:e0:99:
d8:b1:d2:d1:b4:92:f5:8c:b8:9f:50:8e:7a:e6:2e:
82:7f:5b:fb:22:51:81:d7:ee:4c:0f:97:3f:52:53:
67:39:8c:25:2e:1b:9e:00:82:44:cc:88:86:0b:6c:
d0:14:68:bc:d1:18:6f:1c:36:17:c1:15:06:ec:ea:
bb:4f:e6:96:5b:e5:cb:51:dc:90:24:e6:31:97:13:
dd:24:0e:28:54:17:98:1f:bd:28:bd:55:dd:6f:b8:
55:a0:99:35:ce:30:f8:85:ed:0e:fc:0d:d3:78:0e:
a5:07:bd:76:89:6f:31:e8:bd:af:94:7b:68:a1:a9:
1b:82:0d:9a:25:b8:4e:9a:67:90:ba:11:fa:b6:01:
f8:cb:79:b7:03:b8:31:e5:15:83:a1:14:5d:28:b5:
b5:12:9a:94:0c:f7:ea:bb:19:a8:eb:00:91:b1:2a:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:77:CE:0E:8F:33:F0:1D:22:78:73:E1:3E:A6:66:EC:3F:E5:2E
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d3:c7:53:9f:69:f2:62:ed:1b:f4:28:2b:67:21:5e:d9:44:
88:0f:16:ea:62:55:b3:cc:63:0e:b0:d8:29:f9:e9:08:78:73:
16:a4:70:f0:8c:40:30:21:4a:c5:df:0e:b0:31:11:78:c2:0b:
30:09:6d:2c:59:00:f2:98:b8:17:ff:0a:54:ff:06:a5:17:e5:
88:e3:ec:96:55:0f:28:66:07:1c:22:4a:8b:f3:85:80:28:1c:
c1:38:dd:6d:8f:e8:f6:8b:51:fc:27:f1:27:c2:e9:90:10:df:
e8:81:c3:ec:7b:a3:65:6d:58:dc:a5:8c:9e:90:57:7d:55:1e:
6a:12:a5:a9:ee:6b:7d:4e:ac:01:80:87:e4:fb:27:68:a5:9e:
b3:0a:6e:c0:f0:12:11:e4:28:d5:fe:fa:79:38:8b:f9:72:37:
ca:3f:a9:86:56:98:75:ce:9a:55:35:8e:b6:d7:88:c4:6c:45:
cb:b6:2e:c3:c2:80:2b:29:cf:53:2a:11:31:e8:39:2f:d2:5d:
b1:08:d6:c2:ca:90:1b:3d:50:06:c3:aa:22:29:b1:10:84:70:
a6:01:21:11:66:a6:24:40:80:d1:90:bc:14:d8:93:9b:0a:77:
76:8a:e9:6d:90:ee:45:8a:aa:8f:a2:b9:60:12:41:eb:68:27:
58:c5:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:52:21 2026 by rpki-client