
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier: ay7+YQV7z47Bf5wb39q2dFj6Meuke1do9iUexqYNwh0=
Subject key identifier: C7:EB:04:A1:96:B6:A7:27:D8:5E:1D:7F:AB:13:72:F6:AE:86:97:32
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer: /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number: 86
Signing time: Mon 21 Sep 2026 07:39:08 +0000
Manifest this update: Mon 21 Sep 2026 07:39:08 +0000
Manifest next update: Mon 28 Sep 2026 07:39:08 +0000
Files and hashes: 1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: NRaIhBnocRsErGyJ3hu9DLY+uqnQqR8C7xDr/G1cXGo=)
2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Validity
Not Before: Sep 21 07:39:08 2026 GMT
Not After : Sep 28 07:39:08 2026 GMT
Subject: CN=6ab0df1c-2fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:19:fa:9d:69:3c:22:3d:ad:3f:12:04:56:
88:8b:5d:25:cf:8e:79:51:94:06:3e:2f:a7:3d:5a:
79:23:37:8b:bd:5a:bc:75:0f:e7:1b:81:9a:2c:33:
67:e2:a3:ad:49:a7:b4:90:5b:0e:58:ff:99:1e:4a:
3b:1d:18:54:c2:4e:4a:73:fc:28:5a:d6:a1:04:2b:
1d:38:1d:75:d0:77:55:a3:03:c5:40:eb:f2:9e:e0:
33:9b:99:9b:79:eb:52:5e:60:2f:2b:79:9a:9a:6a:
57:51:52:29:d7:8a:a3:34:c1:43:9f:4c:41:d2:2a:
a6:9b:4f:2d:da:e7:46:87:03:6a:93:0c:64:04:38:
b0:c8:aa:23:83:06:bc:4c:75:21:41:0d:b5:be:73:
da:b2:dd:27:04:70:58:64:ab:f3:8c:d6:a1:41:0b:
35:c9:1e:f6:10:ea:0b:9a:ad:31:ae:61:c6:44:b3:
f5:02:e0:f1:94:88:c2:be:c8:7e:9f:a3:f3:be:97:
c1:cf:4b:9f:0d:4c:49:6b:cd:11:55:e7:5d:2f:0d:
3b:ca:51:d4:f2:a2:97:8f:9c:ef:38:60:94:6e:a7:
92:8d:f7:ea:3f:31:9a:a0:a0:41:ed:d7:fb:06:3d:
14:dd:db:8d:e6:ab:75:a4:e3:5e:4b:ee:17:1a:aa:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EB:04:A1:96:B6:A7:27:D8:5E:1D:7F:AB:13:72:F6:AE:86:97:32
X509v3 Authority Key Identifier:
keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:5e:05:3b:bf:75:68:28:5c:a2:81:1d:84:07:4f:3e:da:
21:01:00:78:b0:74:5d:2e:f0:7e:9b:b2:2d:09:eb:8c:61:78:
5b:97:2a:57:31:db:59:f3:ca:90:94:ff:46:f4:f6:f9:0c:09:
66:68:bf:a8:7e:fd:5f:ec:73:57:18:dd:ad:26:fd:7e:d7:6a:
24:da:78:78:c7:54:95:24:16:72:4e:db:c3:08:fa:02:25:0e:
16:57:fc:de:32:28:e7:7f:d9:f5:ed:35:42:54:5a:f8:28:6f:
f4:b4:51:79:58:ea:7a:81:b8:5c:e2:9e:3e:dd:99:e8:39:80:
d1:4c:32:f8:bd:5d:67:ab:09:ce:aa:bd:f6:45:e2:47:5b:fc:
ca:39:1b:7b:a4:ec:16:cc:2d:92:1a:32:cf:31:95:58:26:22:
4c:09:c2:a6:2f:24:75:8d:0b:10:90:68:88:ea:28:9a:47:47:
d4:e6:70:5a:9f:d4:02:47:54:60:79:3f:88:6e:ec:32:5a:61:
ac:17:9a:a9:89:93:8d:3d:a9:2b:5a:65:23:7d:1d:18:7b:ed:
0d:5c:60:41:82:42:1e:e7:87:a1:2a:21:89:cb:28:da:af:2a:
aa:93:27:bf:a7:f2:e3:29:37:40:22:15:54:7b:7f:23:d2:6d:
3c:a0:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:11 2026 by rpki-client