
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier: VGVkKXX27eOTRZbuXqZv7S8k984KPr/2Zxj0XyuXA20=
Subject key identifier: BC:D1:06:F3:2C:B5:4F:71:E0:DE:39:21:54:90:C7:62:1A:8C:35:E1
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer: /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:18:19 +0000
Manifest this update: Fri 17 Apr 2026 08:18:18 +0000
Manifest next update: Fri 24 Apr 2026 08:18:18 +0000
Files and hashes: 1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: Ju0pnrq5hvf7hf4BZYigQyutoOtk1dVmjdvrRAUihW4=)
2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Validity
Not Before: Apr 17 08:18:18 2026 GMT
Not After : Apr 24 08:18:18 2026 GMT
Subject: CN=69e1eccb-a1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:94:db:a8:33:87:52:4d:56:6f:31:f8:77:
e1:e6:01:40:54:78:91:f7:49:2e:21:7e:a5:f8:6a:
19:c0:d5:73:12:16:ca:bf:9a:5c:d3:65:4f:60:a0:
a4:a5:89:12:41:08:62:99:b7:6b:91:c5:fa:e0:de:
6f:ab:92:c9:80:00:3f:4a:db:68:d9:e7:27:9c:7f:
75:0c:67:51:16:87:5c:b7:99:98:83:d6:6f:e3:88:
f1:0f:f2:6c:65:9e:d7:db:2a:c7:cf:80:07:68:d3:
66:a8:39:d1:d7:ee:3c:53:81:42:71:7c:46:a7:de:
31:f1:e8:0f:d9:6d:01:a9:44:15:a1:9d:4d:5a:68:
37:fb:af:76:37:73:6d:a4:1a:7c:f2:f4:23:80:ae:
a4:57:44:1f:5a:4d:6c:8f:68:dd:50:74:04:3a:12:
71:46:ea:94:a3:48:0d:a1:e3:bc:f8:42:8a:b4:67:
27:db:49:db:bf:df:45:90:2b:5a:a7:24:97:01:f1:
db:e4:53:c7:bf:f8:18:fb:35:ea:45:77:1b:98:8c:
ea:26:2c:a0:f4:0f:36:a7:40:bc:ba:d1:62:76:8d:
8e:e6:b1:54:2d:51:67:69:9e:38:1f:95:c5:46:a0:
58:a9:7b:ef:35:e5:1e:ad:08:96:0d:58:46:78:f9:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:06:F3:2C:B5:4F:71:E0:DE:39:21:54:90:C7:62:1A:8C:35:E1
X509v3 Authority Key Identifier:
keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:36:39:aa:f0:ce:03:3c:27:22:17:bf:63:a5:33:63:4c:cb:
af:85:11:45:38:09:da:80:d9:ad:a2:78:ab:f2:21:99:20:63:
13:20:3c:0b:79:e9:a9:ea:79:96:17:5d:13:37:c8:72:a3:a4:
a2:a2:43:af:06:49:c9:06:69:89:e4:32:d5:18:f3:87:27:1f:
69:60:91:31:14:f9:4d:ec:a1:23:bf:0e:4f:39:13:09:d4:a1:
54:4e:86:51:98:c0:8d:d3:76:db:b3:f5:56:2c:95:0a:1d:1b:
d2:a8:1e:41:50:3e:4c:55:6e:6c:c4:1c:c7:1d:f3:85:d9:ca:
db:43:95:63:07:f8:6f:a7:7d:c1:31:31:e6:78:e1:95:a0:6a:
86:9e:4c:19:c0:ec:f3:7c:fb:29:32:18:68:ff:68:e6:99:9b:
ab:06:e9:3c:70:67:bb:58:96:d5:8f:3c:13:74:62:12:a1:7f:
5c:3b:3c:10:a9:ec:02:b6:07:2d:fc:8e:96:69:d0:2c:0c:09:
f6:07:6f:22:52:8c:7e:13:c9:bc:a5:23:a2:f8:d7:98:e1:7e:
18:12:21:0f:40:0a:0a:f3:bc:0e:e6:20:42:4d:92:f2:27:04:
d1:0f:7c:60:d6:05:85:35:4f:1a:3b:93:88:68:31:7b:0b:53:
bb:40:0f:27
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RDk1MTExMC8GA1UEBRMoRTdENTI4REVFNTEwMjBBMEZFRURDQjVDMjZBNUI5MkM1
MEY4MUZBQzAeFw0yNjA0MTcwODE4MThaFw0yNjA0MjQwODE4MThaMBgxFjAUBgNV
BAMTDTY5ZTFlY2NiLWExZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMrJTbqDOHUk1WbzH4d+HmAUBUeJH3SS4hfqX4ahnA1XMSFsq/mlzTZU9goKSl
iRJBCGKZt2uRxfrg3m+rksmAAD9K22jZ5yecf3UMZ1EWh1y3mZiD1m/jiPEP8mxl
ntfbKsfPgAdo02aoOdHX7jxTgUJxfEan3jHx6A/ZbQGpRBWhnU1aaDf7r3Y3c22k
Gnzy9COArqRXRB9aTWyPaN1QdAQ6EnFG6pSjSA2h47z4Qoq0ZyfbSdu/30WQK1qn
JJcB8dvkU8e/+Bj7NepFdxuYjOomLKD0DzanQLy60WJ2jY7msVQtUWdpnjgflcVG
oFipe+815R6tCJYNWEZ4+QyzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvNEG8yy1
T3Hg3jkhVJDHYhqMNeEwHwYDVR0jBBgwFoAU59Uo3uUQIKD+7ctcJqW5LFD4H6ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEOTUxLzNBMDBENTRDRUY2
QzExRjA4OURENjEzRjU5NkY1NkJDLzU5VW8zdVVRSUtELTdjdGNKcVc1TEZENEg2
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNTlVbzN1VVFJS0QtN2N0Y0pxVzVMRkQ0SDZ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE
OTUxLzNBMDBENTRDRUY2QzExRjA4OURENjEzRjU5NkY1NkJDLzU5VW8zdVVRSUtE
LTdjdGNKcVc1TEZENEg2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCSNjmq8M4DPCciF79jpTNjTMuvhRFFOAnagNmtonir8iGZIGMTIDwLeemp6nmW
F10TN8hyo6SiokOvBknJBmmJ5DLVGPOHJx9pYJExFPlN7KEjvw5PORMJ1KFUToZR
mMCN03bbs/VWLJUKHRvSqB5BUD5MVW5sxBzHHfOF2crbQ5VjB/hvp33BMTHmeOGV
oGqGnkwZwOzzfPspMhho/2jmmZurBuk8cGe7WJbVjzwTdGISoX9cOzwQqewCtgct
/I6WadAsDAn2B28iUox+E8m8pSOi+NeY4X4YEiEPQAoK87wO5iBCTZLyJwTRD3xg
1gWFNU8aO5OIaDF7C1O7QA8n
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:21 2026 by rpki-client