
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json)
Hash identifier: 57rg5j48R4SMzN7CoQiYjXLzeVPuNH4IeXPmeDJ3V80=
Subject key identifier: CE:CF:76:DC:9D:58:16:95:4D:C7:06:3B:88:E4:AA:82:CB:79:C7:42
Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Certificate serial: 3302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
Manifest number: 3302
Signing time: Thu 16 Apr 2026 15:23:23 +0000
Manifest this update: Thu 16 Apr 2026 15:23:23 +0000
Manifest next update: Thu 23 Apr 2026 15:23:23 +0000
Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: nHbYlTQ2B6tUzy3PeYJ6obANlk4xEcs7mtA6MXYY4so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13058 (0x3302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Validity
Not Before: Apr 16 15:23:23 2026 GMT
Not After : Apr 23 15:23:23 2026 GMT
Subject: CN=69e0feeb-e639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:c1:cf:00:b8:88:4d:77:a1:26:ee:3f:dd:
a3:c2:e7:03:8c:9a:41:58:52:e7:82:41:74:c6:b2:
32:36:4c:15:07:ec:37:da:ed:8e:86:6e:79:6f:92:
f3:25:e7:78:56:0e:b7:6f:be:06:f6:d7:f5:09:6c:
e3:1c:25:bc:b5:d7:45:33:d0:99:03:ab:60:e7:1e:
c0:09:89:7b:92:64:40:e6:32:66:d5:41:5a:cf:7d:
17:c3:57:b9:37:03:ba:8d:74:34:d5:c5:c3:7c:c5:
e2:ca:13:20:8f:07:e8:5b:ea:b7:71:e7:3c:f4:0b:
98:e8:08:43:2b:84:6c:fc:2b:6b:da:bf:05:4e:8d:
df:ed:73:50:96:26:66:e4:f2:61:17:8d:6b:39:9c:
4b:85:b1:a5:01:a7:6e:99:40:93:53:50:9f:24:2a:
64:7e:2f:9d:7c:36:d3:cf:ff:c2:45:2b:c8:2e:a6:
1f:19:10:89:cf:fd:f7:a5:4d:e5:6b:6f:59:cc:11:
c6:be:0b:aa:e5:04:3d:f5:5e:5d:25:a6:4e:d9:3a:
e5:70:90:17:cf:cb:13:d1:ee:67:39:a7:3b:e1:8f:
21:ce:e1:aa:c7:53:aa:42:a9:93:c4:d7:de:c8:37:
d8:1a:e8:d5:eb:bb:88:5b:35:85:58:bd:e0:cc:b4:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:76:DC:9D:58:16:95:4D:C7:06:3B:88:E4:AA:82:CB:79:C7:42
X509v3 Authority Key Identifier:
keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:13:bb:9f:41:1d:76:78:5a:51:a7:87:0b:2d:6a:0d:3c:
4c:3d:63:25:3e:79:62:74:25:86:e5:27:1c:39:a5:d4:e5:fc:
98:99:35:26:11:f4:7a:05:71:6d:ef:8d:24:8e:4c:76:27:1e:
b8:b4:05:5d:a9:a1:0f:e4:09:a2:35:82:ff:c7:9c:a8:e9:97:
b5:16:b3:a0:72:66:78:fd:29:99:fd:d3:19:8d:c6:2d:21:f8:
54:50:d7:02:e6:38:10:1e:5e:94:1d:35:a7:5e:2d:53:5d:03:
1c:fc:a9:98:48:8f:c3:53:c3:68:e3:45:c3:a0:e6:91:91:27:
a0:18:db:af:fc:1f:7d:ea:e1:ba:b4:8d:71:d5:a1:82:15:d7:
f1:d8:9b:b7:49:4d:98:81:2f:3a:d2:a6:32:37:58:92:a0:f4:
be:43:82:23:da:e3:e7:54:87:5d:e3:c4:00:0d:cb:03:88:35:
ad:a8:f2:91:fc:c6:3b:57:1b:1f:dc:1c:3c:67:fd:79:9f:0b:
bd:1e:8d:c5:75:fe:7a:d7:37:c7:df:2b:2e:4a:ac:97:6c:76:
8a:c0:8a:81:c7:12:5d:45:91:eb:97:fa:f5:f9:96:d2:e5:e7:
eb:c8:aa:46:c5:f6:5d:7a:9e:ee:ff:a2:03:83:64:2f:06:99:
d2:1d:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:41 2026 by rpki-client