
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json)
Hash identifier: TKMjRYylMpXj6t7D/szoUvmXoHpUdxATy0XbFCkDml4=
Subject key identifier: 2D:54:42:4F:F1:A7:D5:42:16:5C:89:BD:64:1C:54:BD:90:2E:EC:58
Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Certificate serial: 053C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
Manifest number: 053C
Signing time: Sun 01 Mar 2026 00:04:59 +0000
Manifest this update: Sun 01 Mar 2026 00:04:59 +0000
Manifest next update: Sun 08 Mar 2026 00:04:59 +0000
Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: +8OEcG4CAHHJtRO5QCcs7LSZKNer64NvFQJt+Kg/ook=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl
rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Validity
Not Before: Mar 1 00:04:59 2026 GMT
Not After : Mar 8 00:04:59 2026 GMT
Subject: CN=69a382ab-95d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:f4:a1:2f:c6:19:a8:26:2b:08:9d:ad:95:
00:7a:13:c5:1c:60:56:02:54:f4:90:fd:18:cd:c1:
5f:7d:78:35:25:99:29:a3:80:80:d1:24:aa:94:27:
b8:78:7f:09:f3:f6:48:2a:35:05:5f:0c:e7:09:4f:
3e:0e:49:8a:dc:38:58:6c:3f:64:4b:9c:f3:89:89:
02:22:ed:01:51:2b:b7:55:1f:be:84:73:5a:4a:0c:
d9:0f:fb:39:fb:99:96:c7:3d:72:f6:2d:50:e2:73:
b9:d2:90:f0:8a:46:11:25:60:13:55:58:d0:44:4d:
d8:48:61:39:8b:18:7d:cc:8c:71:c6:5a:9c:36:6b:
62:61:87:5c:85:4b:c8:01:90:86:e7:b5:b8:6d:1a:
8c:bf:2b:b4:b8:97:d4:ea:79:6c:50:31:57:39:1b:
f6:ef:ad:66:5f:6d:65:9f:f7:68:de:14:d3:84:12:
d6:1d:d5:b1:19:7f:86:dc:9e:0f:2c:a8:1c:c3:9d:
05:6a:fb:ac:d1:2b:3a:e3:54:88:96:f5:71:d7:f8:
09:44:8b:6b:5a:7a:10:78:7c:13:2f:93:f2:ad:09:
05:9c:18:29:0d:f7:e2:86:37:40:12:d7:9e:49:19:
c4:32:75:d4:e3:d3:a1:57:83:a3:b9:2f:8c:1d:fb:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:42:4F:F1:A7:D5:42:16:5C:89:BD:64:1C:54:BD:90:2E:EC:58
X509v3 Authority Key Identifier:
keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:48:a9:a1:d1:52:9c:a4:92:a1:ff:58:41:ca:ed:2c:4d:b5:
1d:86:43:9a:ff:81:cd:76:36:d7:24:20:76:03:83:45:a3:99:
dc:73:63:65:be:a0:c9:ff:1a:6c:07:a0:16:d6:be:92:ed:4a:
5f:22:ea:ca:a1:b7:cd:85:58:3b:ff:13:03:3e:3f:eb:0d:d0:
d0:c7:f9:0b:dd:60:0f:e3:15:c0:ef:58:3c:b0:77:b2:72:b3:
f4:26:17:85:e6:41:37:84:f6:92:7c:ad:6c:21:fc:47:c9:ac:
21:2b:e4:82:6b:4b:06:b9:79:66:ff:2d:17:df:cb:b7:ac:7c:
b1:f8:5d:6c:cc:f6:c0:9f:6c:13:c5:72:fe:61:a5:f7:8e:4b:
d1:52:4d:14:61:19:57:d3:78:05:70:09:45:c9:9a:1f:ab:39:
85:71:f9:47:31:9b:58:46:59:36:38:3e:62:bd:ca:97:85:b5:
ea:0f:31:d8:fb:53:0f:c4:da:af:16:94:57:f0:54:22:c6:f0:
b0:41:53:17:1d:97:05:9a:6c:75:99:a0:f6:20:1a:2d:ad:c5:
a9:7f:c1:0d:ae:a3:82:a5:7e:1e:9a:ff:c8:2a:59:a7:62:db:
6b:8c:44:43:fc:33:8d:6d:79:31:a1:a2:bf:57:7c:c6:8a:50:
aa:ee:32:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0
QzRBQjZCN0IwHhcNMjYwMzAxMDAwNDU5WhcNMjYwMzA4MDAwNDU5WjAYMRYwFAYD
VQQDEw02OWEzODJhYi05NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRv0oS/GGagmKwidrZUAehPFHGBWAlT0kP0YzcFffXg1JZkpo4CA0SSqlCe4
eH8J8/ZIKjUFXwznCU8+DkmK3DhYbD9kS5zziYkCIu0BUSu3VR++hHNaSgzZD/s5
+5mWxz1y9i1Q4nO50pDwikYRJWATVVjQRE3YSGE5ixh9zIxxxlqcNmtiYYdchUvI
AZCG57W4bRqMvyu0uJfU6nlsUDFXORv2761mX21ln/do3hTThBLWHdWxGX+G3J4P
LKgcw50Favus0Ss641SIlvVx1/gJRItrWnoQeHwTL5PyrQkFnBgpDffihjdAEtee
SRnEMnXU49OhV4OjuS+MHfuwYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1UQk/x
p9VCFlyJvWQcVL2QLuxYMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw
QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4
N3ZBMjlmYmt4N05NU3JhM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq0ipodFSnKSSof9YQcrtLE21HYZDmv+BzXY21yQgdgODRaOZ3HNjZb6gyf8a
bAegFta+ku1KXyLqyqG3zYVYO/8TAz4/6w3Q0Mf5C91gD+MVwO9YPLB3snKz9CYX
heZBN4T2knytbCH8R8msISvkgmtLBrl5Zv8tF9/Lt6x8sfhdbMz2wJ9sE8Vy/mGl
945L0VJNFGEZV9N4BXAJRcmaH6s5hXH5RzGbWEZZNjg+Yr3Kl4W16g8x2PtTD8Ta
rxaUV/BUIsbwsEFTFx2XBZpsdZmg9iAaLa3FqX/BDa6jgqV+Hpr/yCpZp2Lba4xE
Q/wzjW15MaGiv1d8xopQqu4yJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:14 2026 by rpki-client