
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json)
Hash identifier: qj5Vw+5tZh1TzMcxXObAyeiesggNwqfrIo0kZPyOjGM=
Subject key identifier: 83:04:18:EF:0A:5B:DA:F4:03:3C:48:56:97:AF:3B:FE:6B:6B:7F:CA
Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Certificate serial: 32F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
Manifest number: 32F6
Signing time: Tue 24 Mar 2026 15:22:20 +0000
Manifest this update: Tue 24 Mar 2026 15:22:19 +0000
Manifest next update: Tue 31 Mar 2026 15:22:19 +0000
Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: jIPKxj7TicTEXSZ1Dfhhq1LY18VIosuIkvvyPdBGPvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13046 (0x32f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Validity
Not Before: Mar 24 15:22:19 2026 GMT
Not After : Mar 31 15:22:19 2026 GMT
Subject: CN=69c2ac2c-454c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:15:ef:ca:b3:43:3d:cd:86:23:99:34:80:
3c:d9:6c:5d:0f:db:62:f4:e5:7b:8a:61:c5:cf:e9:
87:08:fb:48:d5:0e:67:b8:01:cb:7c:ef:a5:e1:35:
84:ca:df:16:0b:20:22:7b:2f:ac:ff:1f:be:d7:07:
55:22:8e:43:a3:09:23:d9:d9:47:f6:8f:06:f2:a5:
f5:59:9f:e1:a4:5f:18:53:fb:6b:e7:b8:d9:c2:e3:
dc:5e:c0:69:23:c1:9e:33:10:f4:56:16:7b:9e:51:
fe:e0:58:80:4c:17:e6:41:42:24:1b:ef:31:ab:af:
07:bd:be:00:07:5c:66:62:58:81:4b:ec:2b:c8:29:
ea:e6:1e:a1:f3:9f:7f:ac:aa:b6:56:ef:f0:a1:bc:
4d:b1:48:a3:39:a8:99:18:3a:a4:f5:36:ed:7c:db:
9e:5e:17:1a:c8:32:1f:1d:54:f9:66:80:21:8a:76:
47:64:d3:c3:e7:69:a3:d3:4c:47:7b:a6:1a:50:27:
86:14:4f:f3:0b:e9:02:2a:f4:97:b9:5a:fb:2d:b8:
de:3a:9d:3e:98:89:0a:62:2c:69:7f:69:33:63:b4:
58:ff:b1:4a:9e:30:2f:79:e3:27:49:b2:d5:bf:81:
63:6d:a5:91:9f:b6:0e:f3:f6:7f:95:81:93:63:7a:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:18:EF:0A:5B:DA:F4:03:3C:48:56:97:AF:3B:FE:6B:6B:7F:CA
X509v3 Authority Key Identifier:
keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9c:53:c4:51:2d:f5:aa:37:d1:4c:d6:f2:8d:85:61:b6:fe:
55:8a:3f:ad:cd:4e:e0:43:8b:9c:47:8f:20:8f:03:a2:7c:0e:
f0:3a:55:d4:21:a6:39:2a:a1:af:73:7a:9c:ee:99:29:a2:3b:
f5:06:9f:60:99:cb:5d:fd:44:7b:c3:9a:49:b0:e6:9a:79:76:
d6:3d:d6:4f:ee:14:24:00:4f:56:92:d4:e8:cf:11:74:7b:75:
73:60:f8:bf:28:f3:93:a3:37:50:6a:53:c7:2c:01:e8:0c:d3:
ad:5d:6a:69:b1:ea:42:5f:2c:11:58:60:75:ee:29:68:0e:95:
b9:d5:f8:63:34:bb:76:3a:07:a3:d4:77:16:65:28:72:b0:b9:
76:f2:57:72:69:a3:4e:29:ed:55:3b:f7:da:7f:c4:c3:91:a0:
b9:3d:a2:21:e6:ea:fb:0a:d5:f0:a0:65:53:f5:c0:00:12:4d:
a9:4f:1c:3a:ef:f8:76:84:d7:42:2e:24:66:a1:d9:bf:07:cb:
ab:9d:f6:85:06:36:03:ea:b6:8d:2e:b8:0e:5c:97:9f:91:7e:
9c:d6:5b:ea:c5:58:11:d4:75:01:f6:7d:6a:63:7c:31:91:de:
3c:fa:dc:be:4e:2a:84:ea:37:5f:fd:8b:11:a4:bd:91:94:de:
f6:89:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:56 2026 by rpki-client