
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier: GVaidTSo5nvlfbDN7gTCyvXEoGxW4gvMZ5S41bEMNFY=
Subject key identifier: 65:AA:61:9F:DF:8A:70:24:44:65:06:F0:B4:31:49:3F:0C:15:09:CA
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number: 353C
Signing time: Tue 12 May 2026 15:10:45 +0000
Manifest this update: Tue 12 May 2026 15:10:44 +0000
Manifest next update: Tue 19 May 2026 15:10:44 +0000
Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: hVDeN1QTisnWtyL4yGOttVzknLKorSiGnPNNjgUyOjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Validity
Not Before: May 12 15:10:44 2026 GMT
Not After : May 19 15:10:44 2026 GMT
Subject: CN=6a0342f4-cb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:99:d9:2d:fc:a4:a2:51:31:da:94:20:97:
45:61:94:ce:81:9e:6b:e0:3a:1a:18:cc:18:c0:18:
30:73:dc:86:9c:8d:cb:55:2c:8a:4b:68:c6:3d:b9:
ff:59:79:e2:b2:60:d4:d4:be:78:91:3a:37:ad:65:
43:95:51:67:a3:94:d7:0f:28:8f:69:d5:0a:2d:57:
e5:c6:f0:5d:74:f3:8a:6a:6b:22:04:f0:11:2d:26:
15:dd:dc:46:48:49:79:fc:37:9c:78:8d:c8:25:56:
1e:c5:a1:23:bb:21:5b:3c:9b:2c:e7:4f:a1:78:4d:
44:bd:fb:98:56:17:54:73:47:6a:a2:4c:c3:0d:33:
aa:1e:ed:e3:91:3e:e6:b5:da:ba:97:4a:88:3b:98:
ad:03:e6:64:11:ea:ff:bc:ed:f5:bd:4c:c9:21:ac:
52:a2:5d:82:0c:a7:e1:2a:b8:59:b9:34:6a:3e:9f:
a0:00:ea:ae:d4:89:0f:a7:62:31:c7:5b:5c:c2:79:
bd:9e:c0:46:57:ae:d4:13:3c:f8:9b:d9:fb:80:72:
b6:54:d3:45:e4:cb:92:45:fc:85:40:77:68:3e:f2:
94:8c:b8:14:f5:cf:f6:56:1c:72:c2:55:1b:df:d7:
aa:47:af:f9:5c:2c:8c:88:b6:46:ba:ca:b2:9c:c4:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:61:9F:DF:8A:70:24:44:65:06:F0:B4:31:49:3F:0C:15:09:CA
X509v3 Authority Key Identifier:
keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:9b:35:92:b1:c6:f9:a3:ff:49:14:4b:e8:83:43:e1:8a:a3:
c7:9c:c3:b8:97:57:56:fc:65:69:71:0b:7e:da:ef:c7:f1:76:
e4:6c:e6:ae:80:76:31:c0:79:82:7d:44:1b:22:d2:e9:1a:4d:
c9:15:1d:e5:61:86:44:a6:cd:4c:5a:b0:37:ba:97:71:05:ca:
dd:89:19:d5:87:ec:c4:59:bc:18:f6:7c:bd:0b:03:48:cb:1a:
65:a4:e4:c2:17:95:1f:0b:63:5c:bb:7e:26:ab:a8:35:f6:c7:
a4:58:f7:af:18:c3:0b:36:01:c5:a1:00:d0:e0:1e:f0:09:5e:
96:67:53:51:ba:58:7c:d8:3a:5d:04:55:4b:ff:6f:53:66:77:
27:18:0d:26:51:f2:cc:17:1b:ce:9b:a6:71:08:49:d4:93:a4:
19:73:29:f0:ce:2e:b0:4b:32:6b:30:03:90:f6:33:b8:86:bb:
1a:19:40:3f:0f:20:82:58:9d:39:12:6f:e1:73:3b:fa:b8:8a:
2f:a1:f5:b6:d5:f1:77:e7:9e:d7:c4:a5:4a:3d:90:b8:76:e3:
de:a2:69:67:a0:d2:17:81:4a:c1:18:03:3d:02:50:bb:7c:fb:
be:03:7a:c1:ff:aa:3b:fb:7c:5e:09:65:2d:1d:c1:ab:95:25:
71:25:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:18 2026 by rpki-client