
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier: rToiIT91pKTg0Qo39Ee5Qv+2bemoiTg3FK9mD230I5Q=
Subject key identifier: 27:92:ED:32:2D:AE:5B:62:32:76:E2:7E:B3:6C:D1:E5:53:D4:07:D9
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial: 3560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number: 3560
Signing time: Wed 22 Jul 2026 15:13:44 +0000
Manifest this update: Wed 22 Jul 2026 15:13:43 +0000
Manifest next update: Wed 29 Jul 2026 15:13:43 +0000
Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: l/9+iBqENunv10YBRh9cvau6Xu3bgHRoTReZW/iJKZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Validity
Not Before: Jul 22 15:13:43 2026 GMT
Not After : Jul 29 15:13:43 2026 GMT
Subject: CN=6a60de27-c98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:dd:5e:b0:d4:bf:07:8b:36:23:b6:2b:72:
14:23:84:14:f5:8f:fa:df:6d:00:66:a8:73:7d:a3:
1f:d1:e5:0d:02:70:fb:3c:b1:59:47:7d:17:73:a6:
d5:5c:60:53:62:aa:b3:b5:14:17:7e:8c:d7:34:fd:
2c:d1:57:aa:0d:7f:aa:84:15:61:8d:25:41:8a:0d:
e8:33:43:1e:c6:23:9b:a9:8c:26:8b:ac:14:25:c2:
c7:b8:81:d4:3d:9a:93:37:6c:17:bc:95:17:b3:f0:
c7:14:f1:7b:03:85:b9:2c:b0:e9:f3:42:c2:a9:8b:
7f:21:46:9d:05:54:fb:b6:4c:38:c1:02:34:aa:2d:
6e:c4:c6:ea:fb:fa:c4:9a:2c:56:f0:e9:09:c4:0a:
45:72:ff:22:d3:42:fb:81:77:9e:eb:ba:b6:95:71:
c0:13:11:4a:cf:db:11:7e:6d:f6:44:4c:70:5b:cb:
e1:4b:65:5d:76:79:2b:4c:8d:74:f7:f3:af:49:0d:
b8:90:0f:f7:9f:60:3a:27:5f:5c:57:30:d8:f8:1b:
57:41:7b:b1:54:26:0d:e7:03:32:c6:97:78:4b:4c:
4b:54:c2:f3:45:88:dc:bb:1f:58:5c:72:14:2f:99:
e7:e7:a2:72:fd:32:93:fd:3b:e8:89:b6:17:57:ed:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:ED:32:2D:AE:5B:62:32:76:E2:7E:B3:6C:D1:E5:53:D4:07:D9
X509v3 Authority Key Identifier:
keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:5d:c2:f9:0a:f3:9c:99:52:13:ae:6a:00:14:b2:c0:e6:
65:6c:11:8e:6c:16:d8:c0:cf:25:be:d1:3b:98:f0:35:0f:d6:
ea:09:b9:bb:98:c0:2f:b2:d2:9b:41:f4:f7:dd:11:25:9d:15:
19:2a:9c:8d:e1:c1:d5:6e:e1:1a:50:22:a5:38:c3:55:d4:ff:
28:eb:7f:ca:72:5d:61:6d:90:ad:ed:9b:8d:d5:58:9b:0c:91:
00:44:ac:8d:c1:27:2c:90:99:5b:b5:ae:d0:df:51:02:88:80:
b6:9d:51:92:8c:d9:d0:30:02:6f:94:f4:72:f1:43:cd:37:69:
13:81:de:eb:e5:2f:f9:de:c9:56:66:64:bd:da:81:c0:86:29:
9e:58:00:5f:c0:43:89:6b:f4:a4:bf:5d:05:40:96:62:d4:23:
b3:35:d4:b0:7f:f2:bf:b7:40:dc:68:8f:37:53:3b:7c:c2:24:
0f:1a:c5:fe:a9:92:dc:c9:56:ed:0f:49:ee:d0:46:d9:e4:72:
9e:b4:ab:c6:01:bd:0c:27:4e:7e:1e:0f:77:6d:03:fe:e3:16:
8a:1a:01:8f:41:a2:1e:7f:bf:25:fb:72:81:79:75:02:35:c1:
83:ca:79:c4:b9:87:5a:d9:b1:af:58:0c:6a:8a:02:eb:c3:cb:
43:ec:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:31 2026 by rpki-client