
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier: 13VtJXJqRIETyjvv+THT0xjqO94RVtv/A4EPHA0Ik5I=
Subject key identifier: E3:D9:93:95:CB:3C:65:36:0A:22:9C:89:FD:49:A7:C1:E5:A8:63:97
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer: /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number: 47
Signing time: Tue 19 May 2026 08:16:34 +0000
Manifest this update: Tue 19 May 2026 08:16:34 +0000
Manifest next update: Tue 26 May 2026 08:16:34 +0000
Files and hashes: 1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: x4PkdwSyS/G/3HylPvgCUtu+mZHW1DZiFxE4C/jH4kQ=)
2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Validity
Not Before: May 19 08:16:34 2026 GMT
Not After : May 26 08:16:34 2026 GMT
Subject: CN=6a0c1c62-913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:e9:c2:21:49:08:06:21:b9:be:d1:c8:76:
78:cd:7d:84:ee:2f:31:00:a4:40:7c:96:f7:65:81:
02:59:cf:d5:a3:bf:c9:bb:17:35:9d:36:cd:3f:40:
3b:1e:34:6c:92:68:2d:fe:46:e8:d0:16:b5:3e:72:
6f:74:43:2d:6d:88:77:40:06:a7:37:fb:0b:f9:f5:
55:62:b2:6d:cf:77:46:ef:71:a8:fa:17:f6:8c:ee:
7e:a6:57:d7:95:c0:92:73:45:3e:39:f7:64:27:e6:
70:cc:62:14:57:51:5b:94:f1:c6:f3:69:07:95:8e:
3f:74:a7:c2:96:0c:d6:f8:0e:90:99:4d:dc:99:7c:
2f:4b:a0:8a:9d:51:ca:2e:9d:f2:be:7d:8f:64:05:
a5:3a:00:c3:3e:58:66:d7:e3:17:93:7f:e7:75:06:
d5:4b:7b:c0:e7:8b:4a:e0:d2:b5:58:f8:8b:dc:af:
86:8c:53:bc:90:25:63:d8:b7:50:a7:26:02:a9:3d:
cc:bb:d6:0d:d5:54:e7:22:b8:55:7f:ee:b6:99:4c:
d6:a6:7a:7e:52:42:a6:ef:b0:1b:48:9f:88:4f:5d:
1e:c7:e6:a7:33:73:a3:96:cc:45:44:8a:ce:34:e8:
63:09:ea:37:b8:93:a2:28:fa:80:b4:2d:65:b5:86:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:93:95:CB:3C:65:36:0A:22:9C:89:FD:49:A7:C1:E5:A8:63:97
X509v3 Authority Key Identifier:
keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:60:9a:94:54:12:cf:06:6f:97:af:5c:57:ac:d7:29:f1:
f0:6b:c7:d6:67:33:fb:91:b5:ec:d3:a4:01:c8:48:6b:ab:c4:
8a:67:14:5e:b4:90:8d:ff:80:ae:6b:db:e6:02:dd:c6:dc:c0:
62:c2:23:a5:66:a2:d2:6c:56:f5:78:d0:ae:0e:92:7c:03:61:
04:69:1c:24:2c:0a:13:22:f9:c6:cc:b0:58:11:31:7f:79:13:
2c:17:a2:67:f6:87:d5:6f:47:2a:aa:f3:59:3a:46:16:05:a4:
f2:92:1c:48:d0:8f:6c:26:6d:53:d9:9c:fb:80:31:b4:1c:8b:
90:c9:5c:25:e9:3d:21:fa:88:68:ef:c1:e0:09:8b:ac:75:97:
46:d5:0b:08:fa:cd:74:35:56:77:fd:36:aa:98:97:fe:e6:93:
55:6f:ac:2f:28:f2:9f:ba:1f:6a:51:63:5c:29:6e:23:e4:90:
24:9f:db:26:e2:c9:5c:a0:52:af:b7:b1:85:0d:24:3b:bc:6d:
12:15:bf:bf:4d:e6:83:85:07:6e:ef:e2:84:b0:02:a8:20:86:
bb:8d:dc:ea:63:99:d8:ad:ee:a0:5c:99:07:42:60:32:fe:49:
26:b2:2b:57:f0:a5:e5:a7:7b:76:ab:2f:b0:88:2f:13:4f:88:
06:61:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:17 2026 by rpki-client