
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier: lD+CdTRd0ytxrBmADdkT4qVqFzh56NJOb3W3i/m4uGE=
Subject key identifier: 5A:E2:DB:6C:6B:5A:58:97:29:16:19:D9:CE:7D:01:88:11:6D:F3:76
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial: 3551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number: 3551
Signing time: Mon 22 Jun 2026 15:09:34 +0000
Manifest this update: Mon 22 Jun 2026 15:09:33 +0000
Manifest next update: Mon 29 Jun 2026 15:09:33 +0000
Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: xycqjUNsKXW+HxdR7cEy2tV8HP/0Wgs3vmf5hrf/F7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 15:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13649 (0x3551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Validity
Not Before: Jun 22 15:09:33 2026 GMT
Not After : Jun 29 15:09:33 2026 GMT
Subject: CN=6a39502e-6136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:da:31:07:fc:15:ed:d7:95:cc:54:a9:30:
93:35:09:92:04:cf:81:28:24:8d:e4:43:42:9b:ef:
89:eb:65:ea:23:dd:8c:8c:a9:3a:09:d7:58:6d:69:
73:27:bc:b1:3d:6b:7c:08:9b:4f:67:07:b0:f9:6a:
4f:c4:7f:4e:65:5c:9e:db:98:73:6c:fe:81:18:61:
04:ca:f4:87:fb:12:47:54:be:63:30:02:6d:21:ed:
32:64:17:fb:73:ec:68:87:82:3c:f4:a4:84:4b:ba:
48:b3:8e:5c:88:15:1c:e2:8c:c8:2c:d3:d0:79:fa:
14:54:37:f9:d0:35:d9:5d:e5:d4:1a:f6:14:50:5c:
c4:f0:6d:52:12:7f:fb:c4:04:2d:8d:0c:40:d6:e0:
70:b4:59:6e:a6:ea:24:c6:9a:c1:00:38:1c:a7:37:
67:e4:86:27:5d:46:0f:7b:79:57:f7:73:8e:35:e9:
25:3f:a7:46:dd:47:9a:e7:f9:5f:98:43:7d:a6:56:
e0:d2:b1:bc:2d:8e:41:61:79:bd:54:4f:cf:9e:f5:
05:34:72:48:26:a7:1c:dc:54:ab:57:05:c3:7d:82:
b9:f8:92:28:94:e4:bd:26:4d:94:63:4a:4a:ef:de:
cc:aa:3c:c7:28:03:58:94:9f:bd:fe:3d:9f:88:f6:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:DB:6C:6B:5A:58:97:29:16:19:D9:CE:7D:01:88:11:6D:F3:76
X509v3 Authority Key Identifier:
keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:a8:db:bc:5d:d3:ac:b8:9c:28:38:75:f1:d8:2a:a9:e2:cc:
23:82:4c:6d:db:7d:be:a2:61:32:01:72:23:9f:f3:36:72:d3:
fd:83:87:d4:1e:5a:89:16:1a:4b:b5:e9:41:75:08:c2:21:52:
90:b3:fc:2a:3a:8b:b7:b1:92:af:28:33:99:61:e5:27:cc:b0:
37:c4:24:1a:fa:48:21:a0:05:d5:d1:29:94:61:e2:ed:52:3b:
87:67:ac:21:51:6d:53:ee:77:58:9a:fb:91:f0:be:3b:f9:76:
67:14:33:5c:ce:fd:95:bf:79:e5:cc:cb:aa:b2:7a:55:ab:69:
95:51:e6:89:97:27:23:00:a9:7c:41:7b:3f:81:66:d2:7e:f4:
90:57:9a:0f:4a:28:44:9f:ea:81:b8:5f:8f:76:81:f4:0b:04:
a3:0e:d3:22:b5:fc:5a:df:2f:ce:fe:42:58:92:d0:ef:d1:63:
73:07:82:ff:b5:45:ce:77:0d:b1:12:65:1a:e1:f4:f3:c5:44:
65:fe:82:f9:b6:3c:ea:a4:7b:e5:86:f3:7a:ab:c7:ea:22:be:
73:5e:85:6d:41:9c:cc:2f:e7:cf:c2:aa:04:1c:87:7f:c8:4e:
75:a2:92:d7:6e:1d:59:88:f2:65:c5:20:a0:c1:68:df:dd:df:
77:07:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:58 2026 by rpki-client