
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json)
Hash identifier: gowv2kIk63I2hr0iwSf0oqSkWChetrZrMPeDpwo0B30=
Subject key identifier: 18:1E:AD:13:0A:E3:FE:ED:B6:28:DA:42:22:83:91:EC:21:CC:0C:16
Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Certificate serial: 0594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
Manifest number: 0594
Signing time: Tue 18 Aug 2026 23:34:29 +0000
Manifest this update: Tue 18 Aug 2026 23:34:29 +0000
Manifest next update: Tue 25 Aug 2026 23:34:29 +0000
Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: t2KlKzbOM8Y7/KfgFPaMBbUVV3ItCcOywOZTaKCSZPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl
rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428 (0x594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Validity
Not Before: Aug 18 23:34:29 2026 GMT
Not After : Aug 25 23:34:29 2026 GMT
Subject: CN=6a84ec05-e475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:d2:15:6b:d3:ec:77:99:69:51:ce:3c:4a:
a6:a9:7a:e3:99:fd:8a:91:56:e0:d1:58:b5:e9:93:
af:dd:11:8a:0e:4c:f9:6c:8f:52:e1:e7:1f:aa:86:
ec:ae:fb:67:98:94:73:17:fc:48:22:ab:a9:92:0f:
b1:bc:e0:9f:4f:98:5b:d4:58:35:bf:70:7f:c9:c9:
a4:32:fe:f1:7a:e3:61:a4:2f:ee:eb:b9:52:97:b7:
6c:bc:13:5c:38:e9:16:07:88:df:60:b3:df:7b:9d:
5a:36:85:8a:93:c3:2a:0b:d9:f4:6e:b1:d4:10:d0:
eb:0c:c8:c3:9b:fe:35:f9:3d:2f:e5:5a:e9:c8:bf:
f7:1d:7d:a1:3f:46:c8:fe:1a:81:31:59:64:0a:06:
d6:0a:ae:af:72:79:50:b9:24:81:14:a9:73:87:e0:
8a:bf:af:04:90:59:7d:a4:96:0e:d8:68:76:c9:16:
44:7f:f8:8f:d1:49:c1:bb:42:97:a6:60:3b:ad:d3:
99:dc:7e:63:fb:fc:9a:7d:00:65:fa:c0:d0:b8:96:
6c:f0:e1:93:81:38:f8:6b:9a:cd:ab:15:6b:b2:6c:
46:7e:bc:de:38:65:e5:94:9e:5f:69:a8:7a:c7:76:
be:a8:71:5c:b9:63:a8:dc:fa:b8:66:47:34:51:97:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:AD:13:0A:E3:FE:ED:B6:28:DA:42:22:83:91:EC:21:CC:0C:16
X509v3 Authority Key Identifier:
keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d9:e2:04:2b:8c:48:b7:3d:e6:e6:41:d2:aa:7c:c0:bb:06:
be:ed:af:0e:3b:34:c7:a2:3a:52:b2:63:23:cf:f2:9e:92:00:
29:ac:7c:85:c0:3d:0a:86:50:a0:12:11:47:77:98:bd:30:32:
dc:7a:2e:7a:01:7d:f6:54:fd:d8:d0:ab:44:d4:6d:00:5c:bc:
4a:d4:ee:77:f8:b0:f8:45:61:34:0c:ec:f1:36:02:0f:9a:ff:
f0:31:68:cb:fb:07:cf:1d:5f:a8:0c:35:cc:ba:4d:f9:6e:1c:
27:ae:2d:cc:7a:47:30:d3:a4:9c:ac:9c:6c:15:9c:c2:ba:b8:
47:39:fd:3c:f0:a9:0c:3c:e3:fe:4a:98:73:9b:51:36:5b:ac:
cd:41:6e:c2:b1:82:5b:f1:be:95:90:48:8f:78:90:f2:19:ba:
d5:14:67:b3:df:7f:74:e0:1f:85:43:b1:2c:d1:83:a4:6c:1d:
e4:15:97:96:92:b3:84:b2:73:79:5a:93:d2:b9:42:29:00:7a:
3a:a7:9a:20:bc:0f:ab:82:dc:69:8a:a2:b6:33:21:cd:53:68:
61:a7:94:26:8a:27:8d:8a:8f:f0:08:72:3b:83:ce:2b:c0:0f:
03:1e:99:ef:df:7c:a1:e5:93:22:5f:24:37:ad:12:fb:e2:06:
10:79:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:11 2026 by rpki-client