
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json)
Hash identifier: 8YG8diI3BbRq/zjWF5MwuqBg0+/vPVDnD3UFt1lBars=
Subject key identifier: F3:35:A2:32:27:8F:70:A8:58:A8:46:91:4A:16:A2:8F:F3:68:64:52
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
Manifest number: 0241
Signing time: Sun 05 Apr 2026 02:08:02 +0000
Manifest this update: Sun 05 Apr 2026 02:08:01 +0000
Manifest next update: Sun 12 Apr 2026 02:08:01 +0000
Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: 0Wn/F9/2KEICAAwl6Cui8TKwlmpxYZo7inQlFypWhY0=)
2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: 7BC7HNDh6Br/00hX4ySBoQmimMqlfllsxVp+csn53ug=)
3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: tfF4YrF0sRQGLJpG/mPIZwvq6Hg8gdDF0qFcvaTRTDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Apr 5 02:08:01 2026 GMT
Not After : Apr 12 02:08:01 2026 GMT
Subject: CN=69d1c402-ab07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:88:f9:c4:f8:ed:4d:4c:39:93:5b:b9:8b:
4d:b0:50:b4:45:03:cc:3b:07:67:7f:37:81:8a:28:
36:06:00:c1:14:2b:b5:cb:9a:fb:bd:f9:b1:e8:59:
39:93:ac:70:10:9d:05:e7:1e:eb:1b:18:93:da:cf:
0e:75:75:58:a4:ce:a3:97:5e:56:af:8f:f4:42:6c:
19:a6:f5:ee:96:14:64:fc:b3:c0:cb:83:85:bc:c5:
c3:f6:92:75:9b:67:22:bf:30:47:c4:ea:e4:a6:07:
6d:63:f4:18:47:80:36:e3:81:00:68:63:2c:3a:36:
0a:73:72:ea:db:a2:ea:e9:d2:80:cf:ac:19:ca:de:
be:af:e4:38:49:ee:b1:3d:21:2c:23:11:c9:ae:83:
17:8e:f6:82:2e:a4:f2:e0:e4:c6:a9:a0:85:b9:ca:
97:f4:dc:89:7f:84:81:a1:58:6f:8a:4e:88:5e:7d:
67:d0:67:96:bd:10:b0:81:cb:90:c3:b0:35:55:e6:
9d:0f:d7:60:66:cc:af:3e:89:b5:4a:6e:a9:a0:b5:
cf:4a:12:24:f1:b4:0a:7d:92:55:97:b0:7a:d5:f0:
a0:6a:54:35:d8:90:fd:28:8a:0b:67:94:b2:6b:9a:
bb:32:ae:c5:f2:e3:a2:37:e4:21:d2:d6:83:af:cf:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:A2:32:27:8F:70:A8:58:A8:46:91:4A:16:A2:8F:F3:68:64:52
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:c3:44:95:a0:76:06:e7:31:b9:b1:04:2a:e9:27:15:f0:
62:a7:ae:d4:e9:b6:96:09:67:8e:47:9c:8e:e9:d6:3f:6f:f7:
67:10:0b:72:7a:41:9e:94:80:e6:fa:ed:e7:80:0b:6b:cd:10:
ad:4f:a1:01:79:e9:f2:5c:62:92:ef:b3:06:e9:11:16:70:63:
60:5f:dd:2f:66:79:59:d3:44:ab:91:11:4b:aa:fb:4e:5e:93:
b8:0f:db:18:a0:87:4d:d8:5e:51:f9:9c:05:c9:ed:e0:dc:d6:
c8:2a:46:20:5d:6f:6e:78:c0:5f:f5:6c:ff:40:d7:64:76:7e:
27:e7:ed:99:e5:47:b9:a2:fe:4b:a8:1e:63:27:4e:ff:80:af:
30:23:ef:49:65:10:33:52:bb:77:fa:56:b8:ac:e1:d4:7f:b4:
d6:52:ed:e6:ea:ef:16:d1:24:0d:b3:5b:95:3a:ec:db:e1:37:
42:86:e7:68:8a:86:28:78:cd:9b:f9:ba:28:85:e4:a0:f7:fb:
b0:cc:26:a8:e3:6f:5f:46:ed:c2:09:0c:e2:ce:87:90:b3:d8:
d4:3c:13:e2:14:f0:ba:1d:83:86:43:b2:29:82:6a:ee:52:a2:
ea:db:24:73:a9:00:74:c8:cb:d3:ef:47:2a:35:57:a9:9e:2b:
d9:8c:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:50:48 2026 by rpki-client