
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier: iH41lAfv0P09MpYNvWzOM1imb9WkSlW+z79+x070Jlw=
Subject key identifier: 44:0C:DA:79:00:D7:86:33:22:ED:75:F9:3C:19:D5:14:42:62:26:20
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial: 0698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number: 0686
Signing time: Mon 20 Jul 2026 23:15:14 +0000
Manifest this update: Mon 20 Jul 2026 23:15:13 +0000
Manifest next update: Mon 27 Jul 2026 23:15:13 +0000
Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: rhkmNtYerz8RIbXUGoJgu+636jR5m86chV6VfF9WEy8=)
2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Validity
Not Before: Jul 20 23:15:13 2026 GMT
Not After : Jul 27 23:15:13 2026 GMT
Subject: CN=6a5eac02-6af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:31:72:f1:d5:a0:4d:7d:25:6d:f3:d2:7d:
d4:b1:c7:70:a8:d7:47:8e:fd:c4:9f:46:a8:d4:91:
59:a6:09:03:ba:06:8f:d5:c0:24:b4:d3:5f:07:67:
d0:65:f4:f6:8d:b7:a0:71:80:3e:8b:2b:16:80:68:
be:49:60:04:99:ff:9d:ca:69:ff:69:d0:b6:81:3f:
66:0c:08:5b:99:7e:49:54:e6:c1:c8:50:15:94:2e:
81:99:11:4f:1b:8d:7f:56:e5:77:a9:4a:84:97:5a:
ef:b9:92:b8:24:32:e0:70:4f:cc:9c:1d:72:82:88:
56:b2:78:2d:76:ba:00:5f:c6:4b:72:a0:b9:e3:1e:
cc:c1:8f:ed:18:1c:13:56:d8:d9:50:89:bb:85:ce:
b5:79:fe:a2:39:d5:18:e0:9f:82:4d:33:ae:be:5a:
64:1c:49:f3:6a:ee:82:06:b5:59:36:74:ba:31:69:
f9:e6:b9:77:58:0f:d6:e4:f1:5e:9c:d4:82:8c:b7:
13:bc:ea:2d:9d:d2:98:9e:6f:8c:83:c5:cc:8e:2a:
6d:18:1b:f1:6b:0b:bf:f6:0b:07:dc:fe:96:30:d3:
d1:04:6c:62:77:e0:77:7f:12:49:d4:59:e0:f3:8b:
42:0b:37:64:c7:10:fc:64:d1:0a:f6:47:74:95:cb:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:DA:79:00:D7:86:33:22:ED:75:F9:3C:19:D5:14:42:62:26:20
X509v3 Authority Key Identifier:
keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:28:2a:65:77:cb:ba:dc:66:68:4a:1d:56:36:2f:34:21:31:
1b:e9:66:25:0a:f1:eb:4b:2c:91:b3:19:9b:1d:6e:20:fb:40:
a3:67:e0:de:78:27:09:f3:36:c5:41:f9:7a:3c:64:99:7a:f4:
28:3a:0a:9b:90:97:1e:69:db:3b:8d:78:e1:f1:2e:0a:2b:be:
3b:7a:29:5b:93:15:5f:81:16:f5:9e:1a:33:8a:bd:4f:cf:58:
d0:cd:b4:33:22:f5:60:c2:f0:fb:58:8b:ab:dd:fd:84:da:f2:
c2:10:90:44:e5:39:a0:5d:69:1b:a1:6b:3f:31:b1:fd:b7:c8:
25:cc:33:90:2d:33:d0:8e:46:c5:eb:f7:82:cf:be:b0:65:20:
fb:4f:54:50:82:41:a2:0b:f1:4c:99:67:0b:09:8e:f7:49:3f:
d1:52:bf:85:57:d4:8a:8a:ce:ce:e4:ec:f0:ea:29:5d:56:b2:
26:18:29:e3:fd:0d:1a:6c:3c:d8:cf:0b:d8:7c:1b:bf:12:46:
af:2e:53:19:d8:c7:16:58:91:9f:ed:42:4b:46:53:50:0e:6a:
9e:0e:9e:a7:2d:da:35:82:b3:5a:53:c1:13:58:26:d2:67:c2:
a2:21:4c:7c:a5:24:cd:de:e2:a3:f2:a2:c4:ae:2a:f0:65:3f:
da:db:56:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDQjYxMTAvBgNVBAUTKDAxMTBCQjNBQjUwRTNBMEQ0NDkwQzMyMTAzQkJDNDA1
NERDNjgyMUUwHhcNMjYwNzIwMjMxNTEzWhcNMjYwNzI3MjMxNTEzWjAYMRYwFAYD
VQQDEw02YTVlYWMwMi02YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhkxcvHVoE19JW3z0n3UscdwqNdHjv3En0ao1JFZpgkDugaP1cAktNNfB2fQ
ZfT2jbegcYA+iysWgGi+SWAEmf+dymn/adC2gT9mDAhbmX5JVObByFAVlC6BmRFP
G41/VuV3qUqEl1rvuZK4JDLgcE/MnB1ygohWsngtdroAX8ZLcqC54x7MwY/tGBwT
VtjZUIm7hc61ef6iOdUY4J+CTTOuvlpkHEnzau6CBrVZNnS6MWn55rl3WA/W5PFe
nNSCjLcTvOotndKYnm+Mg8XMjiptGBvxawu/9gsH3P6WMNPRBGxid+B3fxJJ1Fng
84tCCzdkxxD8ZNEK9kd0lcvSRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQM2nkA
14YzIu11+TwZ1RRCYiYgMB8GA1UdIwQYMBaAFAEQuzq1DjoNRJDDIQO7xAVNxoIe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkNCNi8yQUI3Q0M1QUND
RjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09nMUVrTU1oQTd2RUJVM0dn
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FSQzdPclVPT2cxRWtNTWhBN3ZFQlUzR2doNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkNCNi8yQUI3Q0M1QUNDRjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09n
MUVrTU1oQTd2RUJVM0dnaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAASgqZXfLutxmaEodVjYvNCExG+lmJQrx60sskbMZmx1uIPtAo2fg3ngnCfM2
xUH5ejxkmXr0KDoKm5CXHmnbO4144fEuCiu+O3opW5MVX4EW9Z4aM4q9T89Y0M20
MyL1YMLw+1iLq939hNrywhCQROU5oF1pG6FrPzGx/bfIJcwzkC0z0I5Gxev3gs++
sGUg+09UUIJBogvxTJlnCwmO90k/0VK/hVfUiorOzuTs8OopXVayJhgp4/0NGmw8
2M8L2HwbvxJGry5TGdjHFliRn+1CS0ZTUA5qng6epy3aNYKzWlPBE1gm0mfCoiFM
fKUkzd7io/KixK4q8GU/2ttWtg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:17:29 2026 by rpki-client