
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier: pfDshohHZbwrQ5r+D80CaRxKxUP110bOkFppjh5oYv4=
Subject key identifier: F6:E8:99:13:73:61:C1:2A:5B:6E:A6:5F:97:02:C3:6E:43:8C:7C:2A
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial: 0681
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number: 066F
Signing time: Thu 04 Jun 2026 22:42:17 +0000
Manifest this update: Thu 04 Jun 2026 22:42:17 +0000
Manifest next update: Thu 11 Jun 2026 22:42:17 +0000
Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: dsAujknQK1kYeZDu/AgIgV2FginJNOJWJTe2sQ2rdwE=)
2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 22:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Validity
Not Before: Jun 4 22:42:17 2026 GMT
Not After : Jun 11 22:42:17 2026 GMT
Subject: CN=6a21ff49-cfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:4a:4f:b9:3b:9f:f6:7a:f3:fc:9a:7f:a6:
5e:0a:49:08:6f:9a:c4:6a:70:f2:f8:1a:93:93:98:
e0:f3:9c:39:c9:a0:e8:27:9d:6e:39:e3:7d:e4:9c:
b0:99:83:56:b0:d0:3b:f8:22:7e:1c:e5:f4:3e:02:
5b:31:d5:12:ba:3f:4b:63:ba:ef:c7:97:9b:a8:f8:
e2:78:b2:ee:36:c1:a7:a0:07:fb:62:9f:d6:19:5a:
c5:76:04:78:f8:68:5f:7a:7f:a1:bb:af:63:50:8f:
47:8f:3b:b3:0c:fe:3d:c2:f8:98:be:eb:1d:97:48:
fc:f4:3d:60:ef:80:47:ac:6a:d3:ba:b1:ca:52:13:
39:b8:73:92:47:b7:c7:e9:94:14:82:d8:ab:f5:9e:
9b:12:54:e5:99:02:76:24:55:68:02:b0:51:6c:10:
0d:f8:b1:c1:0e:61:cd:e1:a8:38:93:73:42:9e:24:
d0:41:78:9d:4a:51:a4:57:b9:cd:e3:74:22:f8:94:
a6:65:f4:b5:35:5f:52:9f:73:f7:a2:5f:6a:bb:b5:
f2:48:1e:1f:6c:2a:f5:f9:08:62:03:0d:ae:67:4c:
4d:99:87:a4:f6:34:a3:fd:15:c7:7e:90:6c:59:cb:
ad:4d:ab:71:20:37:8f:3f:5a:5e:a7:f4:cc:50:1c:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E8:99:13:73:61:C1:2A:5B:6E:A6:5F:97:02:C3:6E:43:8C:7C:2A
X509v3 Authority Key Identifier:
keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4e:8b:b6:f8:53:64:6c:84:8f:89:c5:2a:1f:9e:c1:29:87:
8a:23:fb:3e:d8:93:f9:bd:ed:84:fb:84:18:fd:60:b6:cd:75:
f5:59:fa:66:4a:5b:ab:00:d7:94:28:5d:4e:c6:e3:39:95:a6:
09:00:20:89:7c:88:25:bd:1c:ca:3d:9a:83:ed:9d:bc:f0:a6:
69:4c:4c:98:b4:e9:10:a6:46:f9:a0:c5:ac:40:85:7b:b3:50:
3f:0a:70:e0:1f:78:d3:5f:83:1a:7b:2f:33:a1:9c:01:5b:c2:
78:de:97:90:d8:f3:7e:97:15:11:cf:72:45:01:ae:b0:bb:07:
13:c7:a5:0e:f9:36:36:50:01:08:0d:6e:69:0b:67:64:16:0c:
ab:fe:2c:bc:51:a7:ee:66:a9:35:37:14:af:26:3e:b3:58:3a:
a5:13:05:6d:8e:dd:f1:f6:52:b6:46:d0:5e:66:17:64:dd:53:
7b:7e:64:dc:84:f9:a7:c4:3b:1b:31:f3:da:62:35:4b:de:4a:
81:50:69:57:b8:45:a8:ef:34:e5:ca:a4:cc:bb:dd:78:74:24:
e6:56:0f:a2:31:72:e9:6a:77:67:80:29:8e:30:76:06:ab:89:
3c:57:17:69:a2:56:b7:91:cc:f4:7a:90:5e:50:27:2b:5a:a0:
c7:c2:c4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:18:46 2026 by rpki-client