
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
File: AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json)
Hash identifier: VXBVu0mpE7sdJ+a5ZmGC2jDs6CwEjzGL4PN0tdEQf9g=
Subject key identifier: 14:D5:1F:5F:02:F3:40:8D:53:8A:26:45:C3:42:EF:06:53:0E:34:99
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Certificate issuer: /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
Manifest number: 9C
Signing time: Mon 05 Oct 2026 07:48:54 +0000
Manifest this update: Mon 05 Oct 2026 07:48:53 +0000
Manifest next update: Mon 12 Oct 2026 07:48:53 +0000
Files and hashes: 1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: uwc1zZlhqzDN5W7/D2lT5+Yp33Z+FyCoAofx1x9T5YA=)
2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: Zt3RoYdx+ktUym4g6P4kPcAqBTvxRnzxSch53ynh8OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Validity
Not Before: Oct 5 07:48:53 2026 GMT
Not After : Oct 12 07:48:53 2026 GMT
Subject: CN=6ac35665-b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:aa:95:32:9a:a9:2a:50:02:94:12:5e:ba:
15:28:63:04:6d:a8:b3:22:51:25:3f:40:b4:47:0c:
e8:bb:82:e4:fa:b9:03:e7:20:2e:f1:73:66:8f:b4:
e5:f5:23:16:a5:22:93:e1:e7:9c:6c:8d:8e:86:fe:
dd:f4:2a:82:9e:fa:8b:a8:62:f1:37:b7:24:df:2e:
af:74:35:73:65:c2:41:77:6f:06:7e:69:b3:12:6a:
9d:c2:f3:75:d6:d5:47:7d:0a:59:98:31:65:9d:50:
70:8c:44:72:cf:55:2f:02:53:ed:e2:c6:29:c0:7b:
bd:75:2c:27:59:5d:1e:9d:61:e6:1c:a0:8b:c3:94:
fd:8f:e2:c3:4a:2f:92:2c:3f:6e:ba:5e:53:ad:ba:
97:db:c7:63:66:df:d9:05:45:c6:09:ca:93:82:61:
23:ff:5e:71:86:96:9e:51:c6:20:f5:10:cd:67:68:
07:39:29:cd:c8:c3:3a:b7:48:c2:c7:2f:49:cf:aa:
3d:b5:40:b1:1e:0d:8a:5f:73:1e:61:2e:d3:a0:bd:
b4:9d:a2:02:09:0b:eb:7f:b6:3f:24:88:79:9d:a3:
e7:45:f0:fd:91:e3:b7:00:59:69:cc:7a:f7:ee:b6:
32:f5:63:1f:a0:92:ae:c4:08:97:91:40:16:81:ad:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:1F:5F:02:F3:40:8D:53:8A:26:45:C3:42:EF:06:53:0E:34:99
X509v3 Authority Key Identifier:
keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a0:70:eb:d3:1e:ef:08:ae:1d:f5:40:46:f5:ba:dc:53:a3:
57:45:79:ef:47:ec:35:35:59:90:48:f1:e8:00:03:65:3e:10:
8c:de:89:50:c6:18:cd:f3:7f:d0:6a:5b:e7:ec:ee:2b:f1:84:
d7:6a:c7:c4:04:fb:b6:25:8a:ba:8d:95:e4:ea:ea:3c:ec:ad:
db:b9:3b:7b:9d:8f:48:d8:97:af:37:01:f8:0c:35:b6:76:18:
b6:5e:e2:e3:76:56:47:91:19:ac:07:e0:39:b6:61:fa:56:23:
04:26:5b:4c:13:93:23:62:cf:2f:e6:47:3c:ed:71:de:93:fe:
ee:54:d4:39:18:29:4c:ac:40:b4:89:57:5e:e1:a3:29:ed:d3:
0c:ea:e9:83:76:76:90:c6:af:09:28:58:ab:c1:65:c4:a5:b2:
ee:0a:eb:12:52:79:bb:48:1e:11:71:9c:02:fa:f5:87:31:36:
63:3f:ad:2c:e7:da:3b:23:d0:23:d6:21:4b:ce:79:f0:89:c4:
7e:43:1b:b1:d3:ae:fa:b3:40:49:b4:37:ec:cc:c8:51:33:ed:
27:41:00:7a:32:e2:79:25:04:8e:ae:54:f1:16:34:5a:4c:a2:
bc:3a:59:ac:b2:4c:82:7b:d6:4e:60:95:ad:db:1e:96:09:c8:
06:98:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:46 2026 by rpki-client