
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
File: AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json)
Hash identifier: w4HdP3lu6VL7hOrrfE9v8cVROqT4pGQnP1LY/51y5fc=
Subject key identifier: 53:0B:4E:CF:0F:76:CB:76:DF:89:86:BE:A9:6B:69:97:64:0E:3C:A3
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Certificate issuer: /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
Manifest number: 3E
Signing time: Sun 05 Apr 2026 07:50:34 +0000
Manifest this update: Sun 05 Apr 2026 07:50:34 +0000
Manifest next update: Sun 12 Apr 2026 07:50:34 +0000
Files and hashes: 1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: ZIyB0sf5Yh48hgTO1l1fl5G6KHxpjG1alsdBEnBl8JI=)
2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: BZhp55139TaDhIi/iXNGDBndZI5iisOCsjZn6WgMrG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Validity
Not Before: Apr 5 07:50:34 2026 GMT
Not After : Apr 12 07:50:34 2026 GMT
Subject: CN=69d2144a-cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:05:c3:1b:0f:aa:c9:8e:7a:36:44:96:f7:
9b:75:51:bf:c5:43:62:29:cb:e1:5e:ce:91:35:9e:
4f:4c:93:5d:97:de:e8:37:f1:6c:72:fd:99:8d:74:
a8:c5:64:17:10:f1:8b:d3:d5:9f:b2:60:3a:dc:8f:
00:3b:95:e2:50:4c:e9:5f:b0:14:b9:33:91:21:5f:
9d:87:eb:a7:fc:ff:d2:bf:02:bb:e2:d6:db:b6:f7:
42:70:37:cf:b0:bd:9f:ad:34:c5:56:63:05:22:cc:
a5:a6:61:3b:43:8f:68:87:33:80:91:18:c1:f5:fe:
82:77:0a:45:2a:ab:58:6d:36:82:e3:bd:ca:ad:9f:
40:2b:a5:05:59:55:cc:1c:4e:c7:6a:ba:71:24:d8:
62:28:70:10:a7:69:ee:7d:55:6c:bc:cc:13:33:02:
e1:f0:ba:c9:c0:c3:c2:b8:3e:8b:e4:da:a3:72:a3:
46:f0:97:5e:83:ec:df:0e:6e:0a:23:57:e5:1a:4c:
a5:31:4c:4a:60:fd:63:d6:9c:b3:e7:92:63:7f:8d:
f4:26:2e:d4:4e:f7:4b:1c:0f:92:4f:5b:40:d8:eb:
5b:3b:7e:c0:93:80:77:93:17:dc:50:15:74:14:5a:
ac:1f:46:a3:6b:5e:5e:f2:ad:1c:27:42:c4:4d:97:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:4E:CF:0F:76:CB:76:DF:89:86:BE:A9:6B:69:97:64:0E:3C:A3
X509v3 Authority Key Identifier:
keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:56:3a:e4:b1:f0:14:80:c3:e0:eb:d0:f6:e3:56:b8:87:
e6:16:a2:1a:05:2f:66:9e:8b:57:98:44:a1:89:2b:2e:9d:39:
5c:62:ba:ad:d0:61:4e:a6:a1:56:a5:01:83:94:c4:f0:4b:b0:
86:fa:53:c4:ec:77:05:95:5b:06:df:a2:2c:05:39:2e:f9:f5:
d0:db:8b:9d:70:9f:8b:a6:bc:3a:bb:d0:d8:a2:7e:ec:e6:05:
18:da:a4:df:57:37:84:95:88:34:81:5a:f8:30:59:8c:f8:0e:
05:5f:cd:4f:0e:58:a0:e8:f8:78:24:51:45:be:7b:56:a3:36:
0b:74:f2:ac:5c:7b:0e:61:46:a2:8f:33:0d:8f:0f:8e:96:79:
f9:73:8f:28:45:52:49:48:e2:56:96:7e:df:d8:2e:d0:00:86:
4b:59:ab:b5:bc:3e:8b:80:37:aa:55:a1:22:5a:85:f3:39:9a:
2c:64:ba:51:95:90:cd:05:3b:48:8c:ee:85:8b:99:d2:8c:8e:
94:c1:a8:0f:2c:bd:8f:b6:ce:72:df:aa:f4:73:cd:94:ad:8d:
dc:76:2c:6e:db:b4:ba:ae:c8:22:9c:ce:79:d6:62:71:05:af:
2e:c8:e4:7c:d2:91:37:c2:b1:87:e8:0c:a1:99:4d:fe:e7:69:
e3:2b:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:07 2026 by rpki-client