
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
File: AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json)
Hash identifier: 4x5WBuRPgS8/2lQu9kKUmJ3dqQ0YwqroGpfGAyZTpW8=
Subject key identifier: 6A:B0:A1:95:DF:E8:7F:31:B6:F2:5F:23:ED:2D:8A:0E:63:A3:59:94
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Certificate issuer: /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
Manifest number: 54
Signing time: Tue 19 May 2026 08:05:57 +0000
Manifest this update: Tue 19 May 2026 08:05:56 +0000
Manifest next update: Tue 26 May 2026 08:05:56 +0000
Files and hashes: 1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: FclQYV179RGmdvpr9vgi0euJCSYUZz6uv3+tdSANV/Q=)
2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: BZhp55139TaDhIi/iXNGDBndZI5iisOCsjZn6WgMrG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Validity
Not Before: May 19 08:05:56 2026 GMT
Not After : May 26 08:05:56 2026 GMT
Subject: CN=6a0c19e5-e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:34:bc:ba:dc:99:51:80:06:70:c6:dc:cf:
6d:b0:50:89:1f:05:48:6a:da:9d:6a:c1:ab:0e:bc:
d1:46:97:02:48:c5:c0:40:c4:7f:7b:a9:29:83:0c:
67:aa:1f:49:7c:7f:79:e8:8d:f5:73:14:b6:d0:dd:
17:ab:f3:20:5d:fb:ff:5a:34:c6:65:28:b8:0a:af:
75:68:8c:29:2e:5e:0f:ec:a3:5b:d6:d0:c3:61:79:
8a:95:54:0b:53:b8:81:e5:70:fd:18:3c:ab:3e:4f:
49:85:48:f0:e8:cc:e5:00:00:eb:39:be:6a:e7:c7:
ba:23:8c:47:cd:b0:58:44:08:65:e7:33:85:46:73:
01:18:d5:9c:aa:2e:25:d4:82:43:7c:d4:08:ee:d6:
6e:0b:fc:35:1c:4e:30:e0:94:6b:8a:49:46:77:e8:
f3:27:e0:82:06:a2:f8:39:6e:ac:ec:92:ce:4d:7f:
18:c5:d3:57:39:f0:b5:5d:72:f7:29:6f:ae:17:99:
a7:b9:b9:4a:e7:09:bd:9a:40:2a:ab:1f:b8:65:58:
3c:b8:8d:04:c9:cd:c0:42:87:83:13:80:99:cc:5d:
25:ba:c9:ff:fc:2f:f7:cc:77:74:3b:c5:d4:2f:e4:
dc:7e:47:ff:cd:82:d2:5a:e2:4a:f2:d4:f1:59:71:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:A1:95:DF:E8:7F:31:B6:F2:5F:23:ED:2D:8A:0E:63:A3:59:94
X509v3 Authority Key Identifier:
keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:af:54:14:f8:d5:f4:0c:69:7d:f0:76:42:a2:db:ab:10:58:
52:fc:63:02:d5:5a:39:8c:e4:69:aa:44:ac:e3:bf:2b:af:01:
33:65:d4:b2:23:31:05:44:81:e9:b8:aa:c3:c1:20:d0:76:d9:
9c:96:aa:c3:c0:e3:df:f4:17:65:bf:bc:ba:48:66:0f:54:6d:
da:f2:34:f8:2f:00:d7:64:a4:57:0e:28:b3:dc:f4:8c:e4:86:
41:b4:81:af:92:3b:a1:56:bc:55:8a:e0:dd:b8:55:d2:15:31:
a1:1d:34:f5:f8:68:ec:b4:18:f7:26:d0:0b:00:87:3b:fb:5e:
2f:f4:a7:72:38:0f:0b:ea:e0:86:15:36:34:8f:e7:a1:1c:de:
b5:ce:95:e8:fa:c4:75:1f:75:c5:76:d3:c6:90:00:39:98:8a:
52:da:a8:a3:ca:4d:5f:77:34:0d:3e:b2:e6:db:aa:b9:17:4d:
99:64:fc:de:95:ac:82:1f:e8:ec:45:89:92:be:86:96:9e:4b:
37:86:f0:c1:b1:3b:52:91:ad:da:00:e8:58:2f:21:3b:9a:18:
97:82:27:d8:80:4c:64:92:a7:82:a6:50:f8:8f:70:f7:82:12:
50:bb:10:04:10:3a:c9:27:14:1f:17:9f:47:24:85:2c:ae:7e:
69:15:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:21 2026 by rpki-client