
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: 2c08CntzGts9KnlYsfG2KabZGurVQNWPzVE3i1ttrtg=
Subject key identifier: 93:77:E7:44:79:F9:35:6F:17:30:78:FD:5F:28:F0:32:8F:D7:02:2E
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 97
Signing time: Mon 03 Nov 2025 06:31:27 +0000
Manifest this update: Mon 03 Nov 2025 06:31:26 +0000
Manifest next update: Mon 10 Nov 2025 06:31:26 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: cX8W6EaeXO+ZInubx76KXeqxuYck02RT7utwB/N7Wog=)
2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Nov 3 06:31:26 2025 GMT
Not After : Nov 10 06:31:26 2025 GMT
Subject: CN=69084c3e-1c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:5f:08:5b:c7:92:cd:0c:23:01:84:01:ac:
4f:bb:cb:9e:07:e1:03:9e:61:87:13:1c:2f:1b:da:
01:14:62:a8:ea:93:13:f0:15:8f:10:7a:d3:9d:e3:
f3:d1:91:9e:15:46:ec:b1:4d:68:cd:b8:f7:2c:3f:
98:47:c3:06:a2:d3:c9:aa:be:52:ed:6c:48:a8:21:
45:11:2d:3b:69:87:0c:ef:85:15:43:be:44:73:96:
ca:f4:45:e3:06:a3:43:9f:14:8e:cd:3c:3e:9d:11:
d1:9a:a2:2f:cd:5b:0f:21:b8:85:84:c7:ce:5c:f9:
85:d0:5a:ce:7d:d9:25:21:1d:a2:e8:5d:9a:cf:76:
a7:12:53:07:71:12:e7:23:f5:a6:c1:f7:21:7a:71:
b1:7f:ed:85:e5:e0:71:a1:c6:71:a6:da:82:81:94:
3f:f6:17:1d:1e:04:c6:39:e8:f6:95:cf:e3:7d:a9:
8f:a6:cf:1e:ef:bb:8d:80:89:fc:ba:d9:75:f4:aa:
74:9d:6f:57:94:20:da:53:36:28:68:6b:ed:8d:20:
9b:1a:d5:90:64:47:68:18:cc:3f:c6:59:7f:58:db:
80:b5:ba:d6:ba:ba:16:ca:7a:6b:72:1f:65:a9:3c:
b6:05:ab:ed:45:f8:78:29:62:e4:d4:9e:36:5d:4d:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:77:E7:44:79:F9:35:6F:17:30:78:FD:5F:28:F0:32:8F:D7:02:2E
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5e:86:ae:e6:09:df:52:4f:f7:06:83:1d:93:48:c6:79:11:
a2:6d:3f:9f:c7:6c:3f:c3:50:6c:91:4c:54:d1:84:33:65:8c:
b3:a2:fc:7b:5b:d1:82:5b:e1:75:99:23:43:7b:0f:17:e0:c9:
0b:60:cf:9d:56:7f:09:d1:42:b7:c5:b7:fc:cb:c8:d7:29:c7:
f1:f7:de:05:aa:60:d4:ed:33:61:0e:62:04:0f:5a:e2:43:b2:
b5:1a:5b:84:36:30:c0:c1:97:e8:9a:52:80:4f:c1:ab:e6:6c:
ce:77:9d:1c:bd:44:b2:8a:4b:2a:ef:04:d4:58:df:e9:92:41:
56:c3:7a:3d:9c:60:ef:ac:ad:34:6f:cf:ca:6a:0c:22:ec:59:
89:d8:15:06:56:e4:b6:7e:9b:07:63:4d:51:e1:21:cf:38:a8:
a3:5b:2f:74:7d:c9:0a:61:ba:14:9b:65:6e:2d:ea:f4:75:0b:
07:bb:0e:d0:0a:c5:5d:8d:c0:85:c9:a4:85:76:f6:d2:db:66:
f8:79:fc:f6:a9:d9:b9:12:44:55:82:85:df:0e:31:30:7f:fc:
e8:9c:8e:56:1f:65:e2:c6:6f:0e:3e:f1:fc:c9:31:75:f8:14:
25:95:c0:5c:7a:dd:29:07:39:10:96:8c:fb:fd:09:3a:83:89:
3d:2c:20:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRFM0QxMTAvBgNVBAUTKDY5MTgxQ0Y0NTFGOEIzRkVDNjRGQzgyOThCNTIyRDQ4
OENBNUM5RTYwHhcNMjUxMTAzMDYzMTI2WhcNMjUxMTEwMDYzMTI2WjAYMRYwFAYD
VQQDEw02OTA4NGMzZS0xYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA58JfCFvHks0MIwGEAaxPu8ueB+EDnmGHExwvG9oBFGKo6pMT8BWPEHrTnePz
0ZGeFUbssU1ozbj3LD+YR8MGotPJqr5S7WxIqCFFES07aYcM74UVQ75Ec5bK9EXj
BqNDnxSOzTw+nRHRmqIvzVsPIbiFhMfOXPmF0FrOfdklIR2i6F2az3anElMHcRLn
I/WmwfchenGxf+2F5eBxocZxptqCgZQ/9hcdHgTGOej2lc/jfamPps8e77uNgIn8
utl19Kp0nW9XlCDaUzYoaGvtjSCbGtWQZEdoGMw/xll/WNuAtbrWuroWynprch9l
qTy2BavtRfh4KWLk1J42XU1kBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN350R5
+TVvFzB4/V8o8DKP1wIuMB8GA1UdIwQYMBaAFGkYHPRR+LP+xk/IKYtSLUiMpcnm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REUzRC9GRDFFNDU1MERF
NjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNfN0dUOGdwaTFJdFNJeWx5
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHllWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNf
N0dUOGdwaTFJdFNJeWx5ZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0Xoau5gnfUk/3BoMdk0jGeRGibT+fx2w/w1BskUxU0YQzZYyzovx7
W9GCW+F1mSNDew8X4MkLYM+dVn8J0UK3xbf8y8jXKcfx994FqmDU7TNhDmIED1ri
Q7K1GluENjDAwZfomlKAT8Gr5mzOd50cvUSyiksq7wTUWN/pkkFWw3o9nGDvrK00
b8/Kagwi7FmJ2BUGVuS2fpsHY01R4SHPOKijWy90fckKYboUm2VuLer0dQsHuw7Q
CsVdjcCFyaSFdvbS22b4efz2qdm5EkRVgoXfDjEwf/zonI5WH2Xixm8OPvH8yTF1
+BQllcBcet0pBzkQloz7/Qk6g4k9LCCk
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:57 2025 by rpki-client