
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: Zp88ximCHZm8TEyWn70vUjE/mK+dJjbWw1V1xyu1ccM=
Subject key identifier: 2D:D3:0D:C6:3A:3A:DC:FA:90:31:3F:4A:56:BA:E6:86:DE:BA:46:F1
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 0150
Signing time: Mon 01 Jun 2026 06:58:55 +0000
Manifest this update: Mon 01 Jun 2026 06:58:54 +0000
Manifest next update: Mon 08 Jun 2026 06:58:54 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: Oj40LiFO/kcnqyhzremWStYFQQin6rvWLqp369O9J2g=)
2: A609DABE064511F19E4E77B72C3D8C67.roa (hash: t305WJBrmTItbJa7N9zTDZCt2i0nTXvWuqgpxx54cOM=)
3: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: KvlIwfCNinBDApUM0hPw82jOaBTrt/CmpdmsPJpgE8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Jun 1 06:58:54 2026 GMT
Not After : Jun 8 06:58:54 2026 GMT
Subject: CN=6a1d2daf-d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:c3:f8:10:26:3c:c4:f0:37:f2:dc:39:db:
8f:24:18:c2:ab:7b:d6:dc:80:61:01:74:42:67:8c:
9e:03:f5:cb:89:4d:7e:5a:d7:84:78:6b:73:02:93:
76:b2:91:68:f7:67:8a:5b:07:5b:0a:e7:01:6a:5b:
ce:7b:b5:db:67:11:40:18:ab:e1:1b:11:18:1e:90:
46:27:b2:3f:2b:d3:8d:f2:30:94:99:43:f6:d7:32:
0e:c7:dc:a7:da:0e:28:d5:dd:b2:cb:4e:88:38:41:
c4:ee:52:3e:f0:58:b5:69:a2:8f:1c:2d:a3:9f:9d:
25:87:15:e1:25:b2:fd:fb:87:95:5f:eb:58:0a:a7:
5b:69:0d:e9:6f:e8:3d:a7:01:bb:69:9f:1d:fe:c8:
cf:fc:fa:ab:4c:4d:e3:60:17:a3:e1:12:dd:4a:2f:
ec:09:34:66:e2:b0:5c:c2:44:ff:76:d9:1b:fe:c2:
0b:56:88:de:c4:c8:74:ea:08:ce:06:81:67:3d:b4:
8c:d2:56:f3:d1:27:94:f1:49:c6:ac:17:ce:22:8d:
13:2a:ea:0a:d4:ec:91:02:76:90:cd:d6:fa:8c:cd:
e3:0d:ea:b0:c4:66:90:5b:5a:41:97:90:35:25:b9:
36:b4:fc:4c:e1:65:6a:11:94:0c:ef:21:c0:3a:e7:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D3:0D:C6:3A:3A:DC:FA:90:31:3F:4A:56:BA:E6:86:DE:BA:46:F1
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5f:8f:66:e9:48:ae:fa:8d:3a:ab:0f:91:61:90:df:fd:da:
cb:f2:66:a6:17:b6:1e:aa:28:9e:ff:95:e9:b3:61:6e:9c:40:
f3:f1:d6:7a:0b:86:1a:52:4e:cf:e9:2a:59:e6:ca:6f:12:42:
73:b6:6c:28:90:38:ce:82:1f:69:c0:16:ad:bd:9f:32:a3:de:
58:95:6b:a6:c0:15:79:b5:11:31:c1:d3:ef:74:54:fa:03:3b:
87:3f:3e:89:95:f2:be:53:a8:c0:29:7b:99:c1:3a:27:87:03:
c6:1e:b3:90:d4:ed:bf:83:89:ea:8f:42:84:bf:e6:d5:19:92:
ee:21:7c:16:db:8c:49:ae:02:50:c1:9d:d3:05:2c:3f:6d:bc:
8f:28:be:23:84:53:d7:02:63:b3:22:d2:15:11:9a:6f:10:ff:
b1:51:86:4c:06:b0:62:e9:aa:05:7d:14:f8:cf:e6:22:40:61:
95:f0:9c:40:d7:34:5b:3b:bc:3a:c4:79:bc:f0:ee:d5:c0:ba:
fc:3b:6a:28:4e:ec:51:24:45:25:67:9a:56:0b:83:05:38:47:
55:fa:a2:26:52:23:f7:c4:9d:6d:94:39:22:59:78:b6:75:af:
12:c8:ea:d5:3b:29:47:95:78:d6:43:5d:3d:32:58:0c:6f:48:
6b:c7:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:14 2026 by rpki-client