
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier: lG1YkfL+dw+EQVgagUYyAs9Y6PSWqeWk1CPri0e63fo=
Subject key identifier: 93:CA:1F:B6:38:BC:AE:03:86:B7:E6:48:A7:B6:28:50:51:B6:AF:6F
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial: 06B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number: 06A7
Signing time: Tue 22 Sep 2026 22:09:16 +0000
Manifest this update: Tue 22 Sep 2026 22:09:15 +0000
Manifest next update: Tue 29 Sep 2026 22:09:15 +0000
Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: MJG4aEE8A40SVoNUsHiOCkT4ksRlzEcs5Nc7iP83uWY=)
2: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
3: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Validity
Not Before: Sep 22 22:09:15 2026 GMT
Not After : Sep 29 22:09:15 2026 GMT
Subject: CN=6ab2fc8c-0fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:17:3e:1c:69:d8:2e:81:57:21:8c:a3:25:
1a:4a:bc:1c:5a:b6:4c:98:7d:ad:19:de:dc:d5:58:
fc:93:89:2e:4a:9b:2b:49:c5:f4:f3:5f:29:6c:e7:
81:78:1a:6f:0c:97:c3:bd:28:e0:40:74:bc:74:34:
da:29:99:e0:61:b5:05:5f:1b:c2:5b:d5:fd:24:f1:
6d:7b:63:6f:66:9b:97:34:98:d1:5b:29:6e:77:7a:
d7:eb:ff:c4:08:32:a9:c2:7a:e4:fe:0c:f5:cc:ba:
8c:5e:38:0a:e0:50:3f:70:30:66:3d:ce:c8:fa:53:
ba:a9:14:c2:48:66:32:8f:ac:cd:6c:a5:15:da:fc:
56:4c:d6:4e:f6:9e:4e:58:4f:16:61:3c:bf:35:08:
00:73:66:cf:7a:4e:14:ad:05:63:50:4a:7c:0a:13:
17:aa:f6:98:2a:40:f4:5b:01:76:f0:9a:ec:d2:84:
70:33:ac:c8:b3:88:9b:46:88:2c:89:43:a4:bc:69:
a8:3f:35:0b:37:c5:80:f9:bc:1e:8e:c3:61:f4:f0:
e1:d9:0d:2c:b5:a7:27:78:f6:20:a6:ea:ae:74:fe:
ee:2b:c5:81:09:64:d3:0c:a0:4d:c0:95:90:b5:cd:
b8:03:82:1a:92:46:7a:47:8e:1a:f3:bd:c7:09:e3:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:1F:B6:38:BC:AE:03:86:B7:E6:48:A7:B6:28:50:51:B6:AF:6F
X509v3 Authority Key Identifier:
keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:a5:15:98:09:a5:7d:c5:54:b9:f0:72:dd:5b:ce:95:0e:
65:d7:a7:45:9c:91:25:5b:8a:92:b9:ff:ff:41:29:20:0c:08:
7d:fa:bd:14:13:8b:c7:e4:cf:54:64:bc:a2:13:09:56:e2:c7:
7f:6c:b1:dd:e2:f8:fe:a8:09:ff:79:2e:e2:08:37:83:6d:38:
ce:53:37:c1:58:61:0d:d1:8d:4c:71:2a:bd:0b:83:b4:bf:2a:
39:2b:58:db:8c:64:b3:09:21:dd:e6:62:2a:cc:71:ea:1e:78:
ac:fd:28:c9:9d:97:80:65:6a:66:19:0b:07:60:31:8b:d5:30:
31:02:21:45:be:de:56:fc:fe:f4:40:b1:34:ad:5f:72:30:f4:
65:fb:86:89:f6:cb:08:f3:3e:20:d7:91:28:c3:41:da:fc:3c:
1d:70:66:91:15:d9:ee:b9:91:5f:62:8a:cc:d5:a6:c8:8e:d0:
da:ea:73:ac:f3:41:1c:89:51:69:82:d5:4d:a2:17:99:41:8d:
6d:2b:e4:f9:9c:e1:48:dd:af:a5:ab:85:f7:2f:a2:e5:ed:e8:
ce:de:e4:01:c4:dd:b7:89:dc:5a:4e:f8:3d:67:9c:39:08:3f:
3f:63:e6:ec:e8:a3:ef:2d:0f:1e:3c:8b:26:c2:a6:97:d0:78:
c8:9f:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:44:31 2026 by rpki-client