
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier: B9bm6/BluBooksjrvfFMDKLecMHHSI7pgaD1BbnfKEc=
Subject key identifier: 22:18:EA:89:47:6A:0B:C8:FC:1A:D8:FF:D8:44:9D:5C:E2:0E:6D:30
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number: 064A
Signing time: Tue 24 Mar 2026 22:25:27 +0000
Manifest this update: Tue 24 Mar 2026 22:25:26 +0000
Manifest next update: Tue 31 Mar 2026 22:25:26 +0000
Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: KT+xS8PPAijWVyN3ZysKWYrTo+ud2XpXsMj9QZ0L8Hs=)
2: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
3: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Validity
Not Before: Mar 24 22:25:26 2026 GMT
Not After : Mar 31 22:25:26 2026 GMT
Subject: CN=69c30f56-fec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:b8:2c:12:6a:93:17:4a:f0:c0:6a:7d:16:
b8:fe:22:c3:72:d0:56:be:06:41:75:41:4d:c5:2c:
16:ca:85:c7:9c:0c:b2:c8:cb:5c:bc:15:61:75:a5:
aa:af:c9:f3:aa:2a:49:75:d1:50:29:75:c7:c2:d0:
93:4c:96:3a:d3:53:69:01:b9:be:db:32:07:da:ac:
da:e3:12:89:b4:c3:6c:17:17:86:2b:7c:1a:2a:d4:
40:15:c1:21:cf:16:b7:c2:11:83:71:4e:51:d1:cc:
5c:d1:d2:92:dc:a3:da:0f:32:a9:05:35:e5:e4:2b:
c8:91:d7:0e:42:d8:e7:85:db:fe:7d:79:ff:70:77:
8a:36:6e:58:82:4c:7f:88:f2:21:69:42:ea:d4:02:
e4:ed:59:9f:9f:f0:50:3d:b4:05:8e:12:36:ec:fe:
af:51:a9:4e:c9:d4:db:0d:55:9e:fb:84:c0:ba:e3:
f1:2b:cd:bc:b6:33:6d:e1:28:fc:6d:8e:70:06:3e:
83:89:2d:61:42:9b:1b:b7:12:0e:45:98:33:09:65:
0d:0b:7e:23:80:9e:7a:b0:5c:68:3f:fc:a4:ab:ba:
b9:e9:3d:77:ac:7e:1e:6e:52:32:07:e9:96:96:e9:
e1:fb:57:f0:b0:92:83:22:5f:13:bb:54:63:bd:3c:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:EA:89:47:6A:0B:C8:FC:1A:D8:FF:D8:44:9D:5C:E2:0E:6D:30
X509v3 Authority Key Identifier:
keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:f8:e0:d4:21:17:2a:4a:de:0c:71:5b:48:e0:9b:ae:70:ef:
00:fb:68:ff:d3:90:99:28:b6:f7:67:32:c9:2b:a3:5c:63:de:
0e:fd:0f:d1:97:fb:98:b3:32:41:3b:f9:4a:3f:bf:d6:11:90:
6a:2c:01:13:91:2d:df:fc:e2:db:b1:41:1d:a3:35:e0:57:84:
21:8c:7c:40:c1:de:5e:b4:de:59:4c:4d:f5:05:60:2a:7c:63:
48:b1:66:94:7f:e8:ce:c7:a1:f7:30:c9:d1:76:d3:45:5b:3d:
af:d3:41:38:95:be:16:30:99:f5:f2:b5:61:1a:db:5e:d4:93:
5d:72:09:c2:a7:03:76:3c:f4:2c:9e:05:ad:fd:26:8e:a0:7a:
9b:c4:20:24:d8:02:59:fd:c8:fb:90:63:75:43:60:29:eb:34:
10:e8:ff:c8:21:94:4f:fb:e0:04:eb:a3:02:f6:a6:34:cf:f3:
60:a9:4b:ad:73:d3:ad:ab:4a:91:ff:47:6d:7b:48:fa:90:d0:
49:b2:03:92:bd:04:6f:26:25:99:0d:d1:77:32:05:c6:24:8a:
fa:2e:e4:bb:0c:36:c0:c2:32:23:52:4e:63:4c:a7:35:e8:ec:
d2:70:43:62:d5:2b:27:d5:67:81:9f:e3:bf:ef:17:09:de:7f:
82:72:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:27 2026 by rpki-client