
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: fE4xi5gjbdk1vtxwqsHWKfZV3tn9tFF7pbOLqZQb7Ak=
Subject key identifier: E8:45:26:80:A2:AD:B8:E1:4E:0D:E1:5F:2F:13:48:34:52:2F:5D:78
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 012D
Signing time: Wed 25 Mar 2026 05:49:59 +0000
Manifest this update: Wed 25 Mar 2026 05:49:58 +0000
Manifest next update: Wed 01 Apr 2026 05:49:58 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: kLFF9eOcm/PlOo/sp4K7G6HwxmpKfkG1soOpBonvrlU=)
2: A609DABE064511F19E4E77B72C3D8C67.roa (hash: t305WJBrmTItbJa7N9zTDZCt2i0nTXvWuqgpxx54cOM=)
3: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: KvlIwfCNinBDApUM0hPw82jOaBTrt/CmpdmsPJpgE8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Mar 25 05:49:58 2026 GMT
Not After : Apr 1 05:49:58 2026 GMT
Subject: CN=69c37787-c2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:2b:69:c7:3e:33:76:11:89:ed:a8:fa:d2:
1d:a2:68:c7:d0:bc:b3:b0:4a:b3:51:0b:b0:89:aa:
eb:5d:3c:c2:67:87:ae:3a:0f:72:70:98:1d:30:75:
0b:fe:68:cc:79:25:21:83:29:11:ac:24:f3:33:3f:
9c:f0:72:59:a6:2b:bd:26:30:c6:fc:2e:f3:93:36:
c8:f0:82:ee:4a:ed:43:76:64:9e:f3:d9:c9:16:0a:
ec:5b:4c:15:e4:bb:3e:77:53:b5:df:6f:2c:cd:b5:
19:ac:7f:13:13:a4:ca:6a:07:84:37:f8:7e:46:e4:
4a:c9:cd:78:cf:ca:cc:a5:98:e6:1e:b9:e3:b9:f5:
ae:15:cf:a9:4e:61:9c:40:57:63:5a:00:70:08:93:
a8:c9:51:5b:3d:a5:60:43:ce:4e:d4:cf:03:d8:7a:
30:6e:2b:fd:f7:18:36:b1:de:44:f7:88:6d:28:5d:
7d:5b:30:22:c5:ad:1a:f4:f9:7b:b7:ed:14:26:81:
30:82:84:a4:43:97:04:e6:04:80:24:26:be:19:9c:
c6:7b:f1:5e:86:83:6f:46:de:79:73:09:32:82:3e:
df:d3:02:da:52:7e:6a:6c:9b:72:fe:9b:25:f3:7a:
6c:d5:df:05:70:af:98:4e:14:90:53:2b:66:d2:36:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:26:80:A2:AD:B8:E1:4E:0D:E1:5F:2F:13:48:34:52:2F:5D:78
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c7:4a:56:1a:29:8d:a6:84:df:87:30:6d:5e:64:8b:bf:a7:
c7:83:ae:d7:22:de:d6:6b:92:50:88:81:e3:3b:f7:22:67:7d:
b9:b7:d2:6d:60:03:2d:72:a9:94:dd:ca:9d:72:5f:9f:8f:84:
de:8d:d4:84:82:7d:14:18:53:a8:f7:b0:f9:86:5b:ba:78:8e:
8c:75:17:17:24:29:6b:7a:a0:dc:f1:81:5b:1a:1b:01:a5:40:
bb:64:3f:84:c7:0d:94:3e:ee:48:03:76:de:f0:aa:74:79:75:
28:0a:0c:d1:46:7c:ac:8c:1b:44:82:b7:ca:ed:2d:3f:77:16:
72:df:cb:54:f9:9a:14:48:4b:c4:b7:29:4a:2b:c7:93:97:82:
04:b7:e4:18:51:ca:1c:b0:5e:ae:68:6b:f5:08:04:1e:30:cc:
8a:73:dd:23:f1:71:67:eb:41:85:4a:05:92:d9:3d:f6:6d:b7:
c1:dd:a0:b3:33:9a:3d:f4:9f:f1:df:60:87:81:63:d5:0d:5d:
ba:e9:26:0f:7a:0d:6f:91:79:d6:81:4a:d7:24:a5:d1:49:ee:
24:42:94:ec:57:6e:27:e8:a4:8f:8a:df:8e:1b:0e:ab:81:2b:
d1:a5:05:0e:56:ec:45:5f:9b:2c:2d:7a:7e:3a:32:2c:c8:3b:
9a:d3:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:25 2026 by rpki-client