
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: DO7kVEZY80PQmrNT43dLDHQZ2Q3a3Y+7/noxiRE0G1A=
Subject key identifier: 23:A8:2F:D7:AA:AB:A1:7D:81:D0:6B:56:9E:8F:36:E2:E2:B3:ED:AE
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 0146
Signing time: Wed 13 May 2026 06:27:42 +0000
Manifest this update: Wed 13 May 2026 06:27:42 +0000
Manifest next update: Wed 20 May 2026 06:27:42 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: BawVB1dSgmXs8qU9W2GL4UMXQ7FibGotRGKXaC089MI=)
2: A609DABE064511F19E4E77B72C3D8C67.roa (hash: t305WJBrmTItbJa7N9zTDZCt2i0nTXvWuqgpxx54cOM=)
3: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: KvlIwfCNinBDApUM0hPw82jOaBTrt/CmpdmsPJpgE8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: May 13 06:27:42 2026 GMT
Not After : May 20 06:27:42 2026 GMT
Subject: CN=6a0419de-f58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:39:fa:30:f5:47:a9:4c:6e:a3:9a:c2:d3:
0f:6f:8b:dd:0e:dd:33:ce:c0:a6:14:83:1d:28:2b:
5f:ae:e0:17:e8:54:12:fa:6a:5c:54:87:a0:e0:77:
a2:b7:0b:4d:8c:d9:da:82:81:06:24:3f:41:9b:c1:
b6:fa:af:73:40:84:88:ee:77:ff:97:6f:7b:1c:fd:
32:8b:27:ac:02:dd:4c:62:5a:14:90:08:98:b6:10:
94:b0:4f:0b:9a:3a:3a:65:31:e7:ed:39:e1:31:ea:
d0:31:9c:c9:8f:87:80:fd:c4:01:1c:48:70:ad:ae:
2a:05:f7:ca:0f:64:5c:70:8d:d4:a1:6e:ad:e8:84:
9c:3a:55:cb:be:e6:80:1d:ed:ca:c8:69:b4:4a:68:
68:45:6a:b6:43:31:23:69:eb:d0:0c:31:fd:14:90:
bb:08:db:5c:fd:aa:67:9f:89:37:40:da:67:19:a6:
ee:ae:60:e3:06:ab:09:b0:5c:52:d9:7c:f4:ca:62:
de:70:1a:36:dd:e9:b8:39:bd:55:3f:37:29:44:4a:
cd:a4:08:dc:0f:90:cf:d0:d0:43:58:da:76:81:8b:
30:84:9e:00:48:12:7a:72:50:cc:37:3c:c8:82:dd:
b3:37:eb:0a:4d:d8:ba:66:dd:d5:11:b9:de:19:7f:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:2F:D7:AA:AB:A1:7D:81:D0:6B:56:9E:8F:36:E2:E2:B3:ED:AE
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:fc:73:d5:b8:ff:96:50:a7:c6:73:5d:df:42:6f:23:11:
5f:fe:b4:1c:c7:fe:6a:66:21:05:d0:30:81:c4:3b:b7:48:a9:
70:e9:5a:b8:be:11:4d:42:2f:d5:68:1a:a8:78:46:b4:54:6d:
31:44:09:5c:89:fa:71:5e:eb:d0:6e:e1:10:43:55:b7:d2:62:
55:51:4a:89:b3:46:a0:5d:b8:51:30:c3:ea:24:b8:f0:0b:61:
30:16:31:da:54:0f:e1:7a:84:20:30:fb:e4:42:f4:1f:2d:bb:
7b:cc:79:c6:a2:04:36:ce:c5:5c:25:63:49:bc:ef:2c:00:a4:
c2:e0:f2:57:53:bf:83:ea:5a:a0:58:ad:8c:1d:24:8d:09:63:
a4:1e:d8:e2:6b:86:22:e5:02:6e:2d:9d:ac:e3:0b:72:b2:82:
1c:9f:7c:a1:37:fb:40:5c:5a:8e:53:a1:50:9c:e0:c7:19:5f:
03:f3:17:35:66:4c:94:b8:0a:27:ff:98:53:39:8d:ba:2a:a7:
67:96:23:d1:fd:51:d3:a1:d9:5e:f1:9b:54:db:5f:19:d8:b4:
a4:70:00:6a:b3:5a:cb:04:3c:70:63:49:07:19:ce:b6:fd:8c:
12:7b:e0:26:f0:14:62:61:d0:b5:94:e4:03:98:96:f7:cd:f0:
94:dd:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:40 2026 by rpki-client