
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier: bfHlnJqsjnw/EqS3E+ws9FKc8HUcVrdTh5lXd1qYzuY=
Subject key identifier: 43:DB:6C:94:11:BB:70:00:F7:6B:6E:D9:D3:8D:19:AB:9A:1A:58:1E
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number: 03B3
Signing time: Wed 25 Mar 2026 00:21:01 +0000
Manifest this update: Wed 25 Mar 2026 00:21:01 +0000
Manifest next update: Wed 01 Apr 2026 00:21:01 +0000
Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: NCga9R+MFziQcRPxTf32s5K+yD5sTloq2a2BbpLyZt8=)
2: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: i3VI+hPyZ8V1KISvzGj6cfXZDtS8YJ3qbqOTakeWd8Y=)
3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: RaUaevCK3cMcEjvMblM5lIqP1A3Tgc9wesL2YFGw8EE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Validity
Not Before: Mar 25 00:21:01 2026 GMT
Not After : Apr 1 00:21:01 2026 GMT
Subject: CN=69c32a6d-e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:da:97:53:45:4f:8b:88:81:4e:82:61:01:
af:11:f7:e4:fa:2f:48:36:b5:87:51:a7:5e:0e:24:
36:3a:d8:72:24:5e:1b:5f:d0:df:ac:b5:ea:04:c7:
e6:b4:a9:87:0e:0e:79:b1:6b:b1:ac:4d:c8:8e:d1:
7c:1d:05:d3:cb:1a:a8:8e:42:5d:d9:92:66:2e:60:
29:3d:42:19:c0:cd:27:bd:84:fb:16:25:d8:24:6b:
3b:49:fa:f9:d7:2f:b8:b7:32:10:0e:55:19:3f:fb:
22:10:44:fc:30:20:c0:ce:92:10:67:85:1d:23:62:
e4:ec:79:80:48:c2:4b:b9:65:c1:83:8e:71:7c:99:
30:74:32:fb:24:19:9b:74:32:9e:b0:9a:0b:ee:62:
9f:01:de:ec:f9:14:ec:af:f0:54:fc:75:4c:db:55:
8a:c0:8e:7a:99:c1:ad:f2:39:7a:45:e6:66:65:07:
7c:5e:1d:69:38:41:89:be:5d:0b:ed:a9:3e:d9:e2:
e2:b6:c3:76:f5:bb:11:ce:ea:6c:3c:bd:59:99:f1:
07:8f:d3:30:b3:13:07:42:45:fd:e6:76:89:cc:ec:
ed:76:9b:31:1d:2f:48:f1:e5:21:b0:22:b6:77:40:
11:98:32:c3:6e:be:e6:e0:4f:70:6b:9e:04:21:2f:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:6C:94:11:BB:70:00:F7:6B:6E:D9:D3:8D:19:AB:9A:1A:58:1E
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0e:3e:3e:4f:ec:b8:84:50:6e:a0:72:cb:4a:30:29:76:40:
9f:27:85:c7:09:30:ce:40:05:c9:7f:59:46:69:ae:7d:8a:81:
10:42:c4:5c:07:2b:bb:2c:1c:a2:93:cb:9d:2f:27:b2:e9:72:
1a:2a:d0:ed:b9:0a:ba:0f:09:b3:2f:6a:1e:8e:55:ba:92:89:
ff:7f:f9:3e:25:91:1a:64:41:c5:0c:ac:11:28:0f:1f:f6:0e:
de:7b:eb:0f:8d:1b:e0:a0:15:7b:f9:42:ca:f3:da:b4:39:a9:
24:6f:e1:95:35:94:ec:13:d0:11:e5:49:60:67:8a:f5:47:fe:
5a:b3:d0:ca:52:cb:1f:f5:79:14:e9:eb:fc:96:7c:ad:b6:59:
44:cd:cd:8a:c9:bf:9b:26:13:54:eb:b9:18:d3:c7:24:af:b2:
a2:52:08:c4:a5:18:a8:7b:69:30:4f:9a:c2:f6:3f:9d:ca:a4:
30:f1:2d:0e:35:4f:13:52:6d:8b:43:8a:3e:ee:f2:95:a8:69:
a5:aa:f9:57:c7:12:1d:e2:8c:d0:15:29:8f:20:f1:03:ab:f3:
c2:07:9b:83:30:dc:55:bb:b3:74:e4:e2:23:94:8d:43:2e:41:
46:17:8e:95:be:ea:c3:58:08:3d:2b:df:1a:6a:1c:1b:49:83:
32:63:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:04 2026 by rpki-client