
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier: hcZwEqmM5iP5I7uHOVJMpk+qPERqZvPj8x1ZMb6+Fa4=
Subject key identifier: 7E:8F:2E:EB:B9:A5:98:13:BA:58:C6:BE:B0:2D:17:BC:1F:7A:EB:8D
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number: 0414
Signing time: Sun 27 Sep 2026 00:24:50 +0000
Manifest this update: Sun 27 Sep 2026 00:24:50 +0000
Manifest next update: Sun 04 Oct 2026 00:24:50 +0000
Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: npmTvut0VjHs+4Pl4PhPD4DmLgerN9ws82GTnY+Actg=)
2: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: +XjVaX7qV0alN5uRheMg5Jumb5rdA1JKO3CHhFnXtv8=)
3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: /R3alqOLxHvu/YtPDpFBv0dJvKc+l2o4yXgcxx8ZzWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Validity
Not Before: Sep 27 00:24:50 2026 GMT
Not After : Oct 4 00:24:50 2026 GMT
Subject: CN=6ab86252-f403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:de:20:d0:cb:fb:a8:8f:12:d6:ce:5e:d1:
5b:86:7d:f6:18:8c:06:19:8b:b8:49:14:1b:96:e1:
fb:5a:d9:e0:e5:f7:75:d9:4a:9e:2f:95:a7:e5:fc:
ef:b0:62:31:63:53:c4:8b:80:c2:39:d4:9c:79:8d:
bb:b1:79:39:56:1c:18:08:31:11:9f:14:c4:d1:b2:
ba:c2:e6:ca:82:9f:21:f5:88:cf:27:3c:8d:8a:72:
c4:08:d9:aa:d1:24:ac:ec:5f:d6:36:ed:54:06:e4:
62:bc:b7:34:6e:f8:e3:8b:78:38:2c:f8:00:2f:93:
d6:3a:78:51:f7:be:f7:ef:97:6a:3c:af:37:2d:dd:
c4:d1:21:49:ac:c8:9f:a2:16:18:05:38:5a:6d:0d:
b7:b0:da:27:4b:31:ed:82:42:af:cd:07:8b:37:c5:
07:0e:3e:86:64:2b:3b:e5:44:43:03:8a:a6:0e:e7:
39:32:c0:e6:23:3d:03:44:b9:a8:40:9d:23:8b:01:
3d:da:3a:a3:61:60:22:69:82:9e:5e:da:31:50:6a:
08:cf:cf:af:f4:9d:e3:0d:87:cc:86:18:8d:54:04:
98:53:24:d0:b8:33:4b:e8:b9:42:50:0a:a4:85:21:
19:72:6d:1a:fb:87:fe:1f:c2:6d:22:c1:ca:7c:19:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:2E:EB:B9:A5:98:13:BA:58:C6:BE:B0:2D:17:BC:1F:7A:EB:8D
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:b9:11:a1:c4:8c:d3:d5:e0:03:f1:1a:29:4b:f5:e1:03:
74:0a:6b:69:6d:27:34:90:52:48:7a:55:59:ff:c3:87:24:ba:
f0:0c:b1:3d:5d:37:32:c8:03:37:6b:71:eb:3a:2c:e1:11:a8:
23:20:06:2f:8f:0c:22:de:b8:fe:b2:d8:46:e4:e2:e6:49:95:
2c:70:af:8e:da:e2:d3:70:28:67:d5:b5:ff:5c:23:60:6a:1e:
3b:13:e1:28:29:1c:57:23:25:e4:30:4f:2e:ce:aa:ab:66:91:
43:42:f6:ea:fd:24:bb:2a:b1:cf:0f:72:42:14:88:60:12:48:
a9:e1:7d:30:89:b7:d4:89:df:a6:80:c7:84:9f:53:73:49:03:
d1:bf:df:e9:00:32:55:01:57:e0:ab:32:62:37:2e:8d:2d:cd:
9d:e8:3a:1e:68:7e:dc:63:1b:6d:88:9a:5a:86:fb:52:6f:0e:
74:fe:a0:c0:ce:ca:62:29:ec:df:fe:25:fc:3f:3b:a4:44:ec:
aa:07:b8:ff:d0:18:35:e5:6b:b0:32:b5:63:66:8a:01:b1:d4:
e9:10:69:89:02:d2:2e:4d:96:c9:3e:50:16:9f:d8:e1:70:0b:
af:54:bd:e3:2a:3e:25:27:12:5c:21:bf:75:f2:f0:a9:85:9a:
36:b1:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:26:06 2026 by rpki-client