
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json)
Hash identifier: nEa8+Wu3AsLIGTjOEAnbsWGbrb5dd0IPHdCg8HHK2MI=
Subject key identifier: 75:04:24:DF:01:8B:EC:65:D6:B2:AC:18:EC:E2:0A:FB:B3:1E:06:E8
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
Manifest number: 023B
Signing time: Wed 25 Mar 2026 02:00:40 +0000
Manifest this update: Wed 25 Mar 2026 02:00:39 +0000
Manifest next update: Wed 01 Apr 2026 02:00:39 +0000
Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: 2VnakmC4UCv0/ExVJiksbPErrtAfalCD111WGRekJsQ=)
2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: 7BC7HNDh6Br/00hX4ySBoQmimMqlfllsxVp+csn53ug=)
3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: tfF4YrF0sRQGLJpG/mPIZwvq6Hg8gdDF0qFcvaTRTDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Mar 25 02:00:39 2026 GMT
Not After : Apr 1 02:00:39 2026 GMT
Subject: CN=69c341c8-fb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:3d:01:2b:ba:26:89:c2:0e:f3:70:2c:77:
c2:9d:27:94:c9:4c:b0:79:43:b1:e2:7a:49:90:b3:
c2:1a:6d:96:d3:8f:e1:6b:de:4a:a2:7f:0c:9f:61:
40:11:34:aa:ab:40:0a:66:b8:4b:0d:62:b2:6c:51:
58:e1:5f:da:94:1f:47:15:fa:09:78:ed:e8:8d:20:
9a:31:a3:89:5f:89:f4:00:e8:e2:c1:73:1c:cd:67:
7b:c7:5b:b3:1b:85:12:df:d7:ea:30:58:32:d7:28:
72:d3:53:04:bd:5f:61:0b:2c:90:9d:3e:0a:be:b5:
79:a9:9c:5f:b9:a8:d9:3e:c3:a7:f9:06:ad:e5:b0:
b4:67:30:06:fe:52:99:f1:3b:43:d1:33:2f:0e:95:
bb:8d:76:a5:49:be:1b:41:d9:22:79:1b:55:98:03:
21:e7:6b:90:97:e2:5e:04:44:4a:8c:ff:de:b9:79:
1b:24:a4:dd:d9:0f:73:62:cd:16:53:00:d8:d2:be:
cf:2c:3a:90:60:9a:e6:dd:d0:bf:3a:35:bb:60:48:
aa:01:ee:84:7c:5b:1c:16:65:4d:23:9e:1a:92:46:
b2:0a:7b:35:63:63:99:3b:c3:a5:c9:d5:13:e2:dc:
37:e7:8d:f7:8e:e8:6b:36:cc:d4:1b:94:67:32:e9:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:24:DF:01:8B:EC:65:D6:B2:AC:18:EC:E2:0A:FB:B3:1E:06:E8
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:9a:2f:95:09:81:7c:39:1e:da:74:69:6e:2f:e9:6f:46:
6a:29:43:87:17:7b:74:bd:1c:4c:d1:ec:66:af:1c:9b:bd:6b:
4d:c8:e8:77:72:6d:f5:de:02:17:4d:f0:81:8f:b8:5a:79:f2:
a8:3c:1b:54:71:14:27:b8:f8:20:13:9f:cb:bd:41:28:b5:55:
0f:1d:24:3c:18:e1:21:d2:3a:34:24:db:ea:dc:7a:41:8e:75:
a1:8a:96:f4:91:28:64:44:68:ee:01:b8:9f:4c:44:a8:9d:fe:
4d:70:45:c5:35:01:43:e1:ce:ac:09:9d:03:87:64:ce:aa:be:
ce:61:55:85:dc:de:73:27:d5:b0:5e:72:d8:99:d9:21:14:fc:
fd:0e:3e:41:5b:47:5b:79:57:eb:6a:11:89:77:30:8c:1c:fe:
76:b4:6b:9e:7e:ee:fb:00:6b:20:8a:4a:91:d8:5d:66:3d:7d:
b1:2a:3e:47:06:38:7b:84:47:e7:17:8b:7b:81:16:6d:33:77:
f1:42:59:c8:a9:80:75:17:5d:71:47:b4:70:1d:6c:ba:6b:15:
b3:7f:29:97:23:6d:51:e0:10:33:25:e8:e6:b3:07:53:92:e5:
3d:85:6c:61:c8:f5:76:5e:b9:60:19:58:1f:27:73:e7:7e:62:
f3:7d:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:40 2026 by rpki-client