
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier: 0+ah6OCdBu0/82s6OENHUYEK9kEib+EqS03xZ2Anr+4=
Subject key identifier: 6B:3B:17:77:9A:24:F7:4D:39:4D:EA:4D:A4:58:A7:04:6F:6E:19:16
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial: 06B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number: 06A6
Signing time: Sun 20 Sep 2026 22:20:04 +0000
Manifest this update: Sun 20 Sep 2026 22:20:04 +0000
Manifest next update: Sun 27 Sep 2026 22:20:04 +0000
Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: WDfHBeVnor/kr7Y79joKxziOJUGE38crcv7obZAAfiQ=)
2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Validity
Not Before: Sep 20 22:20:04 2026 GMT
Not After : Sep 27 22:20:04 2026 GMT
Subject: CN=6ab05c14-5352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:14:67:98:8a:f0:df:fd:14:d2:9c:4f:2b:
1d:e9:af:56:99:dc:67:49:c7:f5:5c:d8:8a:c6:b9:
69:59:26:20:7b:2d:05:ed:8b:ba:7d:ac:23:c1:70:
09:9d:9a:75:99:46:34:1d:10:22:af:b6:dc:97:f1:
48:41:e2:fa:ac:c1:f1:4c:15:96:ce:89:9f:66:cf:
30:dc:9e:23:61:62:b8:e9:ea:bf:10:b5:dc:55:91:
9a:53:55:b7:8d:b5:24:b0:6c:25:9a:fd:21:45:79:
75:d4:0a:5d:7d:5e:17:86:0f:08:c4:16:28:f6:81:
4d:ee:92:f8:2e:2c:20:15:7c:94:f9:18:06:17:48:
aa:11:db:27:84:b7:2d:6a:ab:98:82:0c:a6:41:20:
d8:3a:a9:82:00:10:51:41:2e:b1:68:39:33:4b:37:
39:98:a4:b7:d7:53:72:5a:c8:09:87:17:94:7c:f8:
4e:70:36:45:c1:c0:dd:d8:9b:4b:45:5c:f9:be:49:
8b:11:07:f4:cb:d4:19:4e:05:83:a4:ec:2b:b1:1c:
64:b2:f2:59:69:e1:14:3c:1e:ab:df:b7:05:7f:de:
d6:5c:3d:14:c5:2f:38:cb:41:b5:3b:59:d8:24:d3:
0d:bd:26:de:22:c6:43:69:77:90:e4:68:56:6d:d1:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:17:77:9A:24:F7:4D:39:4D:EA:4D:A4:58:A7:04:6F:6E:19:16
X509v3 Authority Key Identifier:
keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:33:d0:ea:d6:6b:62:6c:64:5b:83:3c:a4:29:e1:17:d2:0f:
09:8d:1a:c2:3f:06:ad:a8:70:b0:a9:7b:cf:40:68:1a:fb:9a:
b6:b0:47:a9:69:de:28:12:c5:45:17:f9:e0:21:71:00:c5:fb:
02:59:34:37:9b:f9:af:a1:5a:78:f3:7c:62:44:95:b7:35:39:
20:b1:b3:64:af:ed:d6:37:91:f2:fc:49:df:34:ce:cc:61:dc:
bb:f2:1e:bf:23:0f:75:d2:5b:ed:72:1b:66:43:01:0c:be:6e:
77:8e:3a:ce:e3:9d:c2:ce:d3:26:44:13:61:9d:a5:26:ae:5e:
34:42:61:c8:8c:52:aa:35:bc:1c:2c:0e:b2:7b:4a:49:8e:e0:
e2:c6:57:ba:96:f3:ec:cf:de:fd:08:19:f0:62:c9:fa:14:a0:
b7:2f:09:47:47:34:f6:62:be:f9:cf:97:00:36:0e:41:1a:c0:
b5:ff:1f:6c:e0:9c:04:17:4d:97:0e:02:51:f4:f3:2e:e9:04:
38:18:48:72:04:91:94:35:ec:4f:9f:76:f5:7c:7a:98:11:5e:
40:ba:d3:90:b9:6d:d7:18:69:40:81:90:6d:f2:f9:92:52:f9:
b2:bf:b0:10:57:62:ba:0b:6f:bf:19:9f:e9:58:49:41:20:9e:
fd:05:1a:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDQjYxMTAvBgNVBAUTKDAxMTBCQjNBQjUwRTNBMEQ0NDkwQzMyMTAzQkJDNDA1
NERDNjgyMUUwHhcNMjYwOTIwMjIyMDA0WhcNMjYwOTI3MjIyMDA0WjAYMRYwFAYD
VQQDEw02YWIwNWMxNC01MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukoUZ5iK8N/9FNKcTysd6a9WmdxnScf1XNiKxrlpWSYgey0F7Yu6fawjwXAJ
nZp1mUY0HRAir7bcl/FIQeL6rMHxTBWWzomfZs8w3J4jYWK46eq/ELXcVZGaU1W3
jbUksGwlmv0hRXl11ApdfV4Xhg8IxBYo9oFN7pL4LiwgFXyU+RgGF0iqEdsnhLct
aquYggymQSDYOqmCABBRQS6xaDkzSzc5mKS311NyWsgJhxeUfPhOcDZFwcDd2JtL
RVz5vkmLEQf0y9QZTgWDpOwrsRxksvJZaeEUPB6r37cFf97WXD0UxS84y0G1O1nY
JNMNvSbeIsZDaXeQ5GhWbdGGewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGs7F3ea
JPdNOU3qTaRYpwRvbhkWMB8GA1UdIwQYMBaAFAEQuzq1DjoNRJDDIQO7xAVNxoIe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkNCNi8yQUI3Q0M1QUND
RjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09nMUVrTU1oQTd2RUJVM0dn
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FSQzdPclVPT2cxRWtNTWhBN3ZFQlUzR2doNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkNCNi8yQUI3Q0M1QUNDRjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09n
MUVrTU1oQTd2RUJVM0dnaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXDPQ6tZrYmxkW4M8pCnhF9IPCY0awj8GrahwsKl7z0BoGvuatrBHqWneKBLF
RRf54CFxAMX7Alk0N5v5r6FaePN8YkSVtzU5ILGzZK/t1jeR8vxJ3zTOzGHcu/Ie
vyMPddJb7XIbZkMBDL5ud446zuOdws7TJkQTYZ2lJq5eNEJhyIxSqjW8HCwOsntK
SY7g4sZXupbz7M/e/QgZ8GLJ+hSgty8JR0c09mK++c+XADYOQRrAtf8fbOCcBBdN
lw4CUfTzLukEOBhIcgSRlDXsT5929Xx6mBFeQLrTkLlt1xhpQIGQbfL5klL5sr+w
EFdiugtvvxmf6VhJQSCe/QUaCA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:04:14 2026 by rpki-client