
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier: CxEOcNkeZowhkJbiVOXpFUw+fjxILRYgbUj9o2ARl+U=
Subject key identifier: 3B:94:29:44:EC:40:BA:2E:3A:34:4F:6F:91:E1:5E:96:CA:03:66:29
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial: 064A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number: 063C
Signing time: Sat 28 Feb 2026 23:17:44 +0000
Manifest this update: Sat 28 Feb 2026 23:17:43 +0000
Manifest next update: Sat 07 Mar 2026 23:17:43 +0000
Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: 6pC1eWLl2bvV1/+6zhMDAkOw5Its+Zk0WfsKDr2WeJI=)
2: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: dl0uRjksEQ8ouPFjWtFEQYhqznByz7T89bL2Fq93vqc=)
3: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: Ycz9v+eZG5FQXPhAuSFsBVjW1iX+esZOzCHIixi5/fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Validity
Not Before: Feb 28 23:17:43 2026 GMT
Not After : Mar 7 23:17:43 2026 GMT
Subject: CN=69a37798-5480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:6d:18:3b:e7:67:10:2c:c6:91:29:c3:25:
dc:88:ff:d7:a7:81:52:cb:cd:5e:c1:e6:1b:da:74:
6d:82:24:35:1a:a8:96:9c:ed:66:7c:4b:55:f5:0d:
5e:f4:2b:06:39:1c:91:f1:c4:83:e5:33:f4:f0:5b:
ae:fe:f8:a3:20:ed:6b:ca:ff:d4:b9:4e:19:62:6c:
38:bf:7b:27:e4:db:a3:e1:4d:e3:0a:62:c5:90:4c:
e9:ec:e0:f9:3f:78:de:97:30:9e:d5:85:bd:83:8b:
69:87:1e:07:72:e3:35:be:a5:30:c8:32:cf:b2:9f:
42:55:05:0a:d0:a8:cc:70:e5:d3:29:5b:21:e9:22:
75:b0:8a:df:10:7f:c8:df:db:e1:70:74:00:b4:5d:
32:74:6e:fb:94:63:9f:2f:ff:28:87:fa:52:40:ab:
94:60:6f:00:2b:02:f9:ab:cb:b1:b1:27:0f:55:b3:
d7:32:de:30:7f:61:b5:fd:d1:b0:f7:9e:dc:8c:57:
df:b0:d5:d7:e2:8a:9d:c9:ca:c5:51:c2:62:56:ac:
26:e1:c1:14:c4:de:a5:84:cb:bb:1b:95:85:fe:a3:
57:18:3d:4a:d1:b6:18:35:b5:ab:43:ce:98:b7:43:
9f:a4:15:5b:01:19:06:00:8f:3d:ff:a7:f8:e4:e2:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:29:44:EC:40:BA:2E:3A:34:4F:6F:91:E1:5E:96:CA:03:66:29
X509v3 Authority Key Identifier:
keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:90:6c:26:d0:7b:f0:c4:03:39:c9:33:30:dd:d2:b4:5c:
a9:84:de:e9:11:f7:a2:d4:de:db:f1:4e:68:0b:a9:91:46:7a:
04:ec:d4:69:c9:c3:90:a7:6c:1b:6d:c2:3f:ca:25:9d:24:3b:
35:9b:74:fa:b6:8b:b7:5f:5e:c6:4f:95:b3:3d:08:c1:b6:e0:
47:b5:c7:c1:71:de:54:46:91:f2:ed:2e:46:e8:ea:39:4a:7e:
fb:e9:92:74:53:8f:0f:72:2c:74:ef:04:75:cf:38:c0:41:97:
05:af:52:6d:10:a3:44:ab:9a:b9:ff:0d:c6:86:31:66:8f:1d:
9b:ce:28:19:41:2b:ff:e3:3b:12:02:2d:15:75:38:e9:c6:da:
23:57:8b:32:24:c3:fa:aa:96:11:7b:f3:ce:db:93:52:8e:e4:
76:4a:ce:fa:da:90:57:2e:5e:df:fa:c8:15:21:73:29:66:a9:
ac:2b:97:95:ac:f2:b1:69:89:ed:9c:69:f0:79:4a:da:b2:df:
84:7c:d9:12:c6:6e:cc:aa:3e:c5:0a:e8:18:aa:10:b3:68:03:
6b:fd:9c:40:2e:25:7c:ac:5a:67:f9:10:32:04:7d:a6:ee:23:
47:5e:c2:54:81:0c:7a:78:78:88:85:43:77:3b:36:e7:18:15:
1e:5f:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:14 2026 by rpki-client