
$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json)
Hash identifier: utM9hZhCMO1VOnb5TFYJdaoe/WGM/0F6NMNlZ+9OJfQ=
Subject key identifier: 98:9F:55:CD:9A:D7:44:7F:DE:8C:B5:66:D6:CB:43:75:47:3E:4B:8C
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
Manifest number: 01CE
Signing time: Mon 27 Jul 2026 05:28:35 +0000
Manifest this update: Mon 27 Jul 2026 05:28:34 +0000
Manifest next update: Mon 03 Aug 2026 05:28:34 +0000
Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: ARapoTuO7WaqINSxEu4KMf6khrTPATxmkuyrO5+SzXA=)
2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: Dy1nuBVOv5zlPF1NmK8r+tPhGrR42+dXOgfOIxmTV1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Validity
Not Before: Jul 27 05:28:34 2026 GMT
Not After : Aug 3 05:28:34 2026 GMT
Subject: CN=6a66ec83-5a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:3f:2b:ca:89:58:d4:be:aa:9b:aa:7e:cd:
a1:41:9b:13:ad:f4:b5:d1:d3:6a:22:44:8d:68:5a:
68:5b:8f:2e:d9:ae:e1:2e:17:2c:84:83:19:0a:ea:
b2:0b:c6:24:a5:fd:d9:3e:a5:6d:68:a4:c8:7f:8d:
ea:ea:21:91:57:89:ed:73:fe:69:6c:28:47:d9:21:
12:c1:9e:31:d6:2a:2d:85:5a:5d:7f:8d:f4:37:c8:
09:ff:8f:c9:f6:3d:98:90:f0:10:e5:34:d5:87:dc:
2e:1b:78:36:e1:95:ff:aa:2f:af:82:38:57:4a:79:
48:c1:64:08:a0:6b:b5:7f:82:48:18:9c:a0:73:4b:
56:cd:00:e2:05:8b:48:44:5c:e6:38:4e:49:db:f0:
e2:5d:0f:b2:40:22:b0:24:fc:45:c4:20:d3:90:86:
f7:3b:19:5c:07:f8:a5:42:51:ec:09:8e:88:ee:56:
32:c2:e9:2d:ab:2e:05:a5:39:19:aa:35:68:1e:8f:
d1:ef:73:63:99:f1:70:1d:b0:dd:48:f1:19:33:fd:
db:69:3b:1a:25:b4:db:3f:6c:b6:67:5c:c6:50:9d:
ae:2f:1c:8e:c4:00:dd:23:4b:8c:f1:dd:82:b3:0c:
6e:62:8d:c7:94:e7:e9:91:3a:4e:54:ef:fe:04:c9:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:55:CD:9A:D7:44:7F:DE:8C:B5:66:D6:CB:43:75:47:3E:4B:8C
X509v3 Authority Key Identifier:
keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:21:77:c9:42:f7:4f:83:aa:a5:70:2b:e4:38:5d:99:be:96:
28:13:73:60:1d:bb:a1:8c:f4:3b:6b:32:2e:0f:e2:1a:8e:21:
ba:f7:5e:dd:03:09:29:e3:12:88:30:c5:2d:d4:12:e0:cd:26:
12:dd:ec:22:ed:2e:cd:33:ff:f8:22:25:14:f1:1f:a4:a5:f4:
c2:ce:a4:99:cb:46:50:e1:6f:a2:46:27:be:4b:36:89:0e:99:
13:62:4f:f1:93:ff:90:90:b9:57:33:47:c2:fd:ef:46:0c:92:
cb:cc:0f:95:d8:28:fa:8b:f4:88:82:6a:01:91:aa:23:63:55:
54:0b:03:14:35:37:b1:31:a2:0e:f3:dc:3e:f1:0e:ca:94:f3:
3a:37:39:0a:60:5e:34:d2:9e:52:d6:8c:66:d8:da:e1:55:59:
7c:1c:ab:cc:1d:fc:c3:a8:79:d7:a4:6d:70:84:bd:41:7b:87:
02:c0:8b:09:c8:2a:eb:99:28:6a:81:df:6e:b7:25:b8:48:54:
86:bd:58:22:1c:8e:c2:2c:b8:0f:77:f6:f5:1f:ac:cf:ad:2b:
68:25:67:ac:47:6a:4a:c3:d2:7a:0f:28:38:2a:1b:bd:a8:39:
05:c2:91:ae:d6:45:31:a1:ed:a8:18:ff:31:25:e2:c5:8b:0d:
d3:0c:45:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4
NjBDQzg1NkYwHhcNMjYwNzI3MDUyODM0WhcNMjYwODAzMDUyODM0WjAYMRYwFAYD
VQQDEw02YTY2ZWM4My01YTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsw/K8qJWNS+qpuqfs2hQZsTrfS10dNqIkSNaFpoW48u2a7hLhcshIMZCuqy
C8Ykpf3ZPqVtaKTIf43q6iGRV4ntc/5pbChH2SESwZ4x1iothVpdf430N8gJ/4/J
9j2YkPAQ5TTVh9wuG3g24ZX/qi+vgjhXSnlIwWQIoGu1f4JIGJygc0tWzQDiBYtI
RFzmOE5J2/DiXQ+yQCKwJPxFxCDTkIb3OxlcB/ilQlHsCY6I7lYywuktqy4FpTkZ
qjVoHo/R73NjmfFwHbDdSPEZM/3baTsaJbTbP2y2Z1zGUJ2uLxyOxADdI0uM8d2C
swxuYo3HlOfpkTpOVO/+BMlN7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJifVc2a
10R/3oy1ZtbLQ3VHPkuMMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw
MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr
NjBvSmV5bTZWWGVHRE1oVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWSF3yUL3T4OqpXAr5Dhdmb6WKBNzYB27oYz0O2syLg/iGo4huvde3QMJKeMS
iDDFLdQS4M0mEt3sIu0uzTP/+CIlFPEfpKX0ws6kmctGUOFvokYnvks2iQ6ZE2JP
8ZP/kJC5VzNHwv3vRgySy8wPldgo+ov0iIJqAZGqI2NVVAsDFDU3sTGiDvPcPvEO
ypTzOjc5CmBeNNKeUtaMZtja4VVZfByrzB38w6h516RtcIS9QXuHAsCLCcgq65ko
aoHfbrcluEhUhr1YIhyOwiy4D3f29R+sz60raCVnrEdqSsPSeg8oOCobvag5BcKR
rtZFMaHtqBj/MSXixYsN0wxFgg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:57 2026 by rpki-client