
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: tLBPN/4c1yIF9+UXCLc0LNQuvFfExgX18LqsPhINQvA=
Subject key identifier: 2C:95:04:E9:B2:18:47:4F:7E:30:15:08:D8:51:DC:DD:54:EF:2F:02
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 0139
Signing time: Fri 17 Apr 2026 06:11:51 +0000
Manifest this update: Fri 17 Apr 2026 06:11:51 +0000
Manifest next update: Fri 24 Apr 2026 06:11:51 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: 2jl/9hwpwX2Kl2IeABvwy6wGr4Dbff9sJCM6j0R4/Us=)
2: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: KvlIwfCNinBDApUM0hPw82jOaBTrt/CmpdmsPJpgE8I=)
3: A609DABE064511F19E4E77B72C3D8C67.roa (hash: t305WJBrmTItbJa7N9zTDZCt2i0nTXvWuqgpxx54cOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Apr 17 06:11:51 2026 GMT
Not After : Apr 24 06:11:51 2026 GMT
Subject: CN=69e1cf27-0f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:d8:87:21:86:3d:1b:62:a9:88:b8:8d:b0:
96:3f:7f:89:d7:ee:bc:b2:c1:31:ff:86:4e:6c:a9:
0f:b4:5c:54:fe:f2:b4:ed:fc:78:72:0d:95:c7:7e:
73:61:b3:d6:0e:3d:fc:9c:2a:97:a5:13:bc:25:69:
3b:d9:33:77:9c:1b:03:60:45:7d:61:45:61:70:a4:
d5:d1:6d:77:89:86:80:b1:83:62:1b:40:fe:38:ed:
8c:1e:4e:5e:16:62:e9:c0:a2:dd:ef:6f:c6:d0:04:
68:da:81:c7:43:5d:4f:ad:19:4a:76:1c:2a:56:0d:
bc:ca:bd:43:7b:c2:7c:26:88:1c:8f:c0:f6:fb:81:
06:f3:f8:5f:42:aa:47:a2:83:c0:72:d9:5d:a7:a6:
36:2c:13:3a:1a:46:8e:2e:17:1f:a0:db:fd:ac:7e:
85:f0:b4:72:e0:fc:f1:2d:ad:f0:b2:99:e5:7a:86:
c9:06:95:8a:3a:4b:c1:1c:19:84:bc:2c:98:1f:84:
22:4a:a6:d7:37:3f:7e:8a:25:ca:31:74:2a:e2:6d:
66:01:7a:e6:7c:5c:7f:2e:47:c3:32:50:b2:0e:a2:
81:eb:48:ab:ae:4f:e8:d3:63:2e:89:38:bb:db:b4:
70:1c:a3:10:ce:46:18:48:d5:77:17:39:89:f2:d6:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:04:E9:B2:18:47:4F:7E:30:15:08:D8:51:DC:DD:54:EF:2F:02
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:67:6f:c2:d9:42:80:e6:d0:c5:dd:e9:52:50:b9:51:b3:
2b:3f:a6:3e:cf:8b:05:bb:36:49:f8:14:a9:5f:3d:4e:46:31:
cf:16:b7:62:1f:08:bc:af:f9:7e:be:80:16:f8:3a:ee:a4:f7:
f6:84:79:7b:97:e7:3b:86:b7:67:ff:dc:e9:ab:d8:f6:23:d9:
3e:f3:e0:f9:8a:28:29:53:d6:3a:d8:75:70:32:d4:25:da:7e:
7a:8d:9d:b6:83:4a:85:ec:62:07:c3:04:24:54:be:b5:10:45:
32:6f:59:21:03:12:4b:b3:38:ed:2b:77:9d:32:b4:64:70:d9:
b0:ea:23:1f:23:f4:f5:02:a0:c9:05:d7:11:b3:fa:7f:63:6d:
39:9a:15:eb:fd:5a:4a:25:cb:f1:b5:7c:f4:03:f2:8d:fb:42:
df:29:92:e2:b0:fc:94:e5:0a:4e:2b:e0:a5:d0:c4:43:69:df:
d0:6b:99:17:2f:4d:33:c1:80:ea:86:bf:6b:34:42:b0:42:e1:
02:c7:14:34:de:9a:d7:af:c7:d5:94:d6:ed:dd:a9:9a:02:10:
47:bc:ac:8f:8d:52:94:79:62:a4:34:13:2a:82:87:0a:43:bc:
54:28:d3:79:66:ed:2b:49:a5:79:36:7b:df:b6:a0:60:fb:3d:
a3:57:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:48 2026 by rpki-client