
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: UN0wQSCYke+PRjmW2ZZDqkMYm0DOayPhvp4k8TrrZ8A=
Subject key identifier: C1:92:9E:00:E2:8E:60:64:B1:11:F1:F2:DC:C6:A6:95:34:8C:5A:A0
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 011A
Signing time: Sun 01 Mar 2026 07:58:11 +0000
Manifest this update: Sun 01 Mar 2026 07:58:11 +0000
Manifest next update: Sun 08 Mar 2026 07:58:11 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: 95l7dcmUVffv1mfFsMxl+LKn373DXLzunKHf9bHta14=)
2: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: pf80VnN9u3/qP+OkGvBZgFdGotQwA2eSd+UJBQA0lVo=)
3: A609DABE064511F19E4E77B72C3D8C67.roa (hash: JqFjzkR6fbvAr2V9FP6RyWp8nostZqpkPCMRP+2dPsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Mar 1 07:58:11 2026 GMT
Not After : Mar 8 07:58:11 2026 GMT
Subject: CN=69a3f193-b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:7b:59:88:9e:d5:14:d2:16:dc:91:81:9a:
02:66:21:8e:93:51:e8:01:7a:51:1f:36:ba:26:2c:
fd:c7:e5:c2:7c:ba:4e:cb:01:33:a2:60:9a:2c:b8:
15:98:d7:aa:d9:4f:03:ee:f8:d2:fc:62:19:f1:43:
82:e0:92:42:96:31:c0:f0:6b:0d:5e:75:a4:73:6a:
39:8b:71:14:09:da:41:e5:3d:70:54:36:1b:a3:a6:
dd:db:f3:19:25:3a:bd:b4:79:45:88:17:84:d4:48:
7b:f6:be:cc:57:77:5f:2c:da:a6:04:58:86:a6:7c:
27:9f:8e:87:24:9c:6a:02:32:5c:51:6e:ab:27:1a:
92:a4:02:4a:ed:bc:04:7e:03:0d:a7:59:dc:4c:19:
74:96:3c:56:34:b9:87:02:04:e2:39:a1:2b:c2:c7:
d9:84:28:6d:7b:9d:ef:04:9f:b0:c7:1a:65:df:91:
3e:f8:e8:50:e6:9e:ca:9e:4e:51:e6:23:34:96:bc:
57:c0:42:1e:e8:42:73:72:8e:98:13:0b:c0:64:96:
47:09:af:6c:55:7f:f1:26:2e:14:fa:c7:b0:5b:5b:
01:54:eb:b1:bd:ff:11:db:d8:5b:85:93:84:d7:c8:
5b:25:eb:9d:c6:64:d4:a8:56:b4:3d:98:60:a6:4d:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:9E:00:E2:8E:60:64:B1:11:F1:F2:DC:C6:A6:95:34:8C:5A:A0
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:e6:e5:ac:f9:7d:eb:ad:dc:d9:d7:f7:37:65:17:e6:4f:
b8:94:20:bb:06:c7:ca:4b:7f:fd:c6:2b:e6:d4:c2:1f:44:95:
fe:e0:33:8e:cf:e1:e9:92:f1:52:53:a4:3f:69:38:f5:2b:71:
05:3b:82:51:82:ad:57:e6:8d:5d:a6:bb:d4:05:34:9a:8f:c9:
a3:78:d3:8d:86:1c:e0:c9:99:05:d0:84:1d:f3:d0:df:48:e5:
cb:eb:53:2d:2d:3f:33:6a:f7:f3:55:fc:0c:43:ac:41:75:11:
93:31:65:b5:09:02:d5:86:a7:21:1e:52:f8:9f:4e:49:c6:f7:
db:3f:29:f8:c4:64:2b:ad:0f:9c:b6:7c:0e:1f:73:42:63:da:
e7:a6:8b:4a:da:03:53:e4:88:59:ab:59:ff:2a:55:ff:3d:85:
eb:9f:ef:0f:6b:39:29:83:48:fd:3c:39:94:23:05:bf:9d:30:
8a:d7:6a:b7:cb:a4:8f:f7:c6:b6:ed:93:d8:01:2c:81:5f:b2:
5d:4a:12:d3:42:2e:45:2b:b5:4f:77:d6:3e:25:da:7e:aa:f2:
59:f2:0b:34:47:dd:eb:46:b8:56:b7:fb:5b:b2:d4:24:08:88:
39:33:22:ed:29:48:e6:36:75:e2:07:a1:4d:16:e9:e8:df:11:
fb:d1:96:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRFM0QxMTAvBgNVBAUTKDY5MTgxQ0Y0NTFGOEIzRkVDNjRGQzgyOThCNTIyRDQ4
OENBNUM5RTYwHhcNMjYwMzAxMDc1ODExWhcNMjYwMzA4MDc1ODExWjAYMRYwFAYD
VQQDEw02OWEzZjE5My1iNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0x7WYie1RTSFtyRgZoCZiGOk1HoAXpRHza6Jiz9x+XCfLpOywEzomCaLLgV
mNeq2U8D7vjS/GIZ8UOC4JJCljHA8GsNXnWkc2o5i3EUCdpB5T1wVDYbo6bd2/MZ
JTq9tHlFiBeE1Eh79r7MV3dfLNqmBFiGpnwnn46HJJxqAjJcUW6rJxqSpAJK7bwE
fgMNp1ncTBl0ljxWNLmHAgTiOaErwsfZhChte53vBJ+wxxpl35E++OhQ5p7Knk5R
5iM0lrxXwEIe6EJzco6YEwvAZJZHCa9sVX/xJi4U+sewW1sBVOuxvf8R29hbhZOE
18hbJeudxmTUqFa0PZhgpk3VqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGSngDi
jmBksRHx8tzGppU0jFqgMB8GA1UdIwQYMBaAFGkYHPRR+LP+xk/IKYtSLUiMpcnm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REUzRC9GRDFFNDU1MERF
NjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNfN0dUOGdwaTFJdFNJeWx5
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHllWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNf
N0dUOGdwaTFJdFNJeWx5ZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANg/m5az5feut3NnX9zdlF+ZPuJQguwbHykt//cYr5tTCH0SV/uAzjs/h6ZLx
UlOkP2k49StxBTuCUYKtV+aNXaa71AU0mo/Jo3jTjYYc4MmZBdCEHfPQ30jly+tT
LS0/M2r381X8DEOsQXURkzFltQkC1YanIR5S+J9OScb32z8p+MRkK60PnLZ8Dh9z
QmPa56aLStoDU+SIWatZ/ypV/z2F65/vD2s5KYNI/Tw5lCMFv50witdqt8ukj/fG
tu2T2AEsgV+yXUoS00IuRSu1T3fWPiXafqryWfILNEfd60a4Vrf7W7LUJAiIOTMi
7SlI5jZ14gehTRbp6N8R+9GWjA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:29 2026 by rpki-client