
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier: e5y3Zwn/GidF3zUMxi0JeqXspRgnnm5XCrnSb1EzK70=
Subject key identifier: 22:98:0C:AF:C6:B2:97:1F:EA:A8:28:44:B0:24:A8:75:F9:A2:9F:30
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number: 03BF
Signing time: Fri 17 Apr 2026 00:33:34 +0000
Manifest this update: Fri 17 Apr 2026 00:33:34 +0000
Manifest next update: Fri 24 Apr 2026 00:33:34 +0000
Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: irzl/N2BWBHGnN1JFxtYkT2dPdPmpVYRq+iUeNBe/FQ=)
2: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: RaUaevCK3cMcEjvMblM5lIqP1A3Tgc9wesL2YFGw8EE=)
3: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: i3VI+hPyZ8V1KISvzGj6cfXZDtS8YJ3qbqOTakeWd8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Validity
Not Before: Apr 17 00:33:34 2026 GMT
Not After : Apr 24 00:33:34 2026 GMT
Subject: CN=69e17fde-a3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:b5:e7:13:6d:6c:2c:06:f2:71:42:ce:d9:
35:ca:a1:66:23:5b:30:e5:8d:0d:2e:09:37:a2:cb:
d1:a5:d5:c8:57:7a:88:0c:d9:85:24:3f:3a:4f:71:
53:dc:0b:95:cf:be:2a:c2:f3:20:e1:37:7b:69:71:
8f:0e:71:37:ab:73:cb:42:e0:8e:2f:60:e2:44:6f:
3c:79:c0:2c:14:68:cf:41:02:98:17:d2:b7:cb:7a:
c3:de:3a:13:3d:cf:69:2d:29:12:5c:93:d2:89:8f:
f0:02:a2:c9:92:00:fd:75:32:15:69:73:f2:50:d7:
c0:ab:0a:e0:50:23:fa:96:e7:dd:c9:60:7c:88:3d:
9d:c3:56:9f:f6:b9:3e:fd:c9:42:30:4b:08:3b:a2:
15:cf:08:53:f9:65:83:ac:92:ea:51:9d:f2:e3:14:
38:da:cc:bb:ef:8e:e2:b0:99:14:f4:22:cd:f7:46:
c8:86:f1:f0:75:3f:54:84:8b:d1:95:ab:d7:63:c5:
48:49:d5:3a:0a:c1:ae:e3:d9:9e:54:0e:21:7a:6e:
5c:34:a0:8c:1b:e1:27:94:04:13:75:74:c2:48:71:
1d:4a:9c:f3:51:da:04:af:fc:d5:1e:f8:5c:8e:d1:
e1:89:3b:ad:65:8d:16:23:c9:ac:8d:ee:58:1c:9a:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:0C:AF:C6:B2:97:1F:EA:A8:28:44:B0:24:A8:75:F9:A2:9F:30
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e8:b4:db:b2:2b:a1:b3:0a:fc:e0:68:32:d4:df:48:ff:46:
7a:2d:7d:75:c0:c4:14:c9:1d:28:9b:38:9b:ca:66:e2:29:0e:
09:ef:e0:0f:19:a2:f4:e7:b7:ba:6d:8a:52:88:aa:29:4d:43:
3b:6d:61:55:f7:d5:a3:04:48:64:ac:de:f6:0b:1c:1a:37:96:
a8:4a:fb:9f:f3:bb:fb:a2:e4:6e:8d:53:f6:c0:14:0b:a1:a8:
64:02:b3:39:28:6f:71:34:a5:49:f9:f9:77:f6:8e:93:c8:62:
7c:6e:7d:6b:61:cb:22:8b:ca:5a:25:16:69:72:6b:99:c9:ef:
48:92:22:ce:cd:6c:0b:e4:15:dd:e8:ee:12:4f:c3:c5:7b:da:
79:d3:fc:6c:50:55:35:4d:e7:c5:c0:92:f8:4f:9a:c6:0a:e6:
91:7c:b5:13:36:16:0c:f8:10:06:4f:29:63:1a:77:88:19:8c:
55:39:11:43:ef:b8:54:d2:50:df:e8:46:f0:6b:90:45:59:76:
e2:d9:92:2c:f0:96:cf:fe:51:56:35:fb:1f:0e:16:7b:e7:7e:
56:18:30:f1:38:96:46:57:01:f0:31:c6:8c:08:79:73:f7:98:
63:5d:4e:60:ef:6c:8a:a5:06:95:92:27:79:a2:d8:f7:f3:06:
99:bc:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:56 2026 by rpki-client