
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier: Tdbf+E6UEfU6M1wvl05uwZMWTaFhDjnkNfL+Mijp3fM=
Subject key identifier: 70:5D:76:52:FD:37:B9:99:86:89:BF:85:C7:BA:1A:76:02:56:A5:F5
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 0430
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number: 041B
Signing time: Sun 11 Oct 2026 00:24:19 +0000
Manifest this update: Sun 11 Oct 2026 00:24:19 +0000
Manifest next update: Sun 18 Oct 2026 00:24:19 +0000
Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: C/D+TYt0HxnMYV6lvMktMadaTDmPcgTNAGAtYBWk2CM=)
2: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: +XjVaX7qV0alN5uRheMg5Jumb5rdA1JKO3CHhFnXtv8=)
3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: /R3alqOLxHvu/YtPDpFBv0dJvKc+l2o4yXgcxx8ZzWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Validity
Not Before: Oct 11 00:24:19 2026 GMT
Not After : Oct 18 00:24:19 2026 GMT
Subject: CN=6acad733-a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9e:0d:2e:26:89:3c:d9:80:bd:e9:f5:73:0f:
86:ca:6a:23:82:7b:3e:43:4a:b8:18:27:e2:d4:b1:
ac:35:f4:15:2f:24:80:ca:02:ad:f6:10:29:bc:12:
d8:b6:1f:f9:15:4a:96:ec:d4:f6:95:c4:45:b9:d0:
ff:f4:58:d6:96:9a:21:f9:d1:1c:37:05:a7:c6:b0:
42:76:94:9e:8e:6f:92:dc:ca:90:6f:76:aa:33:49:
8f:2e:a5:28:3f:0e:8a:dc:87:aa:82:dd:b0:19:19:
57:96:8c:79:a3:83:72:9e:10:0c:ce:c0:c3:3a:26:
6f:59:76:e5:d6:f9:f5:e7:8c:f0:e5:a1:37:9d:5c:
12:c9:a9:7f:08:1c:4b:16:d5:f5:b2:53:fb:d6:ab:
21:5b:ea:0a:bd:bf:b9:b5:05:a5:73:da:2e:fd:d4:
cb:51:46:73:af:09:b5:c7:23:d6:76:5f:65:3b:c5:
ad:5d:b7:6c:42:b3:4b:24:a0:83:af:85:b8:e5:79:
c6:7e:fc:b7:6c:0a:57:16:47:0b:be:9a:0d:af:b6:
50:5f:1c:5b:f7:40:d5:8b:d7:e4:96:23:93:cd:37:
f1:86:17:f3:6a:82:c0:81:40:a9:8f:4b:c1:5d:9f:
29:8a:5c:68:1f:16:4e:99:32:92:ed:1e:d3:88:d8:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5D:76:52:FD:37:B9:99:86:89:BF:85:C7:BA:1A:76:02:56:A5:F5
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d4:c1:46:5a:f9:fb:be:59:3c:95:1d:3d:93:c9:bc:97:13:
a5:8e:15:7f:94:7f:d7:d5:4f:0d:27:9a:48:19:31:39:b6:82:
0d:c9:77:bb:26:1d:7c:4c:0c:a5:1b:92:07:4c:f1:3c:2e:b3:
80:45:41:c6:1e:07:17:2a:37:84:e1:99:4d:d4:43:26:2a:8d:
cd:df:a7:9d:2a:b1:19:89:f5:a4:37:02:61:f1:1d:49:a4:0c:
0c:ca:a8:c8:8b:65:5f:3f:85:5d:ee:22:d4:72:3d:51:b9:0c:
9e:0f:5f:61:b9:4d:f0:57:27:16:2c:e0:63:71:54:1e:4b:f8:
02:50:5e:24:45:fd:46:15:ad:70:90:d7:d1:71:7e:d8:4f:3a:
63:22:8a:9a:a8:97:b2:68:0a:73:dc:dc:2f:f1:80:91:d1:5c:
de:3c:23:de:71:48:71:bf:8b:a4:ea:cf:a8:88:30:18:82:c3:
71:d9:56:42:ef:c6:d9:8f:12:4b:69:4c:c7:a6:94:33:35:aa:
2e:11:54:01:9e:49:72:36:59:4c:4c:db:d4:da:c2:45:f4:82:
ce:d8:f2:fc:01:6d:90:bb:ec:6f:fa:09:df:78:c1:ce:e4:eb:
79:b7:d0:57:9b:52:3e:74:a6:26:7a:eb:e3:50:72:58:2f:d0:
33:71:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:27:25 2026 by rpki-client