
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier: n3iTLISXdkzffxRNpaozpYp6ICZpQSG5ND3dhQKRMFE=
Subject key identifier: D4:C9:39:B9:4E:83:62:CA:6E:B3:D1:AB:01:0A:FC:21:3F:83:F6:72
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 03BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number: 03A7
Signing time: Sun 01 Mar 2026 23:59:35 +0000
Manifest this update: Sun 01 Mar 2026 23:59:31 +0000
Manifest next update: Sun 08 Mar 2026 23:59:31 +0000
Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: TeT/GKE41zGfDfX4G8wJqbkCvFzhFJtka8cvNysooGU=)
2: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: i3VI+hPyZ8V1KISvzGj6cfXZDtS8YJ3qbqOTakeWd8Y=)
3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: RaUaevCK3cMcEjvMblM5lIqP1A3Tgc9wesL2YFGw8EE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Validity
Not Before: Mar 1 23:59:31 2026 GMT
Not After : Mar 8 23:59:31 2026 GMT
Subject: CN=69a4d2e6-9097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:f6:eb:8c:87:c1:48:ed:f4:ad:d6:28:8b:
59:4b:ac:16:dd:ae:78:79:b0:a8:3d:f1:04:d8:c3:
c3:c6:aa:cd:13:b4:e3:44:7e:ca:d8:ec:9e:a4:eb:
6b:bf:bf:08:af:47:02:8b:ec:d8:47:2c:98:c3:85:
e2:f7:61:5b:a0:4d:be:f5:37:87:85:18:be:24:52:
91:6f:2c:37:f6:f2:cb:b3:57:f5:94:14:31:ff:63:
37:8e:5a:9b:30:79:06:ac:a2:c3:a8:82:00:98:d4:
59:1e:7d:d6:d5:1d:fc:e2:61:8d:aa:e2:f5:af:67:
38:47:73:be:ce:9b:a8:59:27:39:21:f4:25:a1:1a:
c1:17:e7:99:e3:7f:99:c5:8c:18:4c:21:8f:c0:79:
3c:14:69:1d:64:17:fe:a8:0a:e0:e6:37:16:2b:65:
d3:f7:f4:e8:c0:54:96:8c:ee:30:9d:2c:68:89:81:
62:71:c3:df:5b:05:d7:1b:b2:58:96:62:60:d8:43:
35:7d:a2:9f:d1:29:7a:22:c6:ce:25:52:9c:da:46:
60:ca:57:97:7f:76:b5:86:1e:89:80:31:2e:d9:43:
3e:f4:f5:29:5d:22:6a:b0:d5:1e:2e:81:3a:8d:5e:
f3:f6:af:cd:bd:8f:71:fd:91:91:54:54:39:51:33:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:39:B9:4E:83:62:CA:6E:B3:D1:AB:01:0A:FC:21:3F:83:F6:72
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:b3:c5:88:2e:03:2e:35:69:a8:27:ec:73:0f:e5:a9:3a:
0d:e7:11:04:ad:60:4d:65:44:e3:09:0a:c9:31:ab:36:f4:7c:
8c:4a:e7:71:ce:0e:71:a6:c4:be:e6:45:69:0e:6c:e1:13:4b:
6c:69:99:16:62:06:68:ef:25:e8:8e:22:6b:f4:4f:83:bb:9d:
5b:80:40:2f:5b:27:4e:02:f9:19:e7:2f:ac:d0:19:b4:b5:a9:
03:af:c0:b0:9b:7f:40:03:58:00:4f:02:3c:57:63:ce:2d:c8:
09:42:79:ce:3f:23:9e:54:a2:04:45:f1:ab:ee:fe:e1:cd:47:
59:b0:9d:c5:fc:4a:a7:e6:9b:bb:46:95:3d:03:e8:d5:49:03:
e2:3c:16:7b:d7:17:b7:85:30:b8:9a:e1:83:d3:e2:69:a8:ce:
40:ba:a0:fc:96:7d:47:c4:2a:d2:08:23:f5:92:5c:8f:64:af:
86:e3:e1:ec:43:4d:94:e4:21:c9:c3:61:08:cc:67:c6:49:95:
d6:57:8b:ec:06:6c:6d:16:cf:00:50:4e:12:7e:19:6a:cb:af:
9a:b6:b7:77:a5:7b:7b:99:79:97:2a:c5:6e:72:b1:12:3b:20:
1c:e0:a1:14:fa:11:7a:cb:60:b7:0f:a2:09:0c:12:82:67:b2:
17:8d:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:54 2026 by rpki-client