
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json)
Hash identifier: VN0Lv9kw2yr+8qpVO/YSPtDuhiu5EHuIylRVhsoldXs=
Subject key identifier: 94:F6:1D:DE:59:41:20:9A:4F:19:14:6E:46:82:FD:19:0C:F3:9C:F4
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
Manifest number: 01F2
Signing time: Wed 05 Nov 2025 02:44:53 +0000
Manifest this update: Wed 05 Nov 2025 02:44:52 +0000
Manifest next update: Wed 12 Nov 2025 02:44:52 +0000
Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: nF7GNkzwkwxTWj51bgc1zzX0wclpx0oN4MUqiKpmz/Q=)
2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=)
3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Nov 5 02:44:52 2025 GMT
Not After : Nov 12 02:44:52 2025 GMT
Subject: CN=690aba25-8b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:cd:9b:2d:b8:c4:44:f0:ea:91:bb:99:ea:
8a:8e:bf:5f:88:f5:8f:d7:94:e8:ad:ce:1b:eb:98:
05:12:c8:00:90:82:33:e7:0e:90:d1:e6:18:3d:5f:
c3:03:b7:2f:bb:32:a0:83:18:7c:cd:0a:0a:8e:a4:
a9:9a:b8:c8:cd:1a:77:47:dd:0f:3b:15:2c:7d:75:
4f:d5:5c:8b:ce:0c:57:54:6f:26:8d:af:6f:2a:c8:
0c:f9:13:bf:e1:c8:e8:4a:5c:5a:f5:06:0f:d7:38:
f3:63:57:eb:af:3c:de:71:8b:30:9a:61:d1:7b:fd:
ed:ba:9c:79:ce:26:83:bb:d9:86:d6:d7:38:46:a9:
d3:ef:90:65:88:10:37:10:8c:0c:99:ce:6a:b2:65:
c9:35:4d:f9:98:8b:ee:ac:2f:b1:85:ce:06:5d:41:
a7:e2:e0:17:03:84:8a:27:6f:78:a7:56:25:0f:4a:
7d:b1:5a:ea:32:fa:b8:35:e9:f3:00:7e:cf:e5:27:
f3:83:91:e5:66:51:8c:00:db:2d:30:7a:56:c0:49:
a9:98:49:eb:12:20:f1:1d:52:6a:d4:72:d2:72:a8:
28:1f:96:54:be:d3:50:57:08:c0:5c:7e:d0:47:78:
8f:d7:dc:2d:ec:16:7c:36:84:95:70:b1:50:e7:61:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:1D:DE:59:41:20:9A:4F:19:14:6E:46:82:FD:19:0C:F3:9C:F4
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:c9:6b:50:fd:fc:b6:3e:80:73:e4:b2:9e:2b:5e:56:02:e3:
0f:d1:30:ac:40:8c:a8:eb:49:20:29:d9:66:59:e7:2b:ab:27:
08:90:9f:3e:69:bc:11:ef:3b:fa:ba:61:e5:48:bf:bb:62:5e:
f6:a9:7e:3a:41:48:4c:21:2d:83:a2:86:40:f8:ce:c2:a8:4b:
73:c9:1a:39:b7:26:11:5f:a3:e1:a2:57:7f:ac:e6:ba:cd:b6:
29:db:d7:2d:6b:66:b7:06:66:81:20:73:e4:ce:b4:36:88:2e:
3d:b2:26:56:47:a4:5a:a0:49:48:d7:2f:78:c1:15:4e:68:ff:
8e:d7:10:5d:7a:05:c3:d1:00:e9:0e:da:1a:9f:62:1a:36:6a:
1e:36:71:4f:8f:6e:c3:76:7b:66:a5:fc:b4:f6:77:02:cd:e2:
a6:1d:ff:10:49:78:fe:17:5b:22:95:07:77:73:83:bf:43:00:
38:34:dd:76:03:69:f2:34:e6:6b:8d:7f:27:b3:c7:e3:ba:8d:
36:94:50:91:b0:aa:04:6e:2e:41:f9:7f:57:0d:ce:ed:f3:95:
74:49:fd:5a:b4:69:ef:43:7f:21:c1:18:9b:d5:12:a8:e2:1c:
dc:c9:bd:7e:bf:82:28:c2:d3:af:80:8a:82:8a:28:d0:bc:e9:
03:8a:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:54 2025 by rpki-client