
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: Z1mMZLNFnchK9WZ1Br3tauqvrFt6jtiOn3lr6iHicpQ=
Subject key identifier: 5E:C7:F0:BC:03:05:2F:49:D5:7E:E3:72:51:CA:5B:A1:05:F5:E5:EE
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: 01C2
Signing time: Fri 17 Apr 2026 03:32:41 +0000
Manifest this update: Fri 17 Apr 2026 03:32:40 +0000
Manifest next update: Fri 24 Apr 2026 03:32:40 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: PFReLV6c+GG1ATjpwp61HyGwGlHEH9W3AjnC05rHGm4=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Apr 17 03:32:40 2026 GMT
Not After : Apr 24 03:32:40 2026 GMT
Subject: CN=69e1a9d9-cef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:74:dc:ca:e4:70:db:7e:09:5e:4c:d2:28:
18:32:81:2d:3e:eb:2b:a0:84:1b:da:4e:05:f5:72:
84:5f:2c:bd:fc:70:48:ce:71:e7:09:bd:a0:39:b9:
c8:d4:06:c0:91:e8:33:43:b4:8d:20:1d:4f:af:81:
19:72:4d:23:d9:40:9b:24:7b:e4:59:a8:80:bc:19:
28:e6:0b:18:fd:cf:14:34:6e:8d:31:0f:f1:1f:f4:
81:e1:59:52:fd:69:9b:30:30:d3:75:50:3e:1c:52:
49:52:66:21:7b:4c:f4:b4:90:e6:7e:8c:04:a0:fd:
7f:b6:de:bb:be:dc:64:9a:5b:ff:55:55:18:fe:eb:
51:47:05:48:3b:c1:36:97:c6:c3:4b:2d:53:4c:63:
bb:c4:90:fe:de:56:29:47:56:c4:ce:11:c6:62:a1:
29:5e:ab:35:04:68:51:72:a6:10:3b:f5:45:db:73:
55:f1:d8:b3:2c:d7:49:51:d8:92:bc:55:7d:cf:cf:
f7:bc:8d:e8:66:57:33:ba:08:bd:a2:aa:95:41:c4:
0c:27:99:ff:e4:c3:f9:d5:8e:65:d4:ce:87:7e:00:
a1:b7:1c:70:88:da:db:b5:bd:24:fe:1a:d2:91:b4:
70:0f:3f:fd:af:6e:02:e3:15:6d:b1:1d:c1:bb:9e:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C7:F0:BC:03:05:2F:49:D5:7E:E3:72:51:CA:5B:A1:05:F5:E5:EE
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2e:ae:6b:94:38:db:52:ea:8b:c6:9c:d0:88:03:6b:b2:9e:
d2:8d:f0:96:9b:cb:9c:de:e8:e2:7a:30:18:34:c3:58:05:2b:
53:10:a8:0f:1d:51:2f:90:41:fa:97:99:36:5a:65:7d:20:1d:
2e:15:cb:ea:08:e4:39:45:d9:6f:26:c2:dc:df:9b:7a:d7:9b:
b2:07:66:af:50:38:f6:70:c1:59:6a:a6:ae:1d:64:25:ae:20:
d3:84:4f:b7:26:d9:ce:bb:24:d4:cf:b1:80:28:a2:13:5e:65:
32:76:3a:5e:cc:61:c9:9f:8e:dd:88:4f:c3:d6:0f:22:56:7d:
a0:47:37:33:23:e6:1f:b5:f8:3b:37:1d:7d:f0:d1:0a:dd:22:
21:23:f4:d3:9b:c4:ed:28:1b:1c:9e:8a:e9:95:8e:23:8e:38:
5e:2e:5d:cc:54:d4:97:3c:66:8d:02:73:86:03:85:a1:53:ec:
ae:aa:7e:8f:69:cf:ba:36:60:be:bc:f7:1d:91:20:ee:9c:37:
d0:3d:62:45:27:9c:4f:1c:54:0d:22:6a:ff:53:46:e9:81:38:
80:94:b4:9a:12:08:e6:45:90:01:e2:07:a9:83:5f:e1:b5:9a:
4a:05:e4:2d:67:e8:2b:43:1b:41:3b:c8:33:1b:3c:a3:04:71:
a2:89:c3:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjYwNDE3MDMzMjQwWhcNMjYwNDI0MDMzMjQwWjAYMRYwFAYD
VQQDEw02OWUxYTlkOS1jZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuZ03MrkcNt+CV5M0igYMoEtPusroIQb2k4F9XKEXyy9/HBIznHnCb2gObnI
1AbAkegzQ7SNIB1Pr4EZck0j2UCbJHvkWaiAvBko5gsY/c8UNG6NMQ/xH/SB4VlS
/WmbMDDTdVA+HFJJUmYhe0z0tJDmfowEoP1/tt67vtxkmlv/VVUY/utRRwVIO8E2
l8bDSy1TTGO7xJD+3lYpR1bEzhHGYqEpXqs1BGhRcqYQO/VF23NV8dizLNdJUdiS
vFV9z8/3vI3oZlczugi9oqqVQcQMJ5n/5MP51Y5l1M6HfgChtxxwiNrbtb0k/hrS
kbRwDz/9r24C4xVtsR3Bu57W+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7H8LwD
BS9J1X7jclHKW6EF9eXuMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP
aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsy6ua5Q421Lqi8ac0IgDa7Ke0o3wlpvLnN7o4nowGDTDWAUrUxCoDx1RL5BB
+peZNlplfSAdLhXL6gjkOUXZbybC3N+betebsgdmr1A49nDBWWqmrh1kJa4g04RP
tybZzrsk1M+xgCiiE15lMnY6XsxhyZ+O3YhPw9YPIlZ9oEc3MyPmH7X4OzcdffDR
Ct0iISP005vE7SgbHJ6K6ZWOI444Xi5dzFTUlzxmjQJzhgOFoVPsrqp+j2nPujZg
vrz3HZEg7pw30D1iRSecTxxUDSJq/1NG6YE4gJS0mhII5kWQAeIHqYNf4bWaSgXk
LWfoK0MbQTvIMxs8owRxoonDrw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:01 2026 by rpki-client