
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: W8a81vxfPUtLdNZchk3v03+rO3/u6aIiu8XJVFekPTY=
Subject key identifier: 36:19:51:96:87:34:E9:6F:E4:06:28:B6:18:17:A2:3C:7F:1F:2F:9A
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: 021C
Signing time: Tue 13 Oct 2026 03:25:13 +0000
Manifest this update: Tue 13 Oct 2026 03:25:13 +0000
Manifest next update: Tue 20 Oct 2026 03:25:13 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: BWkwNf5KidAzeX3ejPro1ipXh2Tqb1ptqXOD3WFxfEw=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Oct 13 03:25:13 2026 GMT
Not After : Oct 20 03:25:13 2026 GMT
Subject: CN=6acda499-151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:02:42:8c:bf:96:5c:0a:c1:df:d0:be:a7:
fa:3a:4e:0d:53:5e:c0:2e:01:24:18:53:fa:96:30:
87:93:aa:77:c1:d6:2b:95:c8:4d:4f:80:2c:5d:67:
ad:5f:99:e8:74:78:6e:99:ac:28:f2:2c:fd:6d:1c:
dc:1c:93:af:f2:4f:7d:87:9c:90:67:e8:07:ff:bc:
08:f4:0a:b4:a2:8d:65:c2:cc:89:c1:78:e0:96:3a:
19:cd:a8:81:88:92:50:10:31:8d:73:2b:b2:5b:8c:
a9:d1:2e:5f:9b:fd:d6:c9:35:e9:cc:ab:a7:1e:15:
3e:16:c3:80:24:b5:91:71:03:a5:4a:f5:2b:d5:44:
ea:98:27:73:d2:d4:f2:33:98:81:f3:cf:c5:6b:7c:
55:88:3c:40:9c:e5:dd:27:69:78:34:cf:76:52:81:
73:82:dc:97:36:5b:3a:02:e9:1f:92:05:44:d8:81:
47:30:40:33:d4:5a:8f:4f:b5:34:31:e7:a6:4a:03:
fd:72:9a:54:18:24:2b:61:a7:b5:c9:aa:19:4d:90:
87:27:ce:da:f4:c0:8a:75:63:3e:49:8a:b7:e5:33:
a3:72:bc:67:d5:3b:2d:d3:22:0a:8f:2b:fa:1d:5b:
be:c6:5f:b1:97:8a:91:0e:db:6d:90:a3:65:16:bc:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:51:96:87:34:E9:6F:E4:06:28:B6:18:17:A2:3C:7F:1F:2F:9A
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:95:e9:22:83:a0:c3:4e:d3:c0:c2:ea:fd:df:a6:ea:fa:b5:
89:24:af:55:42:b5:97:a0:14:ec:d1:53:b6:50:59:a3:83:08:
bb:de:d9:d5:d1:f3:e7:51:d1:8a:00:56:f5:d9:a5:66:aa:1c:
7a:03:f9:97:a8:1f:7b:59:96:82:b4:ad:ef:02:42:ab:c3:63:
ac:ba:ad:63:a3:c8:37:e6:27:88:7b:ff:64:de:df:cc:4d:42:
4b:84:11:51:ce:ba:55:75:7a:d0:d8:02:0b:5e:26:f9:0a:c6:
0b:61:f6:a3:56:d4:05:cf:bb:43:f1:04:3b:e7:f5:76:9d:c6:
b9:88:c3:e3:be:71:9d:52:27:7f:2c:41:bf:ad:a1:0f:06:fb:
7b:d8:1a:61:95:74:cc:da:fb:5f:6e:8e:42:68:68:e9:4e:f0:
b3:24:69:d9:16:7e:d7:b2:59:27:37:33:17:86:9c:af:4f:40:
ea:f0:54:27:7a:1d:a8:57:12:3f:c4:f8:0d:e4:dc:99:d0:c3:
24:d7:4e:05:fe:80:38:7d:1c:17:45:46:94:6d:cb:ac:e0:4a:
cb:fd:4e:42:e3:6a:3c:f9:17:b7:33:d2:b8:14:ed:cb:61:93:
35:fb:44:ce:7b:a1:89:8e:c9:f7:f6:06:16:15:06:24:f8:d6:
b0:77:0b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:10:13 2026 by rpki-client