
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: d9uwpRjThEluW2RTahbPaMoeluCXs8/gH7cV1oubhIU=
Subject key identifier: 5C:68:41:EF:3D:AB:C8:92:FE:FD:16:43:3C:D0:00:99:2D:42:33:3B
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: 01A8
Signing time: Sun 01 Mar 2026 04:52:03 +0000
Manifest this update: Sun 01 Mar 2026 04:52:03 +0000
Manifest next update: Sun 08 Mar 2026 04:52:03 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: jdXjr3aMwcIJTdQ8yRu6kvQh0BCjdeygPXllhj4uoT8=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: Kn/Z1rDpA/ttbyRypaR6AHeF+y7El6cRx5pOMXcKn6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Mar 1 04:52:03 2026 GMT
Not After : Mar 8 04:52:03 2026 GMT
Subject: CN=69a3c5f3-1912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:83:c2:63:bb:d5:00:19:1f:9e:de:74:35:
6d:26:39:cc:0c:d5:09:4c:ea:13:03:eb:71:6c:a5:
f5:74:46:74:88:68:6b:3f:8b:9f:66:14:98:9a:45:
c5:c9:df:85:6f:75:bb:60:03:e6:9c:78:4b:91:aa:
1d:7b:8b:1f:4f:f7:ce:c5:f2:72:6d:49:52:dd:de:
a1:90:ed:f5:06:5d:4f:12:d2:13:6b:06:9c:89:fe:
e0:ad:45:a4:57:05:d4:d2:af:e1:93:ae:34:0d:27:
68:8d:26:b4:7d:ac:a9:f3:c7:db:ef:b6:98:64:4a:
ae:0a:c8:e3:34:9b:01:79:22:fe:07:ed:06:85:bf:
2f:4e:d4:5b:48:e7:ef:12:60:85:24:bc:71:94:66:
6e:cc:42:a8:61:a5:9c:85:d0:8c:b6:6c:60:de:7d:
af:3e:fc:90:83:58:60:8e:50:9e:c4:8d:52:db:05:
93:dc:77:25:53:07:7e:10:7b:d8:54:21:28:a6:50:
2c:86:4d:75:27:4d:6b:cf:19:d4:d6:45:0a:ec:13:
e4:1e:53:82:ea:38:df:82:1f:b3:b5:7b:aa:1a:f4:
d9:e4:1f:82:0d:0e:95:7c:da:81:66:58:01:43:e4:
cd:7a:c0:69:9d:51:15:e3:15:6f:55:e5:36:ff:37:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:41:EF:3D:AB:C8:92:FE:FD:16:43:3C:D0:00:99:2D:42:33:3B
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a6:fe:6a:cc:1c:c4:73:eb:ae:bb:84:13:6d:5f:b2:8c:9f:
6d:8f:88:26:7e:93:14:f7:30:c8:01:1d:38:25:e3:20:87:48:
95:e9:55:1d:35:cd:75:56:26:84:07:95:a7:e1:3a:9c:a7:fc:
72:a2:d7:e6:83:5e:65:78:3d:ee:cc:49:04:97:1d:02:54:34:
5f:a4:12:bf:21:a6:81:5d:be:bb:70:e1:c2:6d:3a:10:b6:c0:
c4:0f:96:12:17:56:46:46:5a:d9:f6:82:5b:2e:28:20:85:c5:
56:c3:38:d7:fd:87:c5:31:16:34:55:e7:3f:4e:07:aa:91:60:
f1:86:66:ba:ee:77:70:2b:b1:83:61:1c:2a:d2:a8:97:0a:f6:
5d:9f:c1:75:44:3a:a3:c4:c9:59:8b:0b:78:1f:16:08:9a:ba:
3c:98:30:da:41:76:9e:de:ca:f2:da:59:33:e8:b9:9f:3b:66:
72:07:51:63:56:a6:02:03:ed:9a:38:89:46:55:87:58:0c:1d:
08:ad:bc:d5:6b:7c:c6:c6:c7:70:1a:d2:a8:fc:6e:ca:96:95:
b7:d4:ba:06:b3:1d:24:84:12:fb:cd:1d:4c:c1:c5:bf:83:39:
09:35:24:49:62:33:70:02:83:0b:f1:5a:f2:97:36:73:97:06:
1b:b5:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:47 2026 by rpki-client