
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json)
Hash identifier: 8MPcQq3WdFgZo6ugaf2kVUH69a8Xp+5uPT9sq0u3fiQ=
Subject key identifier: 6D:AA:42:5A:D2:01:8B:53:ED:68:1A:A9:80:8D:BA:6A:FE:16:CF:C2
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial: 16C2
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
Manifest number: 16B2
Signing time: Mon 02 Mar 2026 00:13:00 +0000
Manifest this update: Mon 02 Mar 2026 00:12:59 +0000
Manifest next update: Mon 09 Mar 2026 00:12:59 +0000
Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: eKnFE0GvSsNuEyMmMi6McPUdagnWOCNtKXWqVI/uYQg=)
2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: vvZS0ECU2CMPi9BX1RvoJ53ycBpah2sWmUSMu5XAMO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5826 (0x16c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Validity
Not Before: Mar 2 00:12:59 2026 GMT
Not After : Mar 9 00:12:59 2026 GMT
Subject: CN=69a4d60c-4d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:eb:0f:7d:a3:c0:c7:f3:ef:ba:fc:6e:d4:
f8:7f:aa:25:f2:30:61:45:0d:3b:ce:80:9c:7e:de:
19:bf:da:59:6d:5e:94:96:0c:32:7e:cc:a8:15:d9:
47:34:57:be:04:56:6c:d5:0f:2a:32:ea:ca:46:51:
8b:1c:54:1c:2e:c8:a2:03:44:6e:32:6c:36:28:c0:
79:0a:5f:55:5f:4d:05:ca:9c:46:a5:4e:8e:07:3d:
00:5c:02:b4:f2:c5:89:38:a8:ff:59:8f:ec:f7:76:
3f:31:ce:d2:77:94:05:75:1f:d9:99:0f:3d:0d:67:
11:44:6c:58:f0:a9:85:91:92:2e:b2:fc:b0:52:8a:
9a:38:a7:be:55:b2:29:a8:6e:c3:39:7a:b6:11:c9:
a2:8b:11:2f:9d:30:cc:3a:8f:77:39:58:34:33:58:
db:9c:3b:25:3e:d5:69:0f:20:0f:b8:b2:83:33:2d:
c0:bd:2a:a4:cd:01:36:30:0e:f6:f3:a1:b9:b2:75:
69:0f:56:aa:3a:a8:df:3c:42:ce:d1:b0:49:f6:a3:
0d:b5:01:fd:c4:1c:09:e8:fe:f0:9d:ee:1e:ae:e0:
88:c5:df:e8:5e:48:d6:68:fc:7a:b0:f0:aa:bd:02:
eb:7c:55:6e:f9:4e:db:ab:03:10:44:a2:48:6c:84:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AA:42:5A:D2:01:8B:53:ED:68:1A:A9:80:8D:BA:6A:FE:16:CF:C2
X509v3 Authority Key Identifier:
keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:31:74:ab:c2:5f:4a:60:ab:0b:41:76:f4:80:64:d5:30:7d:
9e:04:d3:95:b0:47:1a:a9:81:93:92:32:8e:e6:04:3e:b2:08:
8f:fb:ef:25:c6:ef:d0:3b:f5:23:5b:e6:4e:b0:ff:28:a3:c2:
d4:a7:94:b1:be:2a:ae:af:a8:a4:56:44:f5:58:06:82:32:53:
88:6f:3a:8c:4b:de:3a:e7:6d:a9:71:0c:5b:e2:c0:eb:d7:75:
d0:bb:39:b0:65:35:2f:34:14:7a:d6:ee:c7:1d:14:bb:e4:43:
2a:64:5f:67:e7:bc:6a:e4:ee:dc:c2:d4:87:22:4c:fb:bd:6b:
6f:f8:99:5f:f3:e8:c5:8a:2a:1f:82:cb:e3:14:35:82:88:b8:
3e:52:a5:7c:b8:37:ac:c0:de:c5:5c:9d:74:93:ef:60:c6:27:
97:d8:39:47:ca:29:cd:a2:af:3b:40:bb:c7:eb:a1:29:59:4b:
a4:8a:f1:7d:55:75:0b:db:88:44:d0:7b:2b:fb:53:62:1a:1d:
96:2f:99:0b:a0:79:0a:ed:b1:da:34:5d:49:77:89:b3:38:1d:
43:4a:1b:f6:93:ac:c9:51:c2:d2:28:c4:b5:6b:82:bd:cc:71:
26:a6:96:82:81:22:f1:dc:b0:94:1d:c6:6d:d2:c6:9e:d9:2b:
9f:07:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:34 2026 by rpki-client