
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: ina2kzhdt1eylQRwMmQDHC6ciRmiZJXQazYKkK8KK+o=
Subject key identifier: 8E:77:72:01:1A:50:5B:42:F9:0D:CA:AE:A2:A7:CB:4F:BE:12:D3:AE
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 145F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 13D4
Signing time: Sun 20 Sep 2026 16:56:16 +0000
Manifest this update: Sun 20 Sep 2026 16:56:16 +0000
Manifest next update: Sun 27 Sep 2026 16:56:16 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: gXO5dAm/+X1SGQbzopBxhwWRfkWnt1FRsgkA9HU6rL0=)
2: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: q2r56qA7EC09+cAvQlDYR+19HkC6/7LH8pBlmSxU3qs=)
3: dk1B9s0Ybwmo8VtPFKAMn8Qnndo.asa (hash: p4zzO3kLLXhU6sQZoqwld7vtUgx3LFuEHLszv6tJzs8=)
4: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: k2O1CtUKRCEkXOGGzGsaUfOLKyu0Sri3Iwysc/yq0zw=)
5: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: MwLuq2r0Jxyzv9RKFp+tqRzlh6B3D52BDpe0X8kJ1Jw=)
6: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: YGdZEfoGR9j2vqRAuH1M8YrngQD9A+dtXQp6mdmAqCA=)
7: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: 9GpcqksqCneDnIf0DLfUkzA97uuRd85btObC4kf3ijE=)
8: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: XDn9fY1X5lM9+O7xj1bF2fsWb+ZsafY9/512e6hZNw4=)
9: NCVrvih3-OvHWFI3_DEzxPiIwb4.asa (hash: gct9+B0kSHyt1ZcyrgI1Cxg2i8uYKaHOibbkvAeqZ6Q=)
10: TpaR9ud1PckaggkCQoSc3V-jvds.asa (hash: TOmM2TdSi3LyeX5N8bgqimrTXq6pa7uDILsXCIPwtPA=)
11: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: whYb9PEntg2pj4PjuuKkmpVjN6g4o1BtxySfMVOaOi4=)
12: DEF977A6E53611EB81682769C4F9AE02.roa (hash: BY1q4admFM1K3k9XOXY8WrtJMNhMxHjhqzjGLz8rJKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5215 (0x145f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Sep 20 16:56:16 2026 GMT
Not After : Sep 27 16:56:16 2026 GMT
Subject: CN=6ab01030-aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:7e:77:38:8d:21:81:d4:eb:a2:f0:32:07:
3c:16:57:6c:b4:9f:dc:c2:fb:fb:41:ea:1e:13:43:
ef:ef:73:95:f0:2e:16:d7:bf:15:3b:3b:61:65:3e:
08:d5:d0:49:e6:7c:e7:50:3b:8d:a0:8a:91:0c:f5:
c3:a1:cf:7d:01:54:73:0f:8a:16:69:da:39:38:e5:
c6:ee:36:b2:59:6a:a7:96:f6:7c:9b:6c:99:e7:c8:
4f:3d:10:2f:06:21:d8:17:a7:f8:85:ed:d5:c5:2c:
9c:da:6e:4e:f0:a6:85:7e:00:a6:10:2f:3d:5b:04:
1f:12:17:bb:b5:33:eb:23:07:5b:a3:69:2f:1e:72:
01:3a:54:81:d3:d9:be:2b:6b:50:13:ce:f7:38:e9:
5a:04:e5:3e:0f:d1:5e:56:31:10:d2:55:c7:b1:8c:
f7:61:bb:7b:ed:67:11:41:e5:6e:c1:3a:b7:f9:d6:
a9:bf:02:62:71:77:82:2e:d5:f4:da:c5:80:9f:ae:
ff:00:2d:32:33:77:a2:e0:b3:ae:f2:4e:07:b2:bd:
30:71:f3:19:a2:0f:b2:12:14:8a:fb:d0:71:d2:de:
dd:f3:33:a7:15:d6:ef:d0:78:f9:22:4a:3e:0c:72:
9e:d0:2c:82:46:0d:7d:6e:82:82:1a:c1:f5:95:a2:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:77:72:01:1A:50:5B:42:F9:0D:CA:AE:A2:A7:CB:4F:BE:12:D3:AE
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:6b:6b:b5:9b:3b:0f:e3:ad:3d:ec:c4:ee:01:db:83:d3:
84:c7:dc:51:16:6a:a2:98:c7:7b:37:b9:de:dc:b3:d2:13:b3:
8b:ea:8d:aa:4f:79:76:d1:0c:ec:ca:6a:44:ce:da:f0:f5:e9:
cb:2d:94:25:b1:2c:bf:ac:1f:db:26:cc:4b:94:e5:75:17:d4:
84:ce:32:4c:82:c5:92:ab:04:c3:dc:bc:2a:86:2b:45:1b:be:
f1:fb:ec:aa:16:80:3a:2a:e8:86:30:fd:8a:e8:1d:e4:2e:4f:
f0:40:d8:dd:ab:50:9e:44:2c:e3:e2:57:f1:11:a7:c8:91:db:
0f:0b:8e:f3:ce:9e:af:19:9f:04:b3:5f:db:f1:46:de:f5:d8:
63:b5:6f:07:9b:17:4d:5b:7f:a6:f4:76:14:bf:33:a1:0d:91:
8d:11:6d:75:a7:b9:8b:fa:d5:f9:95:ab:1a:de:85:79:73:ad:
ea:d2:db:3a:18:f6:0e:4c:10:d9:ac:3d:58:6a:0b:d3:13:b4:
6d:f8:70:3b:29:1c:cd:31:55:a4:7b:28:5c:67:8b:3a:0e:6a:
3c:f8:fa:b9:3a:6c:ae:21:bc:9a:08:87:1d:93:f9:87:15:5b:
70:59:06:03:cc:fe:dd:77:d5:73:29:42:46:67:96:6d:33:7e:
6e:cd:ed:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw
MTBCQjFBOUYwHhcNMjYwOTIwMTY1NjE2WhcNMjYwOTI3MTY1NjE2WjAYMRYwFAYD
VQQDEw02YWIwMTAzMC1hYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQp+dziNIYHU66LwMgc8FldstJ/cwvv7QeoeE0Pv73OV8C4W178VOzthZT4I
1dBJ5nznUDuNoIqRDPXDoc99AVRzD4oWado5OOXG7jayWWqnlvZ8m2yZ58hPPRAv
BiHYF6f4he3VxSyc2m5O8KaFfgCmEC89WwQfEhe7tTPrIwdbo2kvHnIBOlSB09m+
K2tQE873OOlaBOU+D9FeVjEQ0lXHsYz3Ybt77WcRQeVuwTq3+dapvwJicXeCLtX0
2sWAn67/AC0yM3ei4LOu8k4Hsr0wcfMZog+yEhSK+9Bx0t7d8zOnFdbv0Hj5Iko+
DHKe0CyCRg19boKCGsH1laJZ1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI53cgEa
UFtC+Q3KrqKny0++EtOuMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE
MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO
Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUHxra7WbOw/jrT3sxO4B24PThMfcURZqopjHeze53tyz0hOzi+qNqk95dtEM
7MpqRM7a8PXpyy2UJbEsv6wf2ybMS5TldRfUhM4yTILFkqsEw9y8KoYrRRu+8fvs
qhaAOirohjD9iugd5C5P8EDY3atQnkQs4+JX8RGnyJHbDwuO886erxmfBLNf2/FG
3vXYY7VvB5sXTVt/pvR2FL8zoQ2RjRFtdae5i/rV+ZWrGt6FeXOt6tLbOhj2DkwQ
2aw9WGoL0xO0bfhwOykczTFVpHsoXGeLOg5qPPj6uTpsriG8mgiHHZP5hxVbcFkG
A8z+3XfVcylCRmeWbTN+bs3tMw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:05:05 2026 by rpki-client