
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier: R3ysRNQtoFu6+gBid/m56pdJ+fWs/buCYLxIszEFlJ0=
Subject key identifier: 09:8B:82:26:23:0D:23:FE:DB:8C:13:5B:E1:5D:44:1F:06:44:F2:71
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 061C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number: 05F6
Signing time: Thu 16 Apr 2026 22:53:53 +0000
Manifest this update: Thu 16 Apr 2026 22:53:53 +0000
Manifest next update: Thu 23 Apr 2026 22:53:53 +0000
Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: 40NeBNNYWOiBXovXv/ZCprw83Ca/g27efxfv8nK/gQg=)
2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=)
3: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=)
4: C41221884B6011F092B79129C4F9AE02.roa (hash: yoHJyz0yzJ4YEb6A+CcIpp3EhYT5/ZPAYDAwC5c4zpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Apr 16 22:53:53 2026 GMT
Not After : Apr 23 22:53:53 2026 GMT
Subject: CN=69e16881-f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:f6:c7:37:a5:42:fc:55:9f:63:ff:75:d0:
8c:14:50:25:1b:b1:5c:54:7a:b4:59:a8:c2:0f:3c:
13:68:78:02:31:39:a8:83:b3:bb:f1:06:fb:49:cf:
ac:ee:56:5e:3b:58:93:fb:2a:6d:61:a7:df:23:57:
cc:32:d3:5d:d3:7b:4e:04:22:e2:95:a3:53:ad:b6:
c5:5b:f6:74:aa:de:fa:f1:43:a8:6a:e6:85:28:08:
f1:9d:be:8e:3e:dd:f0:91:60:40:93:3c:a9:a7:d0:
1c:c2:98:cd:4e:9c:d0:28:1e:63:ab:c4:5a:13:80:
ed:0c:98:88:a0:98:30:2c:92:ff:b6:4f:d5:8c:66:
3b:93:92:38:39:db:18:69:2a:47:63:cb:ba:52:8c:
1f:ce:3c:4e:e1:1f:f7:03:61:a5:d1:c0:e5:04:0c:
e6:0f:26:f7:ae:34:e4:9b:39:4d:ae:37:f6:9c:f2:
74:f5:5b:04:b9:f7:a1:09:df:91:b2:42:62:7a:0b:
00:c0:7c:72:65:a2:66:ef:3d:03:fa:28:4a:af:32:
ba:fc:a6:d7:b4:8a:7c:ba:06:25:b9:84:84:73:5e:
33:75:f6:ec:8d:48:df:c9:55:0e:a2:a2:22:9f:97:
c5:45:a8:a8:61:bc:8a:5f:5f:55:db:b9:d4:e6:e6:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:82:26:23:0D:23:FE:DB:8C:13:5B:E1:5D:44:1F:06:44:F2:71
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:24:ec:4f:f6:b5:7f:ef:a1:f8:39:70:39:3d:70:57:65:52:
89:2a:cc:95:9b:6c:c6:e4:8a:1c:aa:88:87:d2:de:ba:d7:bf:
4b:ba:12:29:fc:66:2d:66:3c:e1:fd:d3:6e:2a:e3:b4:fc:a5:
f7:82:5a:c0:8f:84:92:cf:64:f9:21:8a:62:95:dc:2d:2a:24:
b7:52:8b:7d:33:ef:2b:b2:96:2a:c4:83:79:5f:0f:31:ed:c3:
c2:f4:a8:b3:0e:51:b4:c8:df:cd:ad:f2:3c:74:c0:1a:ad:71:
bc:5a:3d:98:59:d2:12:61:80:7b:9d:f8:07:78:98:44:ec:92:
2a:1f:18:a4:24:8d:94:b8:31:38:e6:be:3f:9e:cd:e7:26:39:
f5:40:54:40:03:8b:a8:24:a1:38:8a:4d:0b:6b:ad:2a:69:ae:
ae:47:dc:18:9b:2d:fe:ac:4c:f6:0b:92:89:df:d7:20:bf:7c:
89:23:c3:08:e0:88:8a:70:95:54:b0:74:11:9f:5c:53:d8:e9:
07:c0:4f:82:27:c8:bc:b8:29:85:df:40:f3:f7:e9:c5:9e:44:
81:14:bb:61:e6:56:c6:83:f7:c0:d9:57:84:25:00:39:c5:ff:
cf:04:9e:19:cd:04:4c:95:6a:de:ed:e3:99:d0:25:fe:25:b7:
e5:ac:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:58 2026 by rpki-client