
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json)
Hash identifier: PC+1Lxl+ySnrLL2pDgSZW+4yxYyVwoyZ1WKAZsI24Q4=
Subject key identifier: B2:DA:5F:E3:3B:1E:6E:93:8A:20:8A:69:84:AA:29:89:2B:CC:2C:52
Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
Certificate serial: 0CAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
Manifest number: 14CD
Signing time: Thu 16 Apr 2026 18:18:59 +0000
Manifest this update: Thu 16 Apr 2026 18:18:59 +0000
Manifest next update: Thu 23 Apr 2026 18:18:59 +0000
Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: IuFKUMkPz1ss3ywdwS9sX6A6OHLcRP1oH2DdlbrdIt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
Validity
Not Before: Apr 16 18:18:59 2026 GMT
Not After : Apr 23 18:18:59 2026 GMT
Subject: CN=69e12813-9802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:4d:a6:00:5b:00:e0:fd:a7:bb:44:95:f7:
29:dd:e1:c1:e0:a2:13:cf:de:ae:5e:b3:9f:10:45:
fb:5d:0f:27:ed:8a:56:54:ce:e2:1f:ad:27:8d:01:
db:38:65:07:54:ba:64:9e:e4:cd:e9:08:79:4b:07:
a8:be:aa:d5:a7:2a:2e:67:29:3a:c4:a1:67:ed:c3:
a3:41:f7:f9:c2:7b:fa:8a:b6:f6:50:aa:27:a6:37:
19:5f:12:d9:f2:0a:5b:f1:b9:a2:68:ec:e6:a2:47:
e9:26:42:34:44:29:b3:ca:f4:10:7f:d1:13:e5:6f:
2f:7c:41:95:0a:55:62:6d:f8:b7:f3:77:08:53:b6:
ae:7d:07:23:46:78:cf:e5:91:a7:83:d9:bb:1b:8b:
71:58:e1:92:47:ba:00:47:31:6a:60:71:ff:28:ae:
08:5f:68:86:dd:a2:b3:5b:71:fe:44:d8:d7:18:69:
44:03:0c:51:35:d6:2b:06:14:7f:c6:f3:94:97:c8:
63:65:62:39:e5:f0:a1:71:87:ba:8a:c2:a0:70:cc:
fe:09:ab:06:22:1e:b5:fb:db:c3:a2:13:95:c3:d7:
ed:ff:60:e4:af:32:c4:c7:d4:25:4e:7b:53:92:37:
3f:08:ba:d2:de:52:2d:9e:e2:ad:fd:7e:27:32:91:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:5F:E3:3B:1E:6E:93:8A:20:8A:69:84:AA:29:89:2B:CC:2C:52
X509v3 Authority Key Identifier:
keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:1c:41:0b:43:aa:d7:2a:d3:d6:c3:b6:73:88:a0:05:b4:
3f:73:24:a5:50:4f:40:28:d7:91:90:fe:24:44:f9:6f:59:ae:
0b:9b:84:78:9c:49:a4:8f:6b:08:67:4a:7d:1e:72:70:35:9f:
75:a1:0f:13:34:a1:85:f0:0b:62:6d:44:49:91:1c:1d:0b:d9:
32:52:2c:03:33:ff:26:9f:28:65:87:87:2f:34:b8:f6:57:f7:
ef:7f:47:75:79:ff:d7:12:e8:79:58:78:dc:af:7c:1e:3f:98:
eb:6f:0b:66:d1:15:33:4e:9a:36:8a:92:35:f3:b0:c5:66:95:
e6:c3:2a:9f:e3:7c:b5:94:78:ed:46:c1:56:75:4f:a9:dc:34:
5a:31:16:c0:2e:20:3e:59:53:55:16:c7:4c:98:d4:0f:1a:8a:
a4:ec:3e:86:0e:7f:79:25:2b:1c:09:76:6b:4b:89:3c:48:d8:
2b:4b:48:e9:8f:92:2a:0a:03:b1:c0:34:31:3f:6d:31:f1:30:
51:6f:a8:50:6c:92:bd:6d:c6:3e:5b:f0:0b:92:06:5f:1c:b2:
59:61:46:27:53:5a:5e:c5:82:6b:8b:8f:f9:55:9d:6b:5a:76:
ff:b6:fc:65:82:3b:80:68:45:6e:4a:d1:4c:7c:32:f8:6d:70:
b8:2b:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:58 2026 by rpki-client