
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: G94scmyg7IsqRQm+iBdQBCKrCZQyogTM5al1BClEi+c=
Subject key identifier: DD:92:7D:62:10:B1:8E:1D:E6:9B:FD:31:30:21:6C:C5:B6:14:1A:67
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: 0213
Signing time: Fri 25 Sep 2026 03:00:44 +0000
Manifest this update: Fri 25 Sep 2026 03:00:44 +0000
Manifest next update: Fri 02 Oct 2026 03:00:44 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: GOiVbEzGX+6LNLyFj34hIk2IfzHI2yoiJtcFhGbSvFw=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Sep 25 03:00:44 2026 GMT
Not After : Oct 2 03:00:44 2026 GMT
Subject: CN=6ab5e3dc-176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:2a:36:9b:67:30:72:93:7e:92:14:4f:1d:
84:10:43:4e:4c:15:1d:8f:58:a1:8b:de:e3:29:f4:
79:c9:9d:8c:ad:56:f4:a2:c7:39:67:d3:71:66:57:
fc:81:7d:ef:0b:f2:32:d9:a7:d9:84:86:23:1c:88:
c2:c0:85:41:65:42:d3:f0:bd:e4:fc:0a:51:a9:be:
f7:db:e4:c6:d6:4f:06:58:e1:fb:43:11:f2:45:be:
ca:a9:31:46:88:03:3d:9e:ce:1a:87:a2:0a:df:90:
ac:c7:5d:9e:85:d5:f8:7d:22:7a:d8:13:75:8f:fd:
92:66:8f:5f:bd:3d:d7:34:be:88:78:48:e5:ee:2b:
a6:00:ad:7a:1d:df:68:14:54:84:77:fc:ae:68:c3:
df:98:3a:21:aa:f6:70:fa:27:08:1a:d4:4e:54:8b:
db:31:72:1b:27:f1:2f:d9:12:59:af:ac:f7:35:17:
42:29:1e:cf:84:da:b4:d5:06:14:d3:c8:40:e3:ca:
d6:9e:22:6c:4c:98:d9:21:1f:c6:96:35:b7:88:52:
8e:93:23:8f:ae:16:24:09:aa:a0:b2:74:0f:71:ea:
d4:bc:0c:e1:bd:c2:d8:ed:ac:17:f4:d4:d0:77:24:
53:77:3e:14:2b:2f:d6:50:81:b6:2f:56:92:da:86:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:7D:62:10:B1:8E:1D:E6:9B:FD:31:30:21:6C:C5:B6:14:1A:67
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:88:72:d6:9a:51:9d:19:a9:0f:ae:68:a5:3b:b5:05:84:9c:
3b:96:3e:58:7e:dc:e8:ba:d0:4e:8a:7f:42:76:2e:5d:ae:91:
97:f0:f9:00:78:16:64:18:bf:98:fe:a3:70:43:43:15:95:c6:
cc:e4:d7:be:bc:54:62:f6:da:e6:3a:7d:08:6a:71:ef:16:0a:
30:e6:88:69:b1:04:ff:61:5d:95:78:23:9e:2b:eb:73:17:2a:
a6:4c:09:5d:78:ba:82:c4:a2:f3:e7:9b:34:a5:e2:02:df:62:
bd:dd:f2:60:64:8e:28:e5:e1:ea:c6:ec:5c:30:4e:17:22:ac:
34:0b:df:d2:01:2d:fe:c2:90:33:9b:68:27:48:f2:69:88:d0:
db:9d:ea:0a:04:e9:19:41:31:45:9a:8c:3c:be:b7:f6:88:94:
1c:7a:36:9c:96:5a:1c:fe:5b:a3:8f:c7:e1:0d:05:ae:45:76:
fd:d9:2b:b4:50:21:23:e4:fa:bc:49:e3:1b:28:90:ca:c4:39:
c2:02:84:84:72:30:aa:8e:e6:47:97:98:49:a9:1d:e5:26:4b:
e7:34:75:bb:19:9c:36:d0:7e:81:a5:1b:9c:e0:58:df:9b:81:
24:36:dd:2c:a7:f1:7b:4e:34:ce:d1:c8:5e:3f:20:3a:7c:6b:
e1:9a:c4:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjYwOTI1MDMwMDQ0WhcNMjYxMDAyMDMwMDQ0WjAYMRYwFAYD
VQQDEw02YWI1ZTNkYy0xNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlJgqNptnMHKTfpIUTx2EEENOTBUdj1ihi97jKfR5yZ2MrVb0osc5Z9NxZlf8
gX3vC/Iy2afZhIYjHIjCwIVBZULT8L3k/ApRqb732+TG1k8GWOH7QxHyRb7KqTFG
iAM9ns4ah6IK35Csx12ehdX4fSJ62BN1j/2SZo9fvT3XNL6IeEjl7iumAK16Hd9o
FFSEd/yuaMPfmDohqvZw+icIGtROVIvbMXIbJ/Ev2RJZr6z3NRdCKR7PhNq01QYU
08hA48rWniJsTJjZIR/GljW3iFKOkyOPrhYkCaqgsnQPcerUvAzhvcLY7awX9NTQ
dyRTdz4UKy/WUIG2L1aS2oZ3uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2SfWIQ
sY4d5pv9MTAhbMW2FBpnMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP
aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApIhy1ppRnRmpD65opTu1BYScO5Y+WH7c6LrQTop/QnYuXa6Rl/D5AHgWZBi/
mP6jcENDFZXGzOTXvrxUYvba5jp9CGpx7xYKMOaIabEE/2FdlXgjnivrcxcqpkwJ
XXi6gsSi8+ebNKXiAt9ivd3yYGSOKOXh6sbsXDBOFyKsNAvf0gEt/sKQM5toJ0jy
aYjQ253qCgTpGUExRZqMPL639oiUHHo2nJZaHP5bo4/H4Q0FrkV2/dkrtFAhI+T6
vEnjGyiQysQ5wgKEhHIwqo7mR5eYSakd5SZL5zR1uxmcNtB+gaUbnOBY35uBJDbd
LKfxe040ztHIXj8gOnxr4ZrEPA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:21:12 2026 by rpki-client