
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: 5K5YZhQvNApQsQudGGt7ES6CJ0K6i9EUc7SASf2Lqds=
Subject key identifier: 1E:70:A6:95:59:A6:97:AD:B6:FB:25:BF:76:F6:BB:81:15:82:43:42
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: 01B7
Signing time: Fri 27 Mar 2026 03:25:19 +0000
Manifest this update: Fri 27 Mar 2026 03:25:18 +0000
Manifest next update: Fri 03 Apr 2026 03:25:18 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: ZhJYcQyZ3jasQOB4RH7GbQkUzApwRN8v1gcfWXLLe+E=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Mar 27 03:25:18 2026 GMT
Not After : Apr 3 03:25:18 2026 GMT
Subject: CN=69c5f89e-3665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:ff:d5:98:77:e8:93:44:9b:4d:d1:30:4c:
62:67:3c:c1:cc:23:01:c0:97:19:7e:97:93:08:40:
69:9f:1a:06:bc:26:0a:29:1a:fc:6f:8f:1f:12:2e:
6e:2d:0a:cd:66:ac:2c:08:c3:93:a0:cc:2c:da:4d:
9c:00:f1:28:02:9e:85:1b:2b:e2:88:cc:69:f4:b3:
bb:7c:91:16:3e:65:e8:e0:e1:50:b3:6a:ca:14:8c:
c5:86:96:c2:d5:4a:b0:d4:03:46:c8:17:df:17:ed:
b0:0e:2a:23:75:57:27:27:98:12:11:8a:9c:31:40:
9b:de:95:20:ed:c2:b6:3f:61:92:05:19:4c:10:28:
de:a5:27:1f:eb:4c:e6:e7:39:82:13:e6:68:02:90:
28:69:bd:82:66:1e:49:90:35:a7:ae:94:60:a0:19:
cc:d0:71:15:e4:0c:99:ca:c4:61:2d:ea:ce:1b:fb:
73:0b:4a:de:69:b0:00:3d:7c:af:c0:c1:df:dd:68:
7f:bd:0e:ee:be:dc:79:f8:f9:35:b6:12:0e:2c:6b:
0e:55:18:1a:2a:a7:fc:8a:8e:22:26:4d:ea:4c:4c:
54:69:88:39:f2:3c:2b:a9:57:d4:cd:3a:e1:55:2c:
51:62:7e:8c:3f:f5:ab:ff:bb:1d:d3:38:b3:05:af:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:A6:95:59:A6:97:AD:B6:FB:25:BF:76:F6:BB:81:15:82:43:42
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:2c:67:71:7c:27:d3:f1:a1:6b:58:62:83:0f:fe:52:9e:
34:7f:e0:b0:43:95:d5:81:70:1a:43:fe:e6:1c:22:3e:9b:dd:
8a:96:87:7e:be:3e:13:38:f4:0b:8d:49:0f:f9:84:e3:e6:53:
b1:9c:66:83:83:55:0d:e9:0e:ff:2d:7b:82:67:ef:88:2c:c9:
d0:d4:c1:5e:1a:69:c8:9e:b2:f9:7f:f4:bd:ee:cb:ed:84:32:
eb:0e:f4:37:11:17:93:a9:73:14:13:a7:05:28:ba:16:f0:ce:
2c:bd:73:d5:22:8c:2f:c3:ed:29:78:07:cf:1b:8b:be:02:ed:
65:49:f3:22:68:55:f2:a1:ec:be:66:75:6f:0e:21:48:35:ba:
2b:bb:e9:ea:48:ec:88:64:df:6f:ce:46:72:3a:19:9b:5b:34:
ca:2e:a9:04:fe:fc:c9:a9:c0:d8:c8:aa:da:aa:30:b4:35:0a:
38:27:10:3a:ba:41:25:b3:a7:4a:02:c5:b9:bf:91:9e:40:8c:
e0:68:98:5f:85:80:9f:c6:a6:2d:0e:37:57:2c:0a:cd:67:4a:
26:b5:3d:69:ee:a8:30:69:fb:1a:80:ea:9b:19:88:b0:42:5a:
0a:02:d3:ad:42:60:02:98:7e:b4:a9:01:eb:bb:6b:af:e5:c5:
e8:42:3b:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjYwMzI3MDMyNTE4WhcNMjYwNDAzMDMyNTE4WjAYMRYwFAYD
VQQDEw02OWM1Zjg5ZS0zNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQf/1Zh36JNEm03RMExiZzzBzCMBwJcZfpeTCEBpnxoGvCYKKRr8b48fEi5u
LQrNZqwsCMOToMws2k2cAPEoAp6FGyviiMxp9LO7fJEWPmXo4OFQs2rKFIzFhpbC
1Uqw1ANGyBffF+2wDiojdVcnJ5gSEYqcMUCb3pUg7cK2P2GSBRlMECjepScf60zm
5zmCE+ZoApAoab2CZh5JkDWnrpRgoBnM0HEV5AyZysRhLerOG/tzC0reabAAPXyv
wMHf3Wh/vQ7uvtx5+Pk1thIOLGsOVRgaKqf8io4iJk3qTExUaYg58jwrqVfUzTrh
VSxRYn6MP/Wr/7sd0zizBa/esQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5wppVZ
ppettvslv3b2u4EVgkNCMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP
aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD0ssZ3F8J9PxoWtYYoMP/lKeNH/gsEOV1YFwGkP+5hwiPpvdipaHfr4+Ezj0
C41JD/mE4+ZTsZxmg4NVDekO/y17gmfviCzJ0NTBXhppyJ6y+X/0ve7L7YQy6w70
NxEXk6lzFBOnBSi6FvDOLL1z1SKML8PtKXgHzxuLvgLtZUnzImhV8qHsvmZ1bw4h
SDW6K7vp6kjsiGTfb85GcjoZm1s0yi6pBP78yanA2Miq2qowtDUKOCcQOrpBJbOn
SgLFub+RnkCM4GiYX4WAn8amLQ43VywKzWdKJrU9ae6oMGn7GoDqmxmIsEJaCgLT
rUJgAph+tKkB67trr+XF6EI70w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:28 2026 by rpki-client