
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: nA0lphrcJMIWrRks66KRpRL/geBf9wMh6SWpvi5B/g4=
Subject key identifier: 3C:9E:B2:8D:76:68:DE:B4:93:E9:7F:60:2C:F3:93:E5:3B:99:A6:78
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: 01CE
Signing time: Mon 11 May 2026 03:42:29 +0000
Manifest this update: Mon 11 May 2026 03:42:28 +0000
Manifest next update: Mon 18 May 2026 03:42:28 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: CwV/Pfg1aElnCx4OdnxBsYxiUp6X69Z//+J5KHLg53g=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: May 11 03:42:28 2026 GMT
Not After : May 18 03:42:28 2026 GMT
Subject: CN=6a015024-a76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:84:18:b9:a7:ef:c0:7a:99:d4:7c:14:5d:
3d:4a:d9:1d:5c:3f:88:25:ac:0f:5a:e7:c5:77:df:
18:da:19:6c:a3:f2:67:37:00:e7:90:1a:a9:77:42:
0f:76:07:7e:3f:45:96:f9:30:48:86:4b:6f:26:3b:
8c:99:b2:cb:f0:bc:0b:2c:ac:8e:e1:75:81:e6:23:
a3:bb:7e:7d:e4:2f:d6:57:5b:b0:b5:3e:7b:22:86:
57:80:f4:f3:18:49:ab:89:c7:df:33:8a:e8:45:70:
43:8b:ac:98:7f:11:1e:6e:8e:82:85:0f:96:26:aa:
3b:3c:9f:3b:c0:1e:e4:df:c5:b3:63:0d:fd:37:4c:
24:45:fc:75:07:af:11:eb:01:03:59:c6:d9:5e:b1:
e9:42:82:95:b4:5a:91:75:b7:97:d1:fc:ab:28:10:
ec:bd:f4:ad:57:73:90:d6:27:bc:9d:ea:fb:ee:b3:
f7:80:74:74:e9:63:3d:cb:5a:54:b5:18:2b:4c:68:
6c:b1:f6:a7:b5:ce:2e:ca:d1:8f:bd:79:d8:bb:eb:
d8:1a:d7:a7:ea:06:92:f4:7b:59:2b:5a:ab:01:98:
0e:33:50:e2:2d:a7:72:f2:b3:ad:22:b4:98:a5:11:
c8:8d:e1:69:fc:83:29:db:ca:d6:d6:fb:11:50:20:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:B2:8D:76:68:DE:B4:93:E9:7F:60:2C:F3:93:E5:3B:99:A6:78
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c6:30:7d:b3:cb:1f:ad:37:aa:f0:d6:44:dc:00:a4:3a:ae:
12:7b:04:04:e9:4b:d8:8e:d8:af:04:9d:98:fe:7c:ef:96:89:
43:6e:51:2e:9b:5f:d5:f5:2b:ca:56:f6:f0:78:6b:65:99:95:
ce:49:1e:b6:7e:d1:3c:3e:f2:bb:cb:2e:a1:84:ba:93:5d:1f:
6c:87:09:93:98:ee:10:d6:d7:76:f0:3c:81:ec:92:23:c6:fb:
15:16:20:0d:d0:fa:6f:84:df:81:04:48:9e:4e:91:09:01:af:
4d:fe:d2:77:ca:b2:12:8c:9a:77:b5:8c:60:82:f8:b0:5a:32:
21:c5:fc:44:d9:87:93:91:c2:05:6a:f3:18:5d:10:0e:37:4d:
79:3d:ba:46:45:92:7d:8a:ca:da:ab:f9:a8:56:dc:5d:87:04:
38:5b:f6:98:c6:03:6f:97:7a:8b:0d:dd:68:0f:a2:a3:a1:aa:
e4:a9:5b:03:d2:05:61:56:19:d2:fc:d8:a1:aa:0e:9a:59:5c:
a8:8d:88:25:5b:54:ec:b7:2c:3f:cf:3c:5a:5a:a7:16:a1:a4:
86:3b:b2:57:45:b9:7a:d2:ba:a6:cd:56:41:10:1f:64:76:59:
7a:57:b4:2b:20:98:be:ca:35:30:a4:11:f8:e2:3d:1c:f0:34:
8b:85:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:51 2026 by rpki-client