
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: pi29hVT2ztM2sKVYEV8a86d3N2cgJl7Gy3UZaxlvs6s=
Subject key identifier: BE:89:32:05:BB:BD:AB:47:4B:71:42:A6:4D:BE:7C:0F:2D:3A:0B:C2
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 1469
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 13DA
Signing time: Thu 24 Sep 2026 16:56:48 +0000
Manifest this update: Thu 24 Sep 2026 16:56:48 +0000
Manifest next update: Thu 01 Oct 2026 16:56:48 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: sG3yxQTn6bz+2Zx2BOmpG0rCzClfWisNYwJzVZg6KSo=)
2: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: MwLuq2r0Jxyzv9RKFp+tqRzlh6B3D52BDpe0X8kJ1Jw=)
3: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: ZEkfVCe1jvusGWdm67nOduFNHJqppbPsftgTBXfdHHA=)
4: TpaR9ud1PckaggkCQoSc3V-jvds.asa (hash: TOmM2TdSi3LyeX5N8bgqimrTXq6pa7uDILsXCIPwtPA=)
5: NCVrvih3-OvHWFI3_DEzxPiIwb4.asa (hash: gct9+B0kSHyt1ZcyrgI1Cxg2i8uYKaHOibbkvAeqZ6Q=)
6: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: 9GpcqksqCneDnIf0DLfUkzA97uuRd85btObC4kf3ijE=)
7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: BY1q4admFM1K3k9XOXY8WrtJMNhMxHjhqzjGLz8rJKM=)
8: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: whYb9PEntg2pj4PjuuKkmpVjN6g4o1BtxySfMVOaOi4=)
9: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: XDn9fY1X5lM9+O7xj1bF2fsWb+ZsafY9/512e6hZNw4=)
10: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: YyVZn/ye0Rqf/VhJTxnivGBOOaUk6qL+nndzTncgFxg=)
11: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: k2O1CtUKRCEkXOGGzGsaUfOLKyu0Sri3Iwysc/yq0zw=)
12: dk1B9s0Ybwmo8VtPFKAMn8Qnndo.asa (hash: p4zzO3kLLXhU6sQZoqwld7vtUgx3LFuEHLszv6tJzs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5225 (0x1469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Sep 24 16:56:48 2026 GMT
Not After : Oct 1 16:56:48 2026 GMT
Subject: CN=6ab55650-c95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:20:16:26:ab:85:7d:be:b0:53:14:a6:53:
a4:b6:e9:0d:6d:1d:df:5d:b1:c6:bc:73:77:33:99:
93:cf:47:45:64:f6:f2:e3:4b:01:d5:31:32:1d:40:
19:74:2b:b7:7b:8d:4d:78:62:b8:d5:84:d4:cd:07:
87:fd:b5:19:77:e6:57:9b:c6:7d:01:8e:c4:23:7a:
90:f5:46:93:c1:b4:7e:82:30:39:57:83:79:87:3c:
ae:c5:7b:37:c2:d1:87:5f:b6:e8:69:6e:cf:64:dc:
16:b2:55:13:dc:cf:a7:80:ce:9b:3d:6a:2f:f8:90:
68:1b:ec:13:6c:a8:45:ed:c4:1d:0e:5b:bb:4d:12:
d2:01:52:c6:11:f8:21:84:c7:52:b4:59:ca:5a:83:
d5:18:fc:ba:f0:34:12:60:3d:03:c7:2b:7c:12:42:
b4:6e:58:52:c8:b4:c0:c5:de:26:2f:5f:f4:8a:9c:
65:de:4f:5c:6f:f2:bc:e9:df:b8:05:17:42:77:5f:
ea:6c:d1:65:2e:b2:da:16:d4:06:a7:3e:fc:b7:cb:
f4:2a:dc:92:b3:fc:65:bd:27:ed:cf:9f:60:c5:ea:
08:5c:93:f1:58:70:44:85:70:fd:39:63:68:04:6f:
46:ea:54:87:bb:b6:a1:ce:38:67:29:4a:5b:c8:e6:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:32:05:BB:BD:AB:47:4B:71:42:A6:4D:BE:7C:0F:2D:3A:0B:C2
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:7d:21:10:12:58:b3:95:eb:9d:ab:4c:37:12:f8:7a:35:39:
79:43:4e:4d:5c:c5:fd:ee:5a:c9:1e:da:5a:d6:41:53:f1:9a:
a2:8a:84:54:46:17:d0:92:02:5b:f2:94:f7:8f:4f:8d:d9:23:
07:61:c6:10:f6:52:7c:9e:b2:29:d6:2b:83:1a:3b:80:a7:aa:
e2:b9:f7:56:ee:de:97:ef:5f:b6:78:18:6a:c9:2b:65:18:84:
30:e2:02:86:b9:0c:bd:6e:b6:b1:79:0f:87:e6:40:1d:ea:ea:
31:77:f5:08:66:bf:dc:16:95:a1:27:0c:ca:af:76:a6:fb:96:
8c:c3:4b:b8:1e:4d:35:71:39:f7:33:e9:24:1c:20:54:6d:79:
a9:ee:f6:bd:75:c0:b6:db:d5:35:6d:60:16:f1:9a:07:4a:49:
24:86:f6:12:11:6e:3d:35:da:3f:2b:b3:3a:6a:d7:f3:fd:92:
bb:11:25:f4:45:b6:80:e8:df:78:6e:d5:14:4d:c1:84:ae:97:
94:cd:41:d3:5d:31:d4:28:81:e2:2b:50:34:1f:b9:da:a0:e2:
57:f4:61:40:32:26:22:50:7f:a4:83:34:3f:be:18:15:08:01:
30:d7:fc:a8:cc:87:8b:76:51:2f:61:91:69:9e:66:6a:c9:ed:
31:98:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:41:47 2026 by rpki-client