
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: 51OzKH6kr+ixGY7ikp2v/5UzarMVc3jK+FS5SEnhwtM=
Subject key identifier: 54:82:19:6E:36:B5:9E:07:65:6A:BF:41:27:C5:84:BB:50:3C:C9:16
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 13DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 136D
Signing time: Tue 24 Mar 2026 16:55:13 +0000
Manifest this update: Tue 24 Mar 2026 16:55:12 +0000
Manifest next update: Tue 31 Mar 2026 16:55:12 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: zcdf+4p4pkzZ6+YWV9HlOrZ4S0MgTfdeEniGkpcunDs=)
2: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: d9hXW1aA6CWn5i8mIcPw33T0SY+KBCLmc1Zny/WXhzw=)
3: DEF977A6E53611EB81682769C4F9AE02.roa (hash: 9Sja777+/DI9LrVjRVVanRSsluaWikKPhk3fpx+cYC8=)
4: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: xM/qEhKiZE/P+8xxo9+lcn1uI0Cg5PPZ6z086ozbSEE=)
5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: FC92AFK040EJiZt9ZtaMaDDZrQtuS6tBbe+7zz+A28Q=)
6: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: 31BU6yJWqHhA4sXGAypLapVLGt+QVmmAJwmEmruaZZs=)
7: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: oYOOplUnMfrmcYH0EvPlN9Fyxk21VMxZW4LL32Y8NWs=)
8: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: 78wGwrTizm68dTrkWvVVi6mGKl9P3DBQ6n6sg9I/WNg=)
9: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: 5fzZmf2EzwvHfhYxlqlVnLdSiaTAki1ySlD4bT+lhHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5085 (0x13dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Mar 24 16:55:12 2026 GMT
Not After : Mar 31 16:55:12 2026 GMT
Subject: CN=69c2c1f1-7990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:af:fd:87:09:b5:3f:f3:74:75:77:cd:b6:
fc:a9:88:ff:65:0b:6a:f7:30:31:e1:0d:f5:2a:54:
91:96:d5:e6:27:f2:6c:9a:92:f7:99:ed:3a:78:9c:
a4:57:03:c1:05:21:15:46:1a:f3:51:f9:54:64:51:
fd:fb:83:8a:1f:70:f6:a9:ee:c8:51:81:6f:05:d1:
81:dc:6d:a3:85:21:f7:dc:6d:29:ff:f3:58:72:9f:
fb:96:88:87:50:ad:af:f7:52:ab:c7:5b:e0:3b:50:
c9:6f:6b:04:40:c7:bb:b5:c4:25:6b:5e:ff:5b:99:
00:7d:a4:bf:54:fb:53:fb:cc:2b:58:d1:68:e4:dc:
d2:37:58:fb:0d:f7:59:06:38:a6:db:f5:44:23:31:
fb:21:10:3e:e2:36:23:dc:59:a2:af:75:46:82:0a:
89:40:c4:1b:b5:e3:62:49:67:64:3a:db:bc:13:e6:
6e:dd:22:fb:9c:3d:05:52:15:11:a9:4d:98:0c:7d:
7c:cd:41:d4:19:a5:3a:00:22:ae:51:d6:d3:ce:58:
39:0b:53:d4:ae:6b:66:8f:13:7f:51:3f:bd:44:f0:
b6:ca:1d:b9:bc:05:76:1d:1c:57:d5:c1:b8:b4:08:
9f:90:ae:82:3f:8e:03:9b:6c:06:9f:1c:6d:0e:5e:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:82:19:6E:36:B5:9E:07:65:6A:BF:41:27:C5:84:BB:50:3C:C9:16
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:a8:d2:e2:13:5c:a8:d2:40:54:73:94:84:ca:f4:15:f5:
36:0a:b9:7c:bd:49:e0:ca:e7:e8:eb:89:77:5a:bf:0b:90:19:
9e:ec:6b:69:11:93:a1:8c:bb:06:50:aa:5b:f6:35:23:a8:2f:
1d:6b:7a:f1:09:66:a4:80:65:d5:c4:02:8c:9c:3c:d7:af:62:
21:b8:ae:bc:c0:7a:60:c8:09:a3:c9:7b:15:df:c0:56:72:5c:
f2:0b:4b:fb:fb:8f:c8:12:6f:92:3d:08:bd:30:bd:07:29:3f:
9b:57:c7:e3:dd:da:d8:f6:4a:d0:52:0a:f8:8a:e6:65:fd:3e:
0f:ae:08:f0:f0:44:8a:a6:47:81:45:e0:d3:51:26:c3:23:22:
fe:db:3f:e0:6d:00:dc:e4:47:23:14:44:35:02:16:3b:82:17:
c9:5c:6a:00:93:fa:6a:83:a1:2f:d5:dc:0b:20:0a:f9:54:1f:
b5:eb:5d:87:04:8e:90:90:8c:9b:88:4e:f4:60:0f:5e:8f:89:
4b:d7:f2:f3:cf:11:a3:cf:15:af:94:23:1d:c3:6c:94:eb:f0:
e4:3e:cd:87:9f:af:34:24:5c:c6:ae:7a:c7:4f:b2:09:fb:1d:
63:41:b7:c7:2e:34:c4:1d:07:6f:54:14:c9:c8:e4:9c:4b:67:
65:72:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:35 2026 by rpki-client