
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File: Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier: 82RyrqcEW59vciHkBWebGuQK3ApA3uOYIcZwn0KA3Bc=
Subject key identifier: 35:7F:EB:70:53:33:1F:12:DE:19:9C:98:88:E7:A0:F4:AF:C7:D2:7E
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number: 1C
Signing time: Wed 25 Mar 2026 08:08:51 +0000
Manifest this update: Wed 25 Mar 2026 08:08:51 +0000
Manifest next update: Wed 01 Apr 2026 08:08:51 +0000
Files and hashes: 1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: qtTDMHgJlQstNV+hCGC9N1QV+jrW4i/ePOUNI8dkx8Q=)
2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Validity
Not Before: Mar 25 08:08:51 2026 GMT
Not After : Apr 1 08:08:51 2026 GMT
Subject: CN=69c39813-7053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:2c:d0:b8:05:a2:c8:0c:a6:c8:ca:5a:c6:
b4:c9:78:de:ff:1f:3d:0b:8c:36:b4:56:1a:7d:69:
29:7e:64:35:98:9a:ea:72:a1:51:67:25:e8:7c:60:
62:b5:5b:a2:4a:dd:20:0d:25:ed:7e:72:17:6b:5d:
d5:10:d8:60:d3:80:7d:1e:da:37:e4:7a:f7:9e:f6:
0b:25:a5:be:2f:05:58:98:4d:12:e5:0c:fc:5e:92:
b9:2e:9e:19:0d:d5:25:1c:fc:e1:3c:07:1e:2f:89:
0e:dd:78:d7:ed:db:f9:71:02:0a:14:f2:bb:86:87:
05:15:0a:18:9f:eb:61:47:82:ed:bc:3b:be:96:4b:
8c:ee:24:b0:e5:52:57:f6:e2:1a:61:5e:8b:11:e1:
14:90:68:d3:62:d1:e0:43:06:6a:a9:e4:af:05:7d:
25:83:54:fd:c6:dd:81:fb:a6:6f:7b:c2:1f:1f:9f:
2e:bb:8c:80:de:57:3e:e7:2a:91:3a:6d:aa:3d:3c:
f9:83:b3:70:e2:15:ca:98:07:7a:94:f5:f6:75:84:
85:09:8c:93:90:e2:bc:91:dd:8f:37:03:8a:d6:ae:
e0:cb:d2:d3:41:45:01:26:c2:d7:d0:5f:83:e5:38:
47:7a:0e:28:3c:de:a3:b0:bd:fc:d2:14:d2:0e:90:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:EB:70:53:33:1F:12:DE:19:9C:98:88:E7:A0:F4:AF:C7:D2:7E
X509v3 Authority Key Identifier:
keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fb:ac:2f:e0:21:71:fa:f5:c2:8d:1e:9c:e5:7a:89:71:b3:
e3:a1:bb:4b:b4:4c:70:af:cc:23:1c:8f:0b:1d:16:e0:01:ff:
2a:c3:fe:6a:6a:42:af:6c:83:a9:8e:af:44:d4:45:00:c9:e2:
a6:c1:18:35:e2:e3:b3:e5:de:ca:cd:30:0e:8e:9b:b9:ec:fb:
6d:cd:ab:d5:67:50:cb:22:57:c1:81:ac:d2:33:89:c3:ad:92:
70:4a:35:51:b4:80:6c:bf:89:d4:a5:a8:8c:3d:bd:e4:1d:16:
0b:bd:54:b8:ac:02:ca:a3:a7:65:31:3c:c0:11:03:0b:8c:a7:
71:8f:e6:ef:40:25:d7:c2:26:09:19:dd:67:a0:44:d1:08:91:
2c:6b:02:f8:c1:eb:1d:38:8b:7b:19:3e:85:6a:4e:ae:bb:e1:
0b:73:73:e2:bc:1a:dc:59:4c:f9:c4:8a:cd:e6:d8:0b:e5:9b:
66:4f:22:52:23:42:5c:4b:f8:66:8c:4c:a3:9c:f1:cf:a4:9e:
79:5e:0f:4a:6d:29:8c:02:36:40:9a:94:65:4d:31:69:7e:fb:
4d:6f:f5:a8:3b:4c:42:cb:b4:83:79:24:b7:f7:1d:c4:83:32:
ce:0e:49:27:33:53:7a:e4:5e:26:03:37:47:b8:d9:ea:c4:0b:
32:8e:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:42 2026 by rpki-client