
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier: tDwI5QPCKBeehaXhYrvqnfjSm+TAEyywcfU/k6Q+Ahs=
Subject key identifier: 5C:93:3B:CA:00:36:93:7F:F4:23:EF:6D:38:7E:92:6C:9B:2D:51:31
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer: /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number: 66
Signing time: Sun 05 Apr 2026 07:18:57 +0000
Manifest this update: Sun 05 Apr 2026 07:18:56 +0000
Manifest next update: Sun 12 Apr 2026 07:18:56 +0000
Files and hashes: 1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: PKJXlzwmmf0T9sp/NfoDvlri2VLnNxFRpZrw107Wl6k=)
2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: o62XZo2Qz1zImJWSvpxTK0mWq5l9UluAleNSitVqKg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Validity
Not Before: Apr 5 07:18:56 2026 GMT
Not After : Apr 12 07:18:56 2026 GMT
Subject: CN=69d20ce1-5c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:56:59:90:d0:b9:ae:92:14:a3:cd:8c:2e:
ef:a7:57:8a:73:08:83:6c:c4:c3:0d:f1:fe:2a:27:
6d:1d:83:1f:94:82:f3:37:1d:ac:20:24:a2:5d:5d:
5b:e7:ef:a3:41:aa:24:3e:bc:a7:7d:4f:89:5c:ed:
2a:9c:53:2f:fb:bb:8e:50:42:dc:e4:80:75:c8:35:
2f:2f:7c:25:66:13:cf:bd:5d:23:09:13:8a:d0:32:
e4:4a:8e:35:af:04:1a:d7:49:3a:2e:fa:29:5a:82:
a5:54:98:2e:5c:61:5a:23:7d:37:1e:4b:a5:d3:e7:
b5:07:92:51:81:b4:c3:50:25:71:1c:aa:6a:3e:ab:
9f:3b:f6:15:f7:5a:6d:52:64:8c:fb:ed:e4:cf:fd:
48:cc:8e:42:47:7a:3b:36:fe:f7:5d:81:25:29:4a:
34:e1:f6:06:7f:eb:0b:c5:a7:d0:87:f6:77:25:03:
d7:06:c8:c7:9d:82:aa:1c:b4:4c:4c:7c:42:da:2e:
23:ff:76:6d:45:a3:b7:44:cc:9b:05:74:a9:12:11:
02:b7:7e:7f:03:3a:13:39:04:88:94:a1:17:84:4e:
38:85:7e:e2:54:b7:6b:8a:7b:a5:0d:f1:d4:86:ba:
90:32:04:f7:a0:50:6d:a4:88:15:0b:e5:e3:82:ae:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:3B:CA:00:36:93:7F:F4:23:EF:6D:38:7E:92:6C:9B:2D:51:31
X509v3 Authority Key Identifier:
keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:1d:2f:62:c8:5d:e0:db:3f:a4:77:ff:a4:03:4b:b2:13:
bc:cf:f9:0e:1e:d4:e7:c9:f6:12:cb:51:7c:0a:b8:e4:fd:3e:
2a:ab:ce:8d:89:79:3d:5e:2a:4a:68:73:87:88:e5:f3:70:27:
5e:b4:76:95:bd:95:64:88:f9:fe:c5:e8:32:23:f8:77:86:47:
91:f1:23:63:be:14:79:7a:41:cc:ed:a5:ef:f7:06:a4:b5:d2:
eb:0b:23:21:ad:d5:03:08:61:42:f0:c9:4f:fb:71:4f:5b:74:
07:f8:9b:d3:75:e0:0c:93:26:80:e6:ca:60:2a:77:49:ef:00:
fb:fa:1a:d3:3e:d3:5a:f7:90:5a:47:be:64:bf:34:e0:7a:7e:
ec:52:4f:4d:41:18:30:1b:c9:50:d2:f9:91:6d:ba:b6:5e:76:
1f:79:9e:4e:a8:4e:be:95:af:55:61:75:2c:9e:d9:42:cd:7f:
0e:3d:3e:5a:6e:9e:bc:2d:00:1c:52:7b:95:17:5b:db:fc:39:
e4:10:4d:c8:ef:dd:9c:66:ea:6c:e6:96:3a:32:c2:a3:c9:3c:
93:12:67:70:a6:ff:13:5d:34:f0:30:93:8f:82:43:d0:70:a0:
4e:82:ee:c8:98:a6:04:06:94:c3:2b:10:5b:2a:7b:c9:a6:1c:
da:b6:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:34 2026 by rpki-client