
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json)
Hash identifier: DRdcolV7J9dpBGSvmJBX7KfTkJPaU+0pvVrFQsgUtAg=
Subject key identifier: 6F:6D:BD:05:B9:D8:ED:E7:88:08:59:D5:C6:A9:E1:01:EF:0E:4E:60
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial: 16D7
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
Manifest number: 16BF
Signing time: Tue 24 Mar 2026 16:34:36 +0000
Manifest this update: Tue 24 Mar 2026 16:34:36 +0000
Manifest next update: Tue 31 Mar 2026 16:34:36 +0000
Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: fNQ0bwXr98dI0lrJ2q7cpVFln96V66hhClkb7XrFe8o=)
2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: Z9RyBMJrxYuZfbZLQ7+nLreuRbVepYn0j7NfRrq4SKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5847 (0x16d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Validity
Not Before: Mar 24 16:34:36 2026 GMT
Not After : Mar 31 16:34:36 2026 GMT
Subject: CN=69c2bd1c-f56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:c7:49:7f:46:cb:3a:f5:77:42:46:15:f8:
b8:d9:21:d5:8a:6e:58:85:38:87:47:ea:d7:dd:c7:
21:23:79:1f:5b:16:cc:dc:af:c8:a2:48:71:51:a7:
56:9c:69:e7:8d:49:e9:f5:9e:8e:10:6a:01:82:d3:
a6:0c:1a:5e:30:d0:08:86:3e:12:a4:57:f7:af:f6:
d5:9a:53:5f:d0:77:b6:cb:28:ca:77:a0:27:38:5f:
04:61:73:a3:fd:60:4f:a3:89:f3:fb:a7:7c:7b:b0:
c7:a7:35:d9:13:2c:e6:60:17:8b:f4:42:d0:12:e7:
21:ec:aa:a4:3e:e5:09:b7:56:e4:c6:e9:b1:de:e5:
3a:74:ea:59:78:31:e0:5c:c9:91:e7:c2:4f:dd:eb:
fa:30:0a:e0:46:23:b5:8c:19:8f:06:eb:01:f2:ff:
2f:7f:6b:a2:f7:ce:3a:ad:3a:82:81:bd:b0:92:fd:
ff:fb:78:f4:c0:68:be:b9:6a:ec:05:93:1d:cc:3b:
ba:af:7a:06:8b:1b:a5:fc:0b:16:a8:03:e1:02:ec:
9d:94:4e:39:5b:83:c6:ab:bf:f6:85:0c:58:0c:03:
e4:66:9c:bb:a0:d2:78:af:b9:40:f6:13:ed:34:12:
1b:d4:9f:2b:aa:41:2f:4d:54:a4:54:31:34:97:ee:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6D:BD:05:B9:D8:ED:E7:88:08:59:D5:C6:A9:E1:01:EF:0E:4E:60
X509v3 Authority Key Identifier:
keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:0a:4a:22:cf:aa:6a:3f:10:af:c0:1f:64:5c:b9:b4:48:
02:6b:74:39:ae:2f:a9:3a:ca:50:ba:db:83:c8:a8:f4:e6:6e:
b7:0f:6b:eb:78:c8:d7:d1:88:8e:b8:f8:fa:d5:e1:d4:54:84:
82:7c:7c:91:14:fc:10:b9:5c:f9:88:10:91:05:d5:02:c9:e6:
db:c2:0b:53:ba:84:12:16:61:ed:2d:2a:e2:81:42:12:01:0f:
bb:15:7e:dd:d6:9d:d7:94:80:61:3c:fa:35:d3:96:0f:30:d6:
3b:3f:e0:13:b1:b9:d8:94:1f:94:9f:68:3f:5e:a9:fb:7d:eb:
62:b3:d7:ab:1a:d9:59:e6:cb:6e:a0:65:53:64:7e:10:66:78:
51:dd:b1:be:87:51:4a:9b:08:f7:81:22:ea:85:89:ca:66:25:
94:8e:87:7f:e7:11:7b:69:6d:cc:0d:d8:00:8a:1e:63:77:d0:
cc:66:cd:40:96:2a:c5:74:b8:db:3d:90:4d:ae:4c:7d:2f:67:
89:60:97:8e:06:c8:d8:83:02:8a:bd:76:d1:53:ed:80:db:ce:
57:25:97:5c:c5:d1:83:b0:a2:3c:3a:21:85:26:5d:01:e9:f0:
cb:cb:de:c1:11:6a:9d:9b:53:03:29:bf:1b:a9:02:e9:94:a3:
3b:57:03:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx
NDI0QzhGN0UwHhcNMjYwMzI0MTYzNDM2WhcNMjYwMzMxMTYzNDM2WjAYMRYwFAYD
VQQDEw02OWMyYmQxYy1mNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBfHSX9Gyzr1d0JGFfi42SHVim5YhTiHR+rX3cchI3kfWxbM3K/IokhxUadW
nGnnjUnp9Z6OEGoBgtOmDBpeMNAIhj4SpFf3r/bVmlNf0He2yyjKd6AnOF8EYXOj
/WBPo4nz+6d8e7DHpzXZEyzmYBeL9ELQEuch7KqkPuUJt1bkxumx3uU6dOpZeDHg
XMmR58JP3ev6MArgRiO1jBmPBusB8v8vf2ui9846rTqCgb2wkv3/+3j0wGi+uWrs
BZMdzDu6r3oGixul/AsWqAPhAuydlE45W4PGq7/2hQxYDAPkZpy7oNJ4r7lA9hPt
NBIb1J8rqkEvTVSkVDE0l+7c+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9tvQW5
2O3niAhZ1cap4QHvDk5gMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2
MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY
M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcigKSiLPqmo/EK/AH2RcubRIAmt0Oa4vqTrKULrbg8io9OZutw9r63jI19GI
jrj4+tXh1FSEgnx8kRT8ELlc+YgQkQXVAsnm28ILU7qEEhZh7S0q4oFCEgEPuxV+
3dad15SAYTz6NdOWDzDWOz/gE7G52JQflJ9oP16p+33rYrPXqxrZWebLbqBlU2R+
EGZ4Ud2xvodRSpsI94Ei6oWJymYllI6Hf+cRe2ltzA3YAIoeY3fQzGbNQJYqxXS4
2z2QTa5MfS9niWCXjgbI2IMCir120VPtgNvOVyWXXMXRg7CiPDohhSZdAenwy8ve
wRFqnZtTAym/G6kC6ZSjO1cD5w==
-----END CERTIFICATE-----
Generated at Tue Mar 24 20:35:44 2026 by rpki-client