
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: mjwaZsK16ADKf9OHruPvNh9u87MkROxgbBJaBMUCqUs=
Subject key identifier: 70:5C:2A:C8:37:B5:2F:AB:69:86:C6:41:13:FA:18:FA:64:9E:F0:2F
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 1477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 13E8
Signing time: Thu 22 Oct 2026 16:59:58 +0000
Manifest this update: Thu 22 Oct 2026 16:59:58 +0000
Manifest next update: Thu 29 Oct 2026 16:59:58 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: jBxvGCam79dIwqKv5t+YIITnP3f7OZorXg3eyeOB6zA=)
2: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: 9GpcqksqCneDnIf0DLfUkzA97uuRd85btObC4kf3ijE=)
3: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: k2O1CtUKRCEkXOGGzGsaUfOLKyu0Sri3Iwysc/yq0zw=)
4: DEF977A6E53611EB81682769C4F9AE02.roa (hash: BY1q4admFM1K3k9XOXY8WrtJMNhMxHjhqzjGLz8rJKM=)
5: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: XDn9fY1X5lM9+O7xj1bF2fsWb+ZsafY9/512e6hZNw4=)
6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: whYb9PEntg2pj4PjuuKkmpVjN6g4o1BtxySfMVOaOi4=)
7: NCVrvih3-OvHWFI3_DEzxPiIwb4.asa (hash: gct9+B0kSHyt1ZcyrgI1Cxg2i8uYKaHOibbkvAeqZ6Q=)
8: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: ZEkfVCe1jvusGWdm67nOduFNHJqppbPsftgTBXfdHHA=)
9: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: MwLuq2r0Jxyzv9RKFp+tqRzlh6B3D52BDpe0X8kJ1Jw=)
10: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: YyVZn/ye0Rqf/VhJTxnivGBOOaUk6qL+nndzTncgFxg=)
11: dk1B9s0Ybwmo8VtPFKAMn8Qnndo.asa (hash: p4zzO3kLLXhU6sQZoqwld7vtUgx3LFuEHLszv6tJzs8=)
12: TpaR9ud1PckaggkCQoSc3V-jvds.asa (hash: TOmM2TdSi3LyeX5N8bgqimrTXq6pa7uDILsXCIPwtPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 16:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5239 (0x1477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Oct 22 16:59:58 2026 GMT
Not After : Oct 29 16:59:58 2026 GMT
Subject: CN=6ada410e-8e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:f9:f6:e4:ae:7f:e7:95:66:ee:19:f5:bb:
d6:e3:e7:d4:be:da:94:bf:5b:f4:35:bc:85:a1:47:
69:80:9d:d1:ff:dc:ac:22:15:e5:09:18:21:c6:19:
91:8a:55:6a:86:95:47:e0:60:c0:c3:0c:9d:b3:81:
86:a6:32:30:85:8c:ba:52:ae:5d:7c:54:45:9c:cf:
fe:cb:f6:8f:b2:e7:0f:58:7a:ce:8b:78:2b:46:18:
e3:be:d7:d1:f2:a3:00:d7:0a:88:32:e7:90:b5:1a:
6a:3d:8c:de:c9:6e:a6:f5:e3:18:ee:55:8d:b9:95:
a8:6b:de:4c:10:07:b6:e1:d8:4a:78:a7:e9:5d:6f:
d8:b7:90:18:1c:96:01:47:5a:c2:ef:5c:11:e4:05:
98:b5:99:33:90:4b:19:d2:17:fb:ec:2e:b8:c9:b6:
38:cb:1e:8f:ff:79:93:5a:17:f9:e0:18:af:75:93:
2c:c6:62:90:1a:60:42:f8:be:b3:f9:05:a7:68:4a:
0e:72:81:24:94:3f:84:0c:4e:3b:9f:ed:cd:40:fe:
20:97:eb:a0:a9:8f:b8:8c:fd:1b:4d:c3:60:c0:05:
10:d3:29:cb:db:de:21:3a:2d:67:aa:ea:54:f8:28:
e5:e6:aa:92:ee:7e:46:18:4a:cb:58:a7:30:d8:a6:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5C:2A:C8:37:B5:2F:AB:69:86:C6:41:13:FA:18:FA:64:9E:F0:2F
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:08:a2:49:e8:80:f2:f0:40:96:42:22:9e:59:7d:95:4f:c4:
64:86:ac:ce:71:a5:fd:0e:d2:24:07:b7:e2:3f:30:5c:8b:e7:
62:99:88:5d:9d:cb:f6:12:b7:35:19:9b:10:48:ff:c5:75:25:
db:f1:b6:4c:22:02:55:25:08:eb:44:0c:cd:86:cb:ad:e9:17:
87:0b:50:a5:8a:81:b8:b8:bc:5e:17:e3:7e:81:4e:8a:2b:6c:
e2:1e:14:a3:0b:24:75:d2:85:0d:4f:ba:88:39:33:fc:fa:04:
26:75:62:67:91:87:4b:f3:b7:30:af:71:ec:c1:0c:8e:44:71:
4f:04:9c:4f:d3:44:e6:86:ac:53:38:44:aa:4e:61:2f:8d:3c:
30:35:1a:9a:68:9f:32:20:fa:df:f8:60:49:5d:5f:7c:20:07:
7f:bd:16:a3:9e:ec:f6:96:cc:7c:e8:16:ef:e6:de:9a:d6:f9:
08:d4:97:76:39:e1:b2:93:f4:a4:a8:cc:66:60:69:8c:40:e2:
41:75:b7:32:ee:cd:49:76:af:96:de:8d:ea:84:08:81:e3:0b:
b7:d1:c3:11:c2:16:20:68:e2:63:bc:33:10:6c:6e:f8:7f:3a:
a6:2d:16:11:87:39:7a:5f:42:7e:52:95:e7:ba:a8:c8:35:08:
8e:7c:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:13:47 2026 by rpki-client