
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: J19u9Fm+D2MZlKApYjH39ne/kEXR7n8Q7L1XmLcK7/0=
Subject key identifier: E1:F2:5E:A8:43:1E:EB:49:CC:DB:74:C4:8C:28:76:5C:5D:8A:EA:0C
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 13EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 137B
Signing time: Mon 20 Apr 2026 16:57:43 +0000
Manifest this update: Mon 20 Apr 2026 16:57:43 +0000
Manifest next update: Mon 27 Apr 2026 16:57:43 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: r+S4X1sJyO9gfxFmMd3xXOhN849CnU6D3V9jqZ2cTUQ=)
2: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: d9hXW1aA6CWn5i8mIcPw33T0SY+KBCLmc1Zny/WXhzw=)
3: DEF977A6E53611EB81682769C4F9AE02.roa (hash: 9Sja777+/DI9LrVjRVVanRSsluaWikKPhk3fpx+cYC8=)
4: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: 5fzZmf2EzwvHfhYxlqlVnLdSiaTAki1ySlD4bT+lhHc=)
5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: xM/qEhKiZE/P+8xxo9+lcn1uI0Cg5PPZ6z086ozbSEE=)
6: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: oYOOplUnMfrmcYH0EvPlN9Fyxk21VMxZW4LL32Y8NWs=)
7: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: 78wGwrTizm68dTrkWvVVi6mGKl9P3DBQ6n6sg9I/WNg=)
8: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: FC92AFK040EJiZt9ZtaMaDDZrQtuS6tBbe+7zz+A28Q=)
9: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: 31BU6yJWqHhA4sXGAypLapVLGt+QVmmAJwmEmruaZZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5099 (0x13eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Apr 20 16:57:43 2026 GMT
Not After : Apr 27 16:57:43 2026 GMT
Subject: CN=69e65b07-1d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:e0:5e:29:a2:c0:28:5b:3f:dc:73:cf:d0:
95:93:5f:37:9d:1b:60:dc:70:55:62:ff:4a:57:f6:
a6:ed:75:11:28:86:90:15:5e:a4:f9:e1:94:fc:29:
1c:14:d3:98:4c:48:5a:ca:51:17:1f:b1:fa:3a:15:
7c:87:da:13:26:11:5f:b7:34:aa:31:3c:6e:75:29:
a3:e0:73:4a:4a:1c:ef:0b:7d:ec:7c:02:5c:ff:d4:
cd:77:69:2f:2e:fb:c8:dc:34:23:99:9c:5e:25:3e:
eb:ff:9d:85:1a:58:48:d1:8a:53:85:10:e3:dd:f5:
60:8f:e9:c3:ba:64:a7:e3:b6:4f:92:d8:05:4e:a0:
46:f3:3c:b6:e8:c7:00:2b:35:9a:5a:bf:85:23:a1:
e3:35:60:88:75:fa:33:7e:36:82:89:52:09:4c:bd:
37:c7:68:9f:13:25:c5:80:ce:0a:8c:4c:60:2f:1a:
d8:42:e8:9c:b1:d7:ab:41:d8:69:69:26:9d:e1:7b:
6a:9b:be:ba:d5:8f:63:98:29:53:8e:fa:b4:a0:9d:
78:74:b5:ad:a2:02:bf:97:d0:f7:05:4a:c6:37:21:
0a:3a:fd:ff:a4:e0:a8:7d:dd:fd:a7:4f:db:6c:d4:
8c:b2:44:49:05:7b:e6:35:3b:2f:e5:6f:de:56:25:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:5E:A8:43:1E:EB:49:CC:DB:74:C4:8C:28:76:5C:5D:8A:EA:0C
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a0:d3:50:ad:65:55:d1:87:90:6d:ff:b2:4a:aa:a5:89:6e:
3d:0a:1d:e6:22:53:4a:9b:cb:63:b9:03:9a:c2:a8:a4:f2:5f:
03:c1:4e:85:c1:43:78:02:8a:a2:18:e9:2b:38:8f:de:ad:ab:
9f:d5:18:97:b7:d3:fb:a6:b8:b4:2e:73:55:e8:bb:b8:f2:ce:
1c:7b:be:96:e2:eb:aa:8c:1d:03:6e:19:c6:7b:0f:b1:b4:b3:
36:6b:9f:19:4f:52:67:06:61:5c:b9:05:10:28:6e:de:1e:2d:
d4:c3:c3:6d:13:ef:ef:a1:cd:2d:dd:90:31:1b:03:52:5a:b7:
15:2d:12:ca:3e:25:1a:d4:b5:ac:5f:89:fb:d1:fc:11:4a:5c:
3d:ae:10:22:fb:47:62:54:2b:ce:81:1c:80:3e:0d:2e:4b:07:
66:f3:77:6f:ed:bf:1d:1f:81:49:36:5d:63:bd:f1:4a:f9:a8:
db:61:29:2c:8d:b8:b2:ca:43:b7:cb:a7:9c:5a:08:15:4a:3e:
ab:60:88:a7:7d:7f:a1:ac:c8:ca:ad:bc:a6:fa:07:bb:2b:33:
9c:22:75:9f:e6:9d:3e:1b:49:14:eb:8f:75:2a:6c:33:74:39:
e9:77:c7:7b:85:4d:65:54:6a:ba:d9:14:b4:b8:f7:6f:5e:8b:
7a:32:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:25:31 2026 by rpki-client