
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: JfXcp1tsUMF85Ax7V8URcFCbK+HJmBH9fby54LDwaFw=
Subject key identifier: 4A:B2:52:F0:1E:A6:E3:E6:67:46:2F:86:24:E2:71:D1:3C:C2:91:E0
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 1402
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 1392
Signing time: Thu 04 Jun 2026 17:00:08 +0000
Manifest this update: Thu 04 Jun 2026 17:00:07 +0000
Manifest next update: Thu 11 Jun 2026 17:00:07 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: n3deswS0wZHmftmC+dcNNRVrsRz6oZRU0ylmrjCkfhk=)
2: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: 31BU6yJWqHhA4sXGAypLapVLGt+QVmmAJwmEmruaZZs=)
3: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: FC92AFK040EJiZt9ZtaMaDDZrQtuS6tBbe+7zz+A28Q=)
4: DEF977A6E53611EB81682769C4F9AE02.roa (hash: 9Sja777+/DI9LrVjRVVanRSsluaWikKPhk3fpx+cYC8=)
5: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: oYOOplUnMfrmcYH0EvPlN9Fyxk21VMxZW4LL32Y8NWs=)
6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: d9hXW1aA6CWn5i8mIcPw33T0SY+KBCLmc1Zny/WXhzw=)
7: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: 78wGwrTizm68dTrkWvVVi6mGKl9P3DBQ6n6sg9I/WNg=)
8: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: 5fzZmf2EzwvHfhYxlqlVnLdSiaTAki1ySlD4bT+lhHc=)
9: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: xM/qEhKiZE/P+8xxo9+lcn1uI0Cg5PPZ6z086ozbSEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5122 (0x1402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Jun 4 17:00:07 2026 GMT
Not After : Jun 11 17:00:07 2026 GMT
Subject: CN=6a21af18-1428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:d3:c4:df:27:50:35:22:d5:71:af:18:fd:
51:35:e7:c0:6f:cd:b9:ce:25:58:0b:e2:9f:04:8e:
e8:40:be:c4:48:14:db:07:5b:db:46:94:29:27:72:
db:ba:eb:a2:88:da:ba:d1:99:3d:38:a1:b4:82:79:
2d:d8:fa:1b:36:de:f4:f3:e7:ee:f9:79:cc:4c:b6:
b1:40:0a:9c:6a:84:8a:ea:85:0f:91:19:01:5d:a7:
43:41:3a:39:2c:b6:58:9d:05:9b:0b:77:a1:8b:65:
55:86:a9:94:a5:5c:53:b1:ed:b9:7b:a8:ef:6d:20:
91:c0:f1:c9:9d:1c:d9:29:ee:ad:82:50:18:87:a1:
03:18:36:04:74:cd:f3:5c:23:4f:f4:90:01:8f:ae:
77:0f:99:0b:de:e6:9d:44:9b:5e:e7:63:59:eb:26:
37:bd:71:ff:2d:ee:ad:4a:f9:5b:41:3c:4b:22:72:
65:58:db:26:29:b1:10:b3:03:78:69:db:e8:aa:f4:
1b:70:72:6c:f0:52:61:34:c9:92:b1:32:53:d1:84:
aa:a5:e7:ee:ef:c0:4f:c5:42:e0:72:e3:fe:17:53:
08:47:3e:1e:a2:f5:d5:70:78:ec:d4:41:8d:ee:58:
71:2d:b1:e9:59:33:fc:f0:ee:53:90:c3:2a:e2:94:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:52:F0:1E:A6:E3:E6:67:46:2F:86:24:E2:71:D1:3C:C2:91:E0
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:80:3b:06:d3:79:7b:c3:21:7e:fb:5f:5d:59:c7:b8:d3:
2d:65:02:79:8c:fd:6d:f9:73:39:d6:d9:54:e0:f8:bd:e9:8c:
b6:9d:ec:81:4c:24:ce:68:a0:ff:b5:e2:b4:81:ce:7d:e3:42:
24:cb:d8:5d:24:49:84:b9:40:34:64:be:c3:e8:4a:e7:5c:24:
ee:90:39:92:9a:cb:70:79:06:f5:0b:8d:d6:63:33:0f:b2:12:
de:0d:3f:ab:f4:fd:9f:13:35:bf:25:b2:6f:96:dd:23:d7:a4:
64:a7:33:60:a0:4b:e3:69:77:c5:ac:4e:72:9b:40:20:53:9c:
65:97:64:7a:f6:07:c1:9f:f8:69:20:4a:07:de:6b:3e:ed:47:
11:b1:f8:4d:26:1f:be:56:33:4f:3b:65:6d:48:17:00:1d:21:
56:9a:82:55:fd:63:20:86:71:00:5f:99:c5:fe:89:20:51:e4:
0d:c9:c7:b5:70:53:8a:96:54:e5:57:66:25:e0:c5:59:ed:ed:
6a:5a:b5:12:c4:fb:3c:55:17:6f:79:f0:45:6b:0a:bd:46:66:
02:2c:39:3f:00:16:3e:dc:47:b2:d7:f1:3b:54:09:cc:84:50:
f6:e7:e3:55:66:c7:54:21:13:12:83:ff:8c:59:e5:7c:f4:30:
f9:aa:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:35 2026 by rpki-client