
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier: Z2/w2afShjLZcFiq6zZsBqgkUqv9AnN1K0+va8O3wlE=
Subject key identifier: 45:17:2E:34:8F:64:AC:5B:3E:52:DD:92:10:13:34:03:3F:75:F8:50
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 066B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number: 0644
Signing time: Thu 10 Sep 2026 22:38:48 +0000
Manifest this update: Thu 10 Sep 2026 22:38:48 +0000
Manifest next update: Thu 17 Sep 2026 22:38:48 +0000
Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: myrQ/myLC6UXluZiex8O4YhMs6s6LMMZzmkcxqrln5g=)
2: 928880FE8B0F11F182DCACFD3211F970.roa (hash: 97DMfE8QWEUEG5Cfx4YrvAURPmPn7eR9nJeGo/mBqD0=)
3: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=)
4: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Sep 10 22:38:48 2026 GMT
Not After : Sep 17 22:38:48 2026 GMT
Subject: CN=6aa33178-8d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:52:b1:f0:7e:7a:bf:ca:5f:39:14:8b:a8:
72:2a:aa:f1:c5:75:ce:bc:17:6e:73:6e:ae:ed:66:
49:e2:53:fa:03:c8:7e:53:14:23:a3:41:3e:f2:c9:
54:24:5f:57:7f:8e:e2:a8:5e:3c:3c:d1:f3:17:a3:
0f:ac:a3:fb:05:7c:25:8a:b2:35:19:6c:d4:8f:31:
33:15:12:a7:be:dc:7b:43:05:79:c3:9e:8d:fd:de:
1f:93:32:73:ac:7c:a4:30:18:cb:af:88:a4:2f:e2:
2f:b9:d2:05:57:dc:8b:9d:d5:e1:be:cd:5c:6c:74:
0f:88:a9:f3:89:f4:5f:58:7b:aa:ef:44:cb:74:6a:
6b:93:2d:53:ab:7d:76:47:d9:26:15:95:da:c4:12:
5e:cf:21:bb:98:b3:b9:05:c1:af:3c:90:01:f2:05:
e1:40:03:b9:20:a3:e2:e8:19:b7:4a:0c:6b:89:44:
5e:3d:04:10:bb:8a:28:f4:5c:6b:86:16:39:44:48:
4d:73:28:fd:3a:89:e6:81:b9:47:22:48:1e:e2:4d:
94:2a:95:8a:ed:75:7c:12:68:ce:1f:e2:77:9f:22:
80:63:56:3e:06:fd:de:3e:df:9c:e6:60:28:63:9c:
c1:ac:79:65:03:6b:33:00:34:59:c5:ff:11:36:ba:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:2E:34:8F:64:AC:5B:3E:52:DD:92:10:13:34:03:3F:75:F8:50
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:39:3e:41:a9:0c:1f:13:ed:99:92:b9:37:7f:b6:31:4b:
4c:a1:5d:b2:72:30:59:2d:7a:da:f6:ef:ca:f6:f5:74:14:19:
19:9a:54:69:60:9e:22:23:90:64:af:ec:69:e6:04:3e:31:6f:
9d:99:df:1b:dd:4a:87:44:f7:7a:e1:20:c7:ac:cc:d2:7b:34:
b8:75:4d:58:04:c8:83:a9:ab:be:4d:d7:f1:03:9c:b0:16:27:
ef:35:e7:1e:59:d9:a4:43:c5:f9:44:ff:e6:e3:49:ea:d8:64:
27:50:3c:3f:c7:24:fb:c1:26:72:a2:21:f8:8a:5b:4e:29:71:
5e:a6:39:7d:73:13:67:c1:32:ef:7f:da:77:4d:6f:b9:70:dd:
4f:26:a8:8e:55:ab:92:a8:bd:2e:23:59:7a:fd:44:d8:d0:a4:
1e:82:fb:d3:88:28:cd:85:8f:ca:6a:6a:f5:df:73:2a:d3:2d:
2a:54:e0:1f:69:8b:ab:b6:83:fa:ce:ea:2f:ba:a8:ac:40:b7:
40:94:2a:f9:af:81:de:35:ea:46:f8:23:f5:81:e4:6d:3d:7d:
21:a3:4c:f3:42:32:a4:60:60:99:ac:63:29:d1:2e:dd:13:a5:
9f:9d:39:29:57:33:e0:7a:31:f7:41:3a:92:44:67:ba:cc:01:
49:dd:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:40:10 2026 by rpki-client