
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier: pHZxzHReLjPXMDnCOHX+zVu5mQz9UO0qskq5e1ol4DM=
Subject key identifier: 0A:9A:E0:74:2C:D7:31:13:CE:18:D5:15:63:7C:50:3B:D0:6D:87:E7
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 060A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number: 05E4
Signing time: Thu 12 Mar 2026 22:38:27 +0000
Manifest this update: Thu 12 Mar 2026 22:38:26 +0000
Manifest next update: Thu 19 Mar 2026 22:38:26 +0000
Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: NyxwNzEV8Z96pCqXpGeDklTsNlmdSsiLFS9QA/oGWTs=)
2: C41221884B6011F092B79129C4F9AE02.roa (hash: yoHJyz0yzJ4YEb6A+CcIpp3EhYT5/ZPAYDAwC5c4zpY=)
3: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=)
4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Mar 12 22:38:26 2026 GMT
Not After : Mar 19 22:38:26 2026 GMT
Subject: CN=69b34062-2c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:06:09:b4:4d:a2:8b:c5:be:f9:fc:13:6c:
92:3f:99:81:43:cc:ff:44:ea:9c:a9:86:28:11:ae:
07:82:4d:4b:94:40:79:1a:cb:11:9e:f3:13:ea:5c:
53:d8:f4:3e:58:8a:f3:be:1b:98:23:cc:17:3c:47:
ae:ba:d7:a2:c4:18:2b:bb:5c:23:05:83:50:90:43:
3d:bc:d6:ec:89:ff:09:07:53:08:a2:da:d7:88:cc:
f7:5b:fe:bc:6c:58:88:1c:1e:07:b7:d6:89:98:ac:
b5:bf:cd:60:e9:22:54:f0:aa:f0:c6:f1:fc:df:f3:
cb:22:54:29:03:1d:d6:5f:9f:22:44:9a:cb:a0:fd:
93:e6:4c:27:75:9a:a6:15:40:c8:13:94:ed:3b:58:
14:cc:8b:01:49:fd:2d:e7:b9:76:c6:1d:0a:95:5a:
9f:ec:50:c7:83:62:5b:aa:c7:ee:4d:f1:1c:de:1d:
b8:97:bc:1d:28:46:3c:4c:e7:32:44:42:fc:76:18:
09:62:5b:c9:18:76:3f:0f:4d:54:f9:cd:72:01:61:
1d:e6:e5:1d:53:44:2c:80:fe:27:02:cf:e8:da:d1:
4e:fd:f0:cf:5f:63:90:27:61:04:91:2c:9b:42:af:
52:4a:63:79:ac:39:b0:4a:09:1a:d4:98:5f:6d:32:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:E0:74:2C:D7:31:13:CE:18:D5:15:63:7C:50:3B:D0:6D:87:E7
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ab:3b:d1:5a:ae:d5:e0:15:c4:37:97:77:77:be:2a:bc:e2:
b4:54:fe:9f:d8:0d:0f:23:f8:38:0c:7a:19:81:f5:c9:91:45:
d2:a9:97:0f:90:f7:ba:6b:d5:75:16:80:96:67:dc:61:78:25:
a9:d5:af:17:29:9d:9a:78:ec:ef:a7:c4:b1:64:63:73:27:5a:
85:07:e1:f3:c7:15:fd:d2:05:d0:76:1a:81:9b:e3:f7:39:49:
04:ec:5f:1d:8b:76:40:e7:ce:cd:88:00:42:00:81:f5:ec:2c:
e4:c6:38:a0:e2:3f:d7:f6:9e:e6:3e:76:d9:b3:90:23:44:c1:
2a:7b:cb:cf:c5:a4:3e:91:d8:6a:c4:f8:da:3e:06:d5:ef:5a:
67:2a:46:a5:de:56:ab:73:72:68:08:f5:e6:ec:51:0b:fc:98:
22:c0:35:d2:f8:eb:f3:8a:ec:a9:f1:1a:b0:26:b0:60:bf:91:
de:8f:ef:40:1d:21:8a:56:31:fb:42:a2:ae:ff:af:dc:4f:aa:
79:39:e5:a3:7d:4a:c5:90:96:e8:c2:cd:9c:0b:84:ba:d6:a7:
1f:1d:b6:0d:3c:a6:03:28:64:6b:9f:a0:b7:7d:bb:e5:9c:5e:
a1:96:3c:fd:b0:e6:c3:00:2c:13:b7:69:d2:7a:98:53:b7:f6:
1b:69:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:55:47 2026 by rpki-client