
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier: 9B2Bi1wbhpSLxwLnivq0iDMVbYKFP+i3RzO4beoKSVg=
Subject key identifier: 38:EC:C4:C4:FA:B3:E5:2D:1F:98:E9:08:0D:80:1A:FA:CE:6D:ED:2F
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer: /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number: 99
Signing time: Fri 17 Jul 2026 08:34:31 +0000
Manifest this update: Fri 17 Jul 2026 08:34:30 +0000
Manifest next update: Fri 24 Jul 2026 08:34:30 +0000
Files and hashes: 1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: v56g46OvMduORESpzt5a0uJpWRIZ4AY4AQxVzKMpHO8=)
2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: o62XZo2Qz1zImJWSvpxTK0mWq5l9UluAleNSitVqKg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Validity
Not Before: Jul 17 08:34:30 2026 GMT
Not After : Jul 24 08:34:30 2026 GMT
Subject: CN=6a59e917-d36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:e7:2b:2c:8b:c2:33:27:55:c1:ed:31:89:
a5:c7:86:df:4c:a4:fe:1b:8e:55:70:44:94:f0:b1:
4b:b2:06:f9:f8:ac:44:4b:bf:4a:ad:d4:dd:47:11:
1e:e3:1e:a1:82:0f:96:90:f3:0d:74:9e:2d:ec:2d:
82:db:1d:66:c1:34:8f:29:7e:7a:2b:1f:60:3b:0e:
32:24:0c:97:4e:2a:db:b3:27:e8:2e:f5:d3:1f:dd:
d3:fe:2f:0b:ea:d0:7c:55:c8:75:76:18:2b:d3:9e:
a7:72:e0:e5:83:1d:d0:b7:3e:d7:3d:fc:a6:10:ea:
91:ba:38:28:7f:90:9a:a5:e9:de:bf:4b:43:11:24:
0b:40:67:8c:9b:33:e5:c7:ed:43:c3:96:d7:4e:f9:
6d:97:87:b7:90:67:f5:97:1a:8a:22:05:02:56:d4:
8c:33:48:e5:79:08:3e:7b:ed:e8:28:1c:91:f3:75:
6a:1d:00:0c:d9:a8:46:59:84:4a:4e:68:25:01:28:
83:56:b9:8d:18:c4:d8:cf:68:ac:d2:7f:2c:ec:9d:
03:39:8c:fd:17:ab:56:84:55:fa:28:b7:5f:6f:44:
e1:96:40:01:0c:4f:e3:19:77:bd:64:3a:72:6c:9b:
aa:dc:6b:34:ad:73:85:12:d4:09:5f:60:4b:93:f1:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:C4:C4:FA:B3:E5:2D:1F:98:E9:08:0D:80:1A:FA:CE:6D:ED:2F
X509v3 Authority Key Identifier:
keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b5:ca:67:0b:3b:d0:ff:bf:80:37:fd:15:7b:90:67:25:de:
6a:ed:42:a6:34:a7:ac:a2:66:d6:7e:b5:58:ee:6e:f3:ce:01:
b2:9a:b8:8c:99:3e:49:86:00:75:8a:c8:9a:14:9b:76:6a:c8:
a7:db:63:a5:cc:13:40:a4:75:71:c6:36:45:f1:39:c0:57:90:
9e:cc:64:4a:cc:cc:c8:86:9e:4e:ba:b2:84:db:82:92:e8:ca:
7e:b8:a2:a2:24:fb:0a:11:92:78:3f:03:e4:e3:e4:27:f5:8f:
5d:1d:76:03:3f:58:98:52:9b:67:9a:e2:aa:2f:e0:20:37:6b:
62:42:04:dc:41:f2:90:c1:73:91:58:7e:d3:c5:83:28:ff:e0:
d9:b1:b3:bc:8d:3a:74:31:73:f0:55:40:cf:6a:30:07:f0:c4:
07:13:61:37:de:ad:24:c9:71:24:cc:77:d7:be:df:93:cd:5f:
62:8d:1f:23:5e:34:0e:2e:12:fc:1b:3b:0b:5d:a4:50:bc:14:
9e:c4:90:54:c9:c4:65:28:0f:27:22:19:73:fb:bf:86:13:f4:
18:1b:59:4a:1a:11:99:6d:90:1f:5e:53:66:5c:47:7e:94:4c:
bf:77:1d:98:2d:b2:cc:6c:7d:d8:36:81:7a:32:38:45:6b:95:
8c:e0:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:23 2026 by rpki-client