
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File: Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier: 14e4s1AHE4LhwY3KPIZxVM9ulzrqzuw/GJ4aau5UaN4=
Subject key identifier: 25:DA:D0:98:FF:B9:D7:D4:90:4F:55:91:DF:71:67:FF:0B:F2:7E:76
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number: 50
Signing time: Fri 03 Jul 2026 09:14:43 +0000
Manifest this update: Fri 03 Jul 2026 09:14:42 +0000
Manifest next update: Fri 10 Jul 2026 09:14:42 +0000
Files and hashes: 1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: dBMgPmrlrhFbkVw1olaATSZLljePKBpODhYQF8LTB8w=)
2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: 74mwc9LQpW/L2dkBvxUUTHTqTkYyfx6a6uTfz8A4a5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 09:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Validity
Not Before: Jul 3 09:14:42 2026 GMT
Not After : Jul 10 09:14:42 2026 GMT
Subject: CN=6a477d83-8ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:a8:7b:24:66:a3:11:ab:1d:60:b9:91:c4:
38:82:aa:bd:b0:85:d9:17:67:1b:67:49:55:1d:14:
4a:cc:42:5b:13:7c:2c:2a:9d:a0:18:26:8f:12:d2:
5b:0a:34:fb:bd:29:16:5b:13:c5:d0:1d:fd:1d:99:
32:02:8c:ef:22:62:0e:ff:84:26:20:58:3a:d5:33:
29:81:84:a4:2f:d2:e0:1b:ea:d0:a0:92:91:a8:cf:
b4:86:7c:a2:71:ac:3a:64:25:f7:6d:00:85:5b:57:
75:d4:f6:cf:1d:3e:03:f7:79:f2:36:26:69:1b:12:
46:4c:0c:d3:d4:52:96:bc:b1:b6:5a:6e:d4:0a:43:
d4:4e:61:a2:2f:e2:b4:c3:67:2d:7e:32:b8:5b:70:
e8:90:d4:c4:e7:04:31:82:dc:eb:01:ae:23:3b:63:
45:5a:d1:a5:a3:e0:cc:7c:a8:7c:76:0f:97:22:b3:
44:af:e0:70:98:cb:d6:b6:db:f7:2f:82:2e:08:72:
cf:d1:0b:d6:66:0f:64:04:39:12:38:50:6d:f0:af:
94:77:0c:de:ad:2b:4c:18:b9:f1:2d:ba:b6:84:c5:
a5:fc:8c:7d:ea:fb:b2:61:35:34:61:10:4b:cb:1f:
08:6f:57:cb:8c:f3:75:cb:e0:2f:05:4a:f9:02:73:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:D0:98:FF:B9:D7:D4:90:4F:55:91:DF:71:67:FF:0B:F2:7E:76
X509v3 Authority Key Identifier:
keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:2c:78:3c:4f:0a:65:fd:97:99:03:c5:9d:d1:52:04:33:13:
9a:c2:b8:12:97:5a:b7:67:f6:ce:2f:01:63:59:2b:76:04:b5:
3d:66:fe:0f:ca:c8:76:01:ec:d7:a5:84:d6:35:ce:01:51:9a:
a2:aa:99:c3:bb:89:7b:5d:65:30:22:9c:df:e7:4e:14:40:63:
12:cf:59:f7:21:fe:f0:7c:01:89:9a:a2:18:b8:73:5d:df:9b:
e8:ba:38:be:ec:49:d7:80:ad:6d:e1:62:7e:dd:6d:a9:27:8b:
1f:4f:31:25:ed:e9:35:de:15:fb:b0:5c:40:3e:ce:a4:fd:41:
2b:0f:4c:c8:8f:13:a6:3a:a7:0f:92:18:21:c5:53:65:2a:4c:
a7:fa:3e:2b:ec:30:f1:3a:0b:6a:47:f2:8a:69:cf:54:5b:95:
c3:d7:80:08:8f:41:e5:be:6c:6e:b4:af:a5:87:02:5a:95:20:
29:c4:07:75:dc:fe:90:e5:d0:62:71:4a:a5:14:fc:38:6d:91:
69:9c:2d:0c:ea:df:29:7d:52:6f:fa:c8:01:bf:d8:1a:b7:2c:
34:20:cd:ef:9b:72:21:21:f0:52:a8:09:d3:10:86:e0:ed:f0:
79:15:a4:ad:d7:43:57:b4:41:15:c9:0f:18:a1:4d:4a:a9:46:
86:cd:42:60
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
Qzk4QjExMC8GA1UEBRMoMEFGRTJCMjBBREU2QjlDMzBCOEIxODExRDE1RjFEMEQ1
NzRERTNERTAeFw0yNjA3MDMwOTE0NDJaFw0yNjA3MTAwOTE0NDJaMBgxFjAUBgNV
BAMTDTZhNDc3ZDgzLThjY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3Aah7JGajEasdYLmRxDiCqr2whdkXZxtnSVUdFErMQlsTfCwqnaAYJo8S0lsK
NPu9KRZbE8XQHf0dmTICjO8iYg7/hCYgWDrVMymBhKQv0uAb6tCgkpGoz7SGfKJx
rDpkJfdtAIVbV3XU9s8dPgP3efI2JmkbEkZMDNPUUpa8sbZabtQKQ9ROYaIv4rTD
Zy1+MrhbcOiQ1MTnBDGC3OsBriM7Y0Va0aWj4Mx8qHx2D5cis0Sv4HCYy9a22/cv
gi4Ics/RC9ZmD2QEORI4UG3wr5R3DN6tK0wYufEturaExaX8jH3q+7JhNTRhEEvL
HwhvV8uM83XL4C8FSvkCc7F1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJdrQmP+5
19SQT1WR33Fn/wvyfnYwHwYDVR0jBBgwFoAUCv4rIK3mucMLixgR0V8dDVdN494w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOThCLzc0MTA3Q0VFMDM2
NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNNTGl4Z1IwVjhkRFZkTjQ5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ3Y0cklLM211Y01MaXhnUjBWOGREVmRONDk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD
OThCLzc0MTA3Q0VFMDM2NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNN
TGl4Z1IwVjhkRFZkTjQ5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpLHg8Twpl/ZeZA8Wd0VIEMxOawrgSl1q3Z/bOLwFjWSt2BLU9Zv4Pysh2AezX
pYTWNc4BUZqiqpnDu4l7XWUwIpzf504UQGMSz1n3If7wfAGJmqIYuHNd35vouji+
7EnXgK1t4WJ+3W2pJ4sfTzEl7ek13hX7sFxAPs6k/UErD0zIjxOmOqcPkhghxVNl
Kkyn+j4r7DDxOgtqR/KKac9UW5XD14AIj0HlvmxutK+lhwJalSApxAd13P6Q5dBi
cUqlFPw4bZFpnC0M6t8pfVJv+sgBv9gatyw0IM3vm3IhIfBSqAnTEIbg7fB5FaSt
10NXtEEVyQ8YoU1KqUaGzUJg
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:53:50 2026 by rpki-client