
$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier: 1bFXSiVCIT/0gm9IuzLVyA4stMsjZiL8eRg0E+3io1I=
Subject key identifier: FD:83:AB:25:0A:36:E1:EA:76:B8:0F:3F:D7:65:64:62:12:F3:DB:F1
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number: 025D
Signing time: Thu 23 Jul 2026 03:22:31 +0000
Manifest this update: Thu 23 Jul 2026 03:22:30 +0000
Manifest next update: Thu 30 Jul 2026 03:22:30 +0000
Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: bR51C+SqVyJkaehZBgR07nA3oW4G+htrmOmzqRM/OGE=)
2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Validity
Not Before: Jul 23 03:22:30 2026 GMT
Not After : Jul 30 03:22:30 2026 GMT
Subject: CN=6a6188f7-db63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:21:19:30:ec:f2:dd:71:24:96:21:08:d0:
d7:08:64:a9:ac:76:19:7e:3b:c9:fd:93:3d:5c:91:
a2:62:aa:e8:7b:8b:c1:fa:f1:05:c7:d1:c2:67:66:
75:fb:42:db:d7:7d:82:80:8b:fd:2c:1b:bc:ff:f8:
f0:47:1f:fc:da:dd:e0:ce:00:28:92:1b:be:8d:b2:
b1:d1:16:81:54:93:1c:c8:ad:53:78:01:47:41:52:
24:0b:fe:af:5a:12:3f:54:d7:0c:b4:5a:62:13:03:
c4:65:82:06:2a:e9:5c:46:22:34:8c:2b:46:0c:4c:
cf:48:86:55:bb:01:58:15:9c:b0:83:cd:e1:37:e5:
6c:8d:b4:10:73:9d:9d:d5:e9:9d:57:0b:dd:b1:82:
64:a5:09:64:16:7c:44:f3:94:89:33:d6:e8:83:11:
5e:45:61:60:e4:93:14:a4:c3:73:b2:a9:9c:56:e3:
b1:e5:2f:37:79:f1:0b:0b:8c:7f:b0:fe:bc:56:7f:
66:0b:69:ac:a7:7c:99:d5:93:74:65:36:47:ea:f5:
8c:70:38:e3:f9:e2:40:cb:5b:73:10:f4:fd:50:2d:
de:11:ed:98:34:e1:7f:d0:c1:be:e6:33:e3:0e:51:
2d:ba:c4:30:d4:83:02:24:03:19:c2:e1:dc:48:ab:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:AB:25:0A:36:E1:EA:76:B8:0F:3F:D7:65:64:62:12:F3:DB:F1
X509v3 Authority Key Identifier:
keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:38:a0:3c:a8:37:a6:22:fd:a9:ae:54:a5:6e:67:7b:a2:50:
a8:7b:07:24:1b:7d:c2:f0:82:bc:37:49:87:f8:bc:40:f3:20:
7f:65:18:22:0b:9c:06:c4:d8:51:1e:5f:90:79:33:e5:c8:af:
99:ac:7e:ae:22:86:9e:15:e7:b1:14:e7:ee:0e:06:8d:5d:2a:
1b:62:e5:ad:49:c4:e9:3e:73:f0:ef:d8:ce:91:47:79:52:11:
77:12:ef:ab:c0:d7:20:20:ce:c9:55:9f:52:3f:59:fa:e5:c7:
aa:7e:c2:f2:bd:bd:1c:81:65:92:49:38:99:5e:6b:b3:98:42:
d1:6b:08:02:fc:b6:0f:f0:50:df:81:62:0d:66:ab:86:d6:ea:
36:67:47:f4:ee:2a:19:29:9a:00:24:59:53:c5:4e:91:2c:e1:
04:9b:2d:98:c0:63:8d:73:5a:b7:81:23:26:9a:8a:59:01:1c:
2c:cb:8c:81:01:91:a8:82:95:b4:fe:1b:93:90:9b:2e:54:55:
56:87:02:35:09:01:47:3f:63:d9:fe:98:38:33:3d:a0:43:08:
e2:c0:94:a4:84:f9:cc:6c:e4:de:31:6d:d1:37:ec:7e:a6:45:
1a:3b:17:16:d8:be:00:2c:13:14:91:47:6f:c9:98:43:06:b9:
a5:af:56:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2
QzQ2MEM4QzgwHhcNMjYwNzIzMDMyMjMwWhcNMjYwNzMwMDMyMjMwWjAYMRYwFAYD
VQQDEw02YTYxODhmNy1kYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqC4hGTDs8t1xJJYhCNDXCGSprHYZfjvJ/ZM9XJGiYqroe4vB+vEFx9HCZ2Z1
+0Lb132CgIv9LBu8//jwRx/82t3gzgAokhu+jbKx0RaBVJMcyK1TeAFHQVIkC/6v
WhI/VNcMtFpiEwPEZYIGKulcRiI0jCtGDEzPSIZVuwFYFZywg83hN+VsjbQQc52d
1emdVwvdsYJkpQlkFnxE85SJM9bogxFeRWFg5JMUpMNzsqmcVuOx5S83efELC4x/
sP68Vn9mC2msp3yZ1ZN0ZTZH6vWMcDjj+eJAy1tzEPT9UC3eEe2YNOF/0MG+5jPj
DlEtusQw1IMCJAMZwuHcSKttBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2DqyUK
NuHqdrgPP9dlZGIS89vxMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC
M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa
bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARjigPKg3piL9qa5UpW5ne6JQqHsHJBt9wvCCvDdJh/i8QPMgf2UYIgucBsTY
UR5fkHkz5civmax+riKGnhXnsRTn7g4GjV0qG2LlrUnE6T5z8O/YzpFHeVIRdxLv
q8DXICDOyVWfUj9Z+uXHqn7C8r29HIFlkkk4mV5rs5hC0WsIAvy2D/BQ34FiDWar
htbqNmdH9O4qGSmaACRZU8VOkSzhBJstmMBjjXNat4EjJpqKWQEcLMuMgQGRqIKV
tP4bk5CbLlRVVocCNQkBRz9j2f6YODM9oEMI4sCUpIT5zGzk3jFt0TfsfqZFGjsX
Fti+ACwTFJFHb8mYQwa5pa9Wyw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:01 2026 by rpki-client