
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json)
Hash identifier: 9b7j3qnqFRwSBLqETrqjUh0Vz65tEORdz6Mp1qi/Dtk=
Subject key identifier: 93:B0:62:37:04:C8:D0:D2:F9:58:C9:77:95:10:A7:45:AB:B7:1B:EA
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
Manifest number: 0171
Signing time: Thu 23 Jul 2026 06:16:00 +0000
Manifest this update: Thu 23 Jul 2026 06:15:59 +0000
Manifest next update: Thu 30 Jul 2026 06:15:59 +0000
Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: effK9JTgsmZzG1QblTe/izWJX4JmefPHh/AgQmTam1M=)
2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: kiewIghlA3eSE6JqoPitcKxULZmtrJbpqxq8AfoM0zA=)
3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: IiOfuavzgr4udhdI2026QD5t6vsu21nW0i15GhoklvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Validity
Not Before: Jul 23 06:15:59 2026 GMT
Not After : Jul 30 06:15:59 2026 GMT
Subject: CN=6a61b1a0-ab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:8e:e2:95:e2:92:13:f5:51:30:f9:cc:fa:
43:c5:c2:be:d3:76:e7:8f:ef:8c:ab:d8:0e:d6:db:
6e:aa:16:49:05:36:5f:2e:af:0c:62:b1:1b:17:97:
94:7e:c5:4f:74:71:38:f8:04:d0:6b:fc:f7:a0:a8:
a9:b7:9d:76:81:7c:2b:08:7d:ca:7d:a0:b8:aa:f6:
23:58:c6:b1:0d:4f:98:65:5e:9b:92:27:5b:ef:2c:
25:9d:81:67:1b:d8:c2:85:a8:ea:fb:6e:ed:fc:62:
c2:5e:b1:d0:22:29:87:0d:77:bd:c6:d8:da:89:e9:
07:63:73:da:ef:b1:9d:9d:87:12:e3:28:c8:08:42:
0c:fb:54:5a:9e:72:36:c7:da:07:6f:e8:22:95:a1:
b6:0e:30:c8:67:e6:3d:99:17:3f:60:dd:5b:4b:7f:
78:78:5b:0f:2e:9f:02:ec:79:1b:7a:9d:17:44:68:
22:2d:ef:7d:e4:3b:42:93:06:f0:4e:89:56:b8:d1:
41:8d:b2:86:6c:32:15:5a:54:f4:b9:8f:86:14:28:
7f:c5:99:4b:87:5f:18:aa:15:0c:62:65:b5:42:1d:
2b:8a:f8:87:d4:ac:04:cf:b2:39:5d:76:7a:45:3d:
b9:fa:69:1e:4e:e0:1f:4f:ed:49:10:37:c2:1a:87:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:62:37:04:C8:D0:D2:F9:58:C9:77:95:10:A7:45:AB:B7:1B:EA
X509v3 Authority Key Identifier:
keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:13:b1:c4:d6:50:0a:62:d8:c3:a2:23:d1:5c:6a:e0:fb:
97:3a:1c:8a:39:f7:9f:73:01:11:cf:9f:db:83:6e:44:73:7f:
04:04:2c:23:1a:17:fa:72:d7:37:f9:63:6f:6e:39:2d:02:bf:
f8:43:d9:2a:2b:33:a9:ee:a4:4c:60:1a:0d:ef:26:41:e1:c2:
5c:5d:7b:3b:c4:e9:50:e2:89:2d:b5:ac:cd:44:29:c9:33:4b:
e1:49:7f:47:5b:25:1c:59:8a:30:8d:75:99:81:79:60:e5:12:
9f:89:79:d7:55:a8:ae:59:1c:5f:fc:90:c3:37:8e:2a:e4:98:
b7:f5:4b:37:84:39:1c:97:ef:39:b7:f3:f2:3a:62:10:31:e4:
b2:5d:9c:7a:01:a2:cc:85:91:2c:a5:cb:27:63:fe:c9:06:d0:
78:7a:ab:b8:0c:9a:94:37:e6:c6:6c:26:48:7f:73:8a:b7:1d:
4b:1f:d6:1d:86:71:81:48:45:c1:6a:a8:2a:a7:39:9e:6d:76:
df:c0:7b:df:83:d4:e0:2a:a0:ae:29:d8:af:8d:36:12:c9:1a:
4f:bb:0f:a7:41:57:b6:40:0f:7d:a9:16:05:42:e9:bb:2d:bd:
9d:99:7f:37:8e:4c:bf:80:29:ad:5c:be:01:fd:06:d6:76:21:
8e:1c:00:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:20 2026 by rpki-client