
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json)
Hash identifier: 7E1F2RdqJ1Lg9QI64oBWO/43OMb066KqcCMiw7hjJZQ=
Subject key identifier: B0:A0:59:AD:9C:2C:F1:79:BC:98:4D:C6:BF:BA:D8:42:39:D8:80:20
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
Manifest number: 014E
Signing time: Wed 13 May 2026 05:12:23 +0000
Manifest this update: Wed 13 May 2026 05:12:23 +0000
Manifest next update: Wed 20 May 2026 05:12:23 +0000
Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: M+xJic6P/Wt6VyPY+6TW3UKuh9vXRQCQ+tr2i8Nm05I=)
2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: kiewIghlA3eSE6JqoPitcKxULZmtrJbpqxq8AfoM0zA=)
3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: IiOfuavzgr4udhdI2026QD5t6vsu21nW0i15GhoklvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Validity
Not Before: May 13 05:12:23 2026 GMT
Not After : May 20 05:12:23 2026 GMT
Subject: CN=6a040837-ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:10:3d:8f:68:e8:37:f8:f1:f1:f1:dd:e3:
83:1c:b6:88:dc:b9:ec:51:18:b8:e6:c1:7a:72:64:
09:64:2d:e7:5c:f3:02:8e:b8:af:65:d8:fd:62:3e:
8f:bb:1e:0e:27:07:d6:e3:54:07:50:5d:19:43:60:
fc:d4:ed:11:63:8d:75:0a:19:7a:00:4f:64:80:e7:
e3:5b:e0:05:46:95:36:3f:c5:57:22:f7:2b:8e:e0:
01:7f:ec:aa:e5:65:dd:df:12:cd:14:9c:00:a4:52:
25:3b:0b:07:08:c0:55:45:ee:0a:e9:bd:b4:ed:b3:
e1:b8:6f:2f:1c:c6:9b:89:70:25:26:8a:04:b7:a0:
c2:6c:2e:01:0e:f1:7d:aa:40:4d:1f:2c:4b:19:7f:
25:ad:3f:93:f6:54:d2:47:1a:92:5c:ae:74:57:a4:
0a:0c:dd:bf:22:6f:96:bb:3a:58:fb:92:e1:90:da:
09:7c:75:1a:aa:23:ff:e5:cb:15:b4:e2:69:24:68:
d9:6f:ee:bf:21:12:7a:51:0a:43:62:86:ca:13:55:
d9:44:1f:20:7f:01:58:86:6d:1f:b0:61:fc:d2:8b:
8a:89:54:54:15:83:09:fd:11:9c:0d:e5:98:1a:6f:
03:4b:0e:8b:bb:35:79:bd:1a:3f:2a:f1:4e:a2:56:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A0:59:AD:9C:2C:F1:79:BC:98:4D:C6:BF:BA:D8:42:39:D8:80:20
X509v3 Authority Key Identifier:
keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6d:dd:7f:18:e5:2c:68:52:b2:31:c4:9b:b6:63:9c:0d:c9:
fa:ad:4b:1c:96:13:bf:c1:07:26:9b:df:ca:5b:8d:fb:28:30:
27:5c:4d:d8:4e:a1:33:35:45:aa:e8:b2:ef:35:b8:9c:9b:72:
61:d6:5c:a9:1a:05:b0:1a:2b:3d:2d:f4:c5:15:bd:25:47:c8:
07:c9:4c:44:3b:93:c1:10:98:cc:2e:a1:2c:62:2b:8e:4e:7a:
ee:5c:1b:c1:c2:0b:cb:c0:26:9a:3b:50:00:b6:65:f0:1d:39:
ac:e8:82:92:7b:52:25:3d:22:91:cf:52:ad:ab:8b:75:81:80:
b9:49:e7:9c:03:50:d6:07:39:5a:bd:f2:dd:bb:62:b0:b5:c0:
06:34:9f:1c:c9:d4:97:f3:ad:39:ca:94:1d:c4:6b:de:de:b9:
ba:a6:bb:3b:de:27:df:01:5f:ef:24:42:cd:02:b7:1f:6d:02:
a0:a0:fe:58:49:19:3b:ce:74:fc:9a:cd:13:dd:c4:ca:b0:bd:
5b:32:ad:38:f2:96:ba:3d:53:b2:ef:c3:58:27:a7:b9:71:16:
e8:50:84:80:a1:9b:d7:07:52:6a:5a:01:c6:cb:84:21:3f:ee:
e6:18:2c:c2:34:61:53:d4:e6:82:4a:f2:ed:d8:c5:f5:6c:40:
35:f5:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:18 2026 by rpki-client