
$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier: /g+A+zJSUz6Zy6hs1JoSYg8U/eDUnb96DrzfzOkJ3+Y=
Subject key identifier: BF:7E:AA:E2:0A:5E:A4:F8:16:6E:9E:00:F5:B5:D2:C8:BD:6E:A5:7B
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial: 0348
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number: 0341
Signing time: Wed 25 Mar 2026 00:38:55 +0000
Manifest this update: Wed 25 Mar 2026 00:38:55 +0000
Manifest next update: Wed 01 Apr 2026 00:38:55 +0000
Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: XNBOtZ4rwr2+7/BgSBi/Xmm74PP3uOR89cNcKeLL7jw=)
2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Validity
Not Before: Mar 25 00:38:55 2026 GMT
Not After : Apr 1 00:38:55 2026 GMT
Subject: CN=69c32e9f-5145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:93:21:e2:5b:42:cd:d6:b5:66:53:64:92:
44:6c:a9:d2:4a:3d:72:32:c3:20:81:d7:01:fd:73:
11:c0:eb:a7:4f:6e:c8:7b:3b:cb:9e:ca:d9:16:c3:
33:e9:11:f0:ca:12:8e:94:a3:63:ab:92:58:6d:01:
20:28:15:4f:ce:b7:93:65:13:8f:08:36:56:6d:a0:
a7:55:c4:06:19:0f:06:5d:bf:e7:65:71:b1:f9:1a:
1a:31:dd:94:29:00:26:5a:67:46:6e:85:ef:67:98:
89:bb:f7:80:37:35:c9:bd:33:30:40:76:09:38:2e:
2d:ff:e8:89:ce:e6:b8:a2:51:2e:fb:c7:85:f3:59:
32:a7:aa:2c:5e:21:73:27:c9:7c:c2:2f:63:f9:b0:
d3:97:4c:72:33:c7:62:5b:d8:bb:41:9d:40:be:da:
6a:cb:64:10:f5:76:fe:24:92:fe:cc:60:00:cb:49:
f0:b8:79:fa:d7:e8:59:04:86:1f:43:1b:df:ca:32:
c7:19:d7:e8:56:17:0d:bc:c6:ed:b1:50:f0:51:ef:
4f:37:a0:23:b4:c1:ca:22:b2:1b:c5:81:de:88:c7:
02:ae:99:f3:cd:1e:dd:b0:62:6e:1c:2f:53:26:e3:
19:55:59:05:a9:80:6e:73:2b:1b:70:5c:10:51:35:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:AA:E2:0A:5E:A4:F8:16:6E:9E:00:F5:B5:D2:C8:BD:6E:A5:7B
X509v3 Authority Key Identifier:
keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d0:a9:df:ad:e2:7f:6f:14:a2:1d:f9:6a:1f:18:cb:dc:62:
9d:70:bd:a2:b2:74:de:30:cb:04:e0:4e:24:55:2f:50:84:0a:
9d:7e:cd:cc:4b:7c:6e:54:66:a0:f1:51:fc:ac:84:5f:1b:ad:
c2:49:b7:a6:0c:2c:17:c3:08:84:9e:84:00:1d:50:ed:75:02:
b6:08:3d:f4:7c:89:6e:2b:ff:7c:bc:41:de:72:26:96:87:b5:
90:3a:72:9f:48:38:17:3f:63:b8:bb:bf:08:80:2c:b1:87:08:
c3:d4:5f:a2:47:e0:56:1f:f5:60:ff:e1:59:5d:8f:4e:70:f1:
e4:ac:d3:bd:b4:21:fa:2e:a6:c7:a4:e5:9f:29:21:27:e0:ae:
b1:7e:5c:b3:ad:66:a8:0c:dd:36:3c:b5:35:a2:7b:90:5d:2a:
60:11:0e:87:4a:13:6b:1e:df:41:6e:e3:ff:bf:a4:c9:fb:36:
03:ee:76:9f:81:87:2b:5e:db:6d:3b:91:59:fe:fe:ff:f5:68:
db:98:dc:4e:ca:85:05:fc:15:62:b5:3e:78:6f:3b:27:56:de:
f1:db:f4:82:4c:ad:b0:43:2b:79:8c:11:a9:42:4a:7f:90:04:
f8:53:f7:a7:3d:e9:fb:91:82:8e:f2:89:20:7e:87:3b:80:f4:
f0:66:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:39 2026 by rpki-client