
$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier: /A+stU770HICrUWm+ANLShoEQCt6JV1TOHc3MV+Eu1w=
Subject key identifier: CE:14:E4:2C:1A:AB:D7:78:D5:57:F7:EA:11:36:46:44:5B:09:6F:23
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number: 026D
Signing time: Thu 23 Jul 2026 03:14:31 +0000
Manifest this update: Thu 23 Jul 2026 03:14:30 +0000
Manifest next update: Thu 30 Jul 2026 03:14:30 +0000
Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: rl4yPar20hMJkGgqsbVn6qRYyEornH7+NtyU1SEIbBM=)
2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: XRam2F4FC1VRB1bzeJbTRlXhvSOCTuW1Ti0TuLeUucE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Validity
Not Before: Jul 23 03:14:30 2026 GMT
Not After : Jul 30 03:14:30 2026 GMT
Subject: CN=6a618717-bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:18:26:aa:4f:c9:65:52:72:c0:24:9a:b5:
ac:5f:22:5b:0e:39:33:8f:ad:9d:87:3c:11:3a:84:
35:2f:d8:0e:65:1f:a3:16:1a:3f:4d:33:43:89:00:
58:48:03:e0:cb:4f:d8:b0:53:85:3c:3a:61:1b:d7:
8f:a1:ec:57:fc:c2:0b:0c:79:58:11:2c:9f:8c:3a:
12:f2:02:c6:16:70:d3:f8:06:03:ec:cf:d9:e5:a7:
e1:1d:b1:65:eb:4c:0c:1b:96:ad:16:76:67:e3:c0:
c9:85:27:06:a9:8f:3f:56:59:f9:ed:20:12:82:54:
58:08:69:1c:80:af:8f:28:75:fe:49:fa:0d:cb:c2:
9a:3d:f5:b1:a1:b2:05:bd:92:15:f0:76:42:0c:d1:
fa:6e:3f:74:53:a7:6f:fa:d3:9d:32:d9:62:5e:17:
e4:ca:b0:19:b8:3b:b7:dc:c8:3b:7c:a4:c4:7a:1b:
ed:8b:4e:69:ca:ee:84:16:71:4b:0d:18:1a:57:eb:
1a:e4:63:3b:f2:69:11:cc:db:f0:65:ac:56:99:96:
a7:12:50:34:eb:fc:34:15:76:3b:ce:e6:0e:9b:0c:
e6:f4:31:5b:97:c4:40:bb:b8:66:5b:d7:cf:e3:8b:
62:4e:41:31:58:98:35:48:99:38:bd:01:59:3a:65:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:E4:2C:1A:AB:D7:78:D5:57:F7:EA:11:36:46:44:5B:09:6F:23
X509v3 Authority Key Identifier:
keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b8:8f:82:8e:c3:6f:01:a0:48:ea:fa:40:72:f9:15:64:ab:
5e:30:8f:3a:3b:e0:72:be:d3:43:84:fb:ae:89:f1:7e:3d:8b:
74:37:36:69:e5:d1:f6:2b:cc:e1:0e:f0:da:19:96:bf:a8:6c:
96:04:6b:6c:04:09:60:06:b1:c6:8e:f4:b9:64:4e:06:9e:a9:
0b:e0:7e:8e:21:bc:c9:76:a8:79:20:2f:00:c3:a1:21:28:1b:
e7:9a:5e:6a:65:ed:84:66:84:0d:d3:58:ec:c5:44:78:4f:72:
d7:79:f4:26:92:59:bd:05:42:46:fb:af:63:b6:11:f9:02:45:
e6:35:2f:0a:6b:14:80:b7:1b:40:bb:04:ff:c4:a3:ce:60:c0:
34:27:c6:5a:3d:ff:62:5a:34:bc:20:1b:75:71:df:c6:e7:59:
8a:87:08:a6:79:3f:41:17:94:32:ee:aa:62:32:25:dc:ec:b8:
53:a3:49:5f:5e:62:ed:22:ae:b4:f1:91:a4:eb:d7:6e:78:54:
f0:cb:29:1b:c8:f3:46:f1:8f:2d:03:5b:9f:af:73:d7:a7:2e:
ff:57:af:05:8e:b8:70:b7:26:8b:02:63:f5:b9:3a:f5:d4:73:
df:9b:a9:71:f7:fd:21:15:53:bb:39:63:0a:4b:20:e5:0e:9c:
b5:f9:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:28 2026 by rpki-client