
$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json)
Hash identifier: AMP/fQoefCoS+PvnQfXx45SWc47yyNzeg6Bwgw/PkSg=
Subject key identifier: C1:97:F0:97:F4:C1:6B:FE:80:4C:ED:8C:02:7E:57:01:3D:15:4A:26
Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
Manifest number: 0722
Signing time: Tue 12 May 2026 21:56:34 +0000
Manifest this update: Tue 12 May 2026 21:56:34 +0000
Manifest next update: Tue 19 May 2026 21:56:34 +0000
Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: pF3PtOeZanTIle/kQu1PVlWJTRoatzT1njPzEgkTp7g=)
2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: Rg5f1AR5kausNOtPTErApCWSrgBHSd9016YNBUMj2Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Validity
Not Before: May 12 21:56:34 2026 GMT
Not After : May 19 21:56:34 2026 GMT
Subject: CN=6a03a212-d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:10:05:bc:d6:e1:df:e1:77:cc:8e:1e:90:
ea:0f:b8:8e:6c:bd:98:c8:c2:c0:af:d9:50:ae:67:
5f:d6:06:b8:9c:1a:57:69:eb:ad:b2:2e:00:e2:72:
81:8c:4c:89:d8:02:92:63:fa:21:06:c9:f0:d3:c7:
3e:93:7a:aa:83:1b:d8:e3:ef:62:13:ea:55:64:3d:
7d:c7:aa:95:dc:6c:23:7f:f6:31:6b:a9:1c:ff:cc:
32:e6:a0:5b:9d:48:78:31:21:83:70:57:04:57:7d:
9e:10:bf:b2:33:55:ff:22:05:d8:e0:e3:ae:45:d5:
21:32:65:6f:bd:82:99:42:9a:e9:66:7f:5a:10:21:
f4:7a:9b:b3:4a:b9:3a:b7:ee:f8:fe:4c:39:1c:d8:
9f:d5:63:9d:ee:45:65:e7:17:3a:67:05:da:3e:96:
36:21:53:5f:e9:98:a7:84:3c:47:49:89:8e:2d:69:
4e:98:67:55:ff:3e:00:0b:de:56:e4:04:fe:aa:ad:
2b:59:ae:71:62:b7:cc:47:f4:d4:bd:3d:12:02:05:
ba:1f:ef:cd:4a:28:d6:00:87:91:7e:88:f3:24:78:
1f:b1:e0:8b:86:29:95:1b:d5:58:fd:0e:73:4b:7f:
e1:f9:18:23:d4:62:e8:f4:7f:37:c2:56:f9:d4:25:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:F0:97:F4:C1:6B:FE:80:4C:ED:8C:02:7E:57:01:3D:15:4A:26
X509v3 Authority Key Identifier:
keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:3a:28:4f:c6:c6:09:47:c4:2a:f3:1a:e1:3c:79:a2:dd:
d8:69:50:f5:f6:c6:3d:b1:3c:e0:e2:0a:fe:e6:f5:50:c9:99:
b9:c7:db:b7:02:3e:fb:f9:6c:44:fc:ef:6c:f7:bc:a2:1d:f3:
e3:dd:ac:0f:8b:12:c7:19:17:e7:6a:b7:b7:fd:f3:98:50:95:
bc:01:53:86:76:bf:70:c6:f0:e4:bd:84:1a:ff:32:68:61:b3:
0f:5c:ff:37:01:3b:1f:be:1f:a4:e0:8e:79:e7:dd:25:be:d6:
53:a0:5e:65:97:f5:17:83:11:cc:2b:48:20:fd:89:41:03:74:
5a:06:3b:87:ca:b7:85:97:75:94:e6:ee:14:34:4d:5d:db:6d:
d6:d1:72:0d:5c:b7:8e:7d:6f:82:ab:52:f3:aa:47:6b:d9:61:
aa:e6:bc:b3:cd:4e:6d:13:91:3a:1e:8a:d3:55:41:9f:15:05:
13:5e:02:de:35:35:c8:09:83:84:dc:e5:57:18:63:c3:86:14:
c4:b7:ef:6f:30:aa:81:d2:29:98:be:1e:bb:8a:8f:e4:f9:6c:
eb:08:25:b6:2a:ac:85:f2:cd:a0:7d:af:02:ec:4e:47:70:c9:
c4:ba:20:98:81:a2:b1:e0:87:3d:55:8b:45:37:c2:49:44:86:
95:6f:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:32 2026 by rpki-client