
$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json)
Hash identifier: 7013vDPhbhUyO0Ep/Y718cZweZxCKkfnvBPrjNAVN3g=
Subject key identifier: 04:88:88:DD:2E:DA:2F:1A:FF:EB:43:B1:1C:EA:68:3A:D2:2B:9B:05
Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
Manifest number: 0750
Signing time: Tue 12 May 2026 21:46:27 +0000
Manifest this update: Tue 12 May 2026 21:46:27 +0000
Manifest next update: Tue 19 May 2026 21:46:27 +0000
Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: Hjf3YRj99bsx1CSSt/f77iw+29V6viABG+oBI2BHMsM=)
2: 8C78A208009911F18C66F2A2636F56BC.roa (hash: OwjvTZwLM59M2Gz+ZjeNWWD2TR8A5gAMx3HNPkuDJ40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Validity
Not Before: May 12 21:46:27 2026 GMT
Not After : May 19 21:46:27 2026 GMT
Subject: CN=6a039fb3-4ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:b4:05:c2:13:46:76:d9:da:c3:4a:f9:91:
00:64:6a:77:46:d5:7b:42:44:47:16:aa:0e:9c:47:
63:de:dc:fe:08:92:71:03:6e:9e:31:b8:e2:a2:ba:
0d:fc:9a:e9:fb:ed:19:67:29:f3:e2:8f:b3:14:04:
27:e0:20:77:78:c9:ad:20:8f:cd:d4:76:60:5b:70:
55:b7:b2:91:ec:52:60:af:49:3d:5b:0a:2f:2b:da:
c3:7f:70:29:11:8c:d8:ca:7f:e9:dd:0a:57:31:ae:
20:78:a6:96:70:25:75:f4:4b:ce:d1:44:3d:4f:93:
5a:36:8c:8c:62:1b:0a:07:60:27:57:4e:6a:45:9c:
90:ea:1b:9e:3a:29:f9:63:e0:9e:92:7a:e4:2a:84:
67:61:4e:44:a4:5b:1e:f5:d1:44:07:a3:66:05:40:
c2:bc:fe:48:bd:86:91:2a:0f:bb:e5:5a:74:8c:cc:
f5:ea:da:ad:c5:ba:e3:7f:39:30:d7:a2:39:e6:04:
45:9f:53:99:7c:57:e7:3c:67:24:e7:93:79:c8:22:
1c:cc:f3:ca:d0:d5:4a:5a:20:8f:84:f1:67:27:7c:
59:e7:4a:50:e2:16:24:ca:0c:b6:fa:b1:8d:a5:cf:
6f:00:38:48:59:21:2b:6a:dd:63:91:f9:9e:c0:d4:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:88:88:DD:2E:DA:2F:1A:FF:EB:43:B1:1C:EA:68:3A:D2:2B:9B:05
X509v3 Authority Key Identifier:
keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:6a:0d:7d:df:9a:07:06:c0:5c:a2:91:50:16:29:f5:d9:65:
00:f0:92:be:fd:bf:95:f1:3c:93:8d:6c:b3:83:65:c0:53:e2:
7e:b3:16:fc:98:bd:e9:1f:06:e7:de:91:a0:a7:2a:19:cb:c4:
7a:e4:6b:f7:55:90:8c:6d:b5:d1:ed:90:e4:e6:7f:90:e8:67:
65:a1:32:c2:49:32:3b:fd:bf:c1:66:f5:0b:f1:91:5f:53:97:
66:9a:bd:55:10:13:81:8b:d0:bb:69:74:c5:47:8b:46:70:f5:
63:6d:81:81:8c:1f:d6:b1:69:af:24:3e:07:bf:d2:6c:74:83:
7f:f0:47:52:ec:8c:9b:be:8f:b8:ba:2b:ba:66:6c:4e:37:3d:
7e:eb:22:40:3b:42:6c:96:50:cd:1d:46:20:5d:c2:9e:81:a7:
51:7a:08:e3:66:c1:86:5b:bf:d6:76:f5:ae:9b:0d:0e:f1:c6:
36:61:b7:9f:b8:2a:ec:f0:47:d2:46:58:4f:77:af:ff:4c:da:
8c:f9:46:c6:f0:66:07:a9:2d:73:eb:bc:73:91:8a:80:a3:d2:
90:13:c0:01:70:cf:b8:f0:c9:21:25:69:6c:c3:2f:dd:93:7b:
85:f1:3c:af:07:23:6c:44:d1:1f:df:05:c9:e5:d8:a7:5e:3c:
61:c8:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:59 2026 by rpki-client