
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json)
Hash identifier: J2DTgmP4e/e9AWpGnlvEac3Ma0hQCick3ld4KGuEmyI=
Subject key identifier: 1C:AE:64:F8:68:41:B8:4C:BA:26:38:7E:4C:48:7E:4E:7D:0D:D0:79
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial: 055C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
Manifest number: 0552
Signing time: Thu 23 Jul 2026 00:13:20 +0000
Manifest this update: Thu 23 Jul 2026 00:13:19 +0000
Manifest next update: Thu 30 Jul 2026 00:13:19 +0000
Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: wzAf6spHCgTCrJer/9f+/B8mjJupqEjP0ErJ6sI8SEQ=)
2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Validity
Not Before: Jul 23 00:13:19 2026 GMT
Not After : Jul 30 00:13:19 2026 GMT
Subject: CN=6a615ca0-496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:dd:8b:3a:3a:4b:47:2f:05:c9:79:21:48:
c9:b6:14:c7:30:64:e3:32:65:0b:2b:a9:68:92:5e:
c9:55:02:f0:97:5e:e0:16:b1:28:e0:d5:a8:a3:bb:
0e:22:22:ee:14:a4:cc:6c:76:34:0f:15:b7:f9:fd:
76:74:94:a1:aa:ad:eb:5c:ca:02:8a:52:55:f2:f5:
ba:c2:b1:2b:0b:2f:46:6a:a1:d9:4c:2c:27:a2:ca:
f2:d2:89:de:f4:ee:31:a9:81:84:d0:dc:fd:bd:68:
f2:b4:97:41:80:b6:27:7e:b4:97:23:55:ab:3b:b1:
05:52:57:0d:67:5c:3e:ad:6c:6e:98:25:02:46:c1:
02:4c:d8:b4:87:b1:ec:60:c6:72:39:cd:2b:aa:50:
03:86:96:13:78:fe:60:ba:2c:90:d5:97:6e:d6:6b:
7f:4c:d0:2f:31:31:5a:47:76:c5:d9:0b:78:e6:34:
13:10:28:4d:0e:32:90:65:9f:f6:be:2c:d3:91:dc:
c1:70:29:d2:af:6d:aa:be:d6:36:9f:a5:a8:2b:36:
b4:2a:a4:7e:5c:9a:e7:4d:86:fc:64:fd:76:87:7f:
96:8e:81:78:b6:58:d4:49:59:69:67:e9:fc:8e:00:
58:7f:32:79:ff:bb:be:a3:45:1b:54:14:af:09:7a:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AE:64:F8:68:41:B8:4C:BA:26:38:7E:4C:48:7E:4E:7D:0D:D0:79
X509v3 Authority Key Identifier:
keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:05:5d:87:a5:2e:1f:3d:4c:b0:9d:2a:5d:d2:04:ed:d2:28:
31:65:0f:58:98:43:93:49:7c:39:1e:38:42:fb:f6:b8:fd:4b:
8b:c4:d1:80:22:07:ff:96:75:d0:6d:af:96:18:a7:46:0e:55:
7a:39:20:b8:82:e1:3a:67:ee:26:f3:e1:cf:8e:18:07:77:ee:
32:e4:6d:fc:f5:2a:f1:a9:cd:8b:3c:5d:2b:9f:4f:36:43:62:
f5:0b:01:c1:72:15:12:dc:e1:29:98:4e:20:b6:c9:2b:88:99:
ea:16:37:0c:b4:72:1c:f6:7e:33:c9:01:9e:3a:e5:03:25:fa:
29:96:8c:18:ed:91:96:38:83:ca:19:be:41:fb:dd:d5:b0:cc:
dc:ff:5c:2c:a5:71:f1:d1:f6:61:4e:5c:60:34:cb:56:98:92:
7c:82:8c:e2:51:5e:c7:0b:0b:11:0c:21:ce:23:14:8f:52:02:
24:aa:02:3e:22:0f:12:e1:84:08:3e:ff:61:8b:07:9e:52:2a:
44:b7:8e:8d:fa:3c:cc:cb:15:7d:a2:f6:68:d9:07:b2:05:68:
0f:99:74:79:87:23:36:5a:a4:02:fc:e6:6f:91:15:62:05:91:
4a:7f:b1:1c:68:ad:fb:9d:31:47:88:e1:3b:48:66:3c:d3:49:
c3:52:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:23 2026 by rpki-client