
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json)
Hash identifier: 6GVaHoHbOzg3Q4BFVPj/NK8ZQNLfBDG1pPrSQMGdeA0=
Subject key identifier: 74:F2:B4:62:FF:BB:93:76:A3:67:92:8B:96:C6:29:C3:BB:BB:48:F1
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
Manifest number: 0127
Signing time: Sun 01 Mar 2026 06:38:12 +0000
Manifest this update: Sun 01 Mar 2026 06:38:11 +0000
Manifest next update: Sun 08 Mar 2026 06:38:11 +0000
Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: TBMRGw9lJtSdTuMmFlzTB4NtrKbrpqIZHx07E7My25U=)
2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: DO2YJbZIejvhdRtGsWt15hXuGZ1AtCApUsm5r0ZPTOY=)
3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Validity
Not Before: Mar 1 06:38:11 2026 GMT
Not After : Mar 8 06:38:11 2026 GMT
Subject: CN=69a3ded4-d718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:b9:dc:f0:b1:35:69:37:2a:3e:7f:1c:4f:
de:bd:94:27:98:9f:75:c1:3a:fb:7f:db:99:2e:f8:
61:9b:44:ba:87:42:12:98:57:13:49:2f:a1:d9:59:
be:10:23:b7:26:23:8e:59:b1:71:09:7a:14:d9:fe:
b5:a4:d7:6f:67:b6:47:f5:b0:f0:8c:0a:86:26:65:
b9:dc:2d:a7:fe:7b:6e:a7:8a:f8:f6:92:7c:9a:86:
51:af:a2:32:b4:39:86:be:81:73:e8:db:f7:bf:e1:
80:82:70:3c:66:a2:82:7d:04:2d:d1:1b:bd:6b:5e:
de:57:da:9b:45:74:a6:07:6b:75:69:b4:d7:74:65:
21:3f:1b:eb:cf:03:9d:81:a5:1b:4a:d1:fa:8e:49:
ac:ef:1f:54:ba:07:20:75:07:2a:80:e1:9b:40:03:
60:db:67:0e:15:7f:23:64:5a:8a:8e:cc:04:6c:a6:
94:f8:d1:96:de:b5:b3:31:82:8d:68:06:e1:b8:eb:
0e:c8:ba:f1:a2:e6:fb:19:62:f6:0a:96:c1:fc:16:
bd:84:e2:cb:6c:7a:b7:17:63:4d:a0:a2:6d:8b:2f:
09:78:14:f6:45:27:08:83:30:fd:db:c5:57:02:b6:
e9:9c:ae:61:66:d7:19:ff:4b:47:17:8e:6e:f9:09:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F2:B4:62:FF:BB:93:76:A3:67:92:8B:96:C6:29:C3:BB:BB:48:F1
X509v3 Authority Key Identifier:
keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:26:cc:dd:b7:5e:80:66:b0:73:cd:8b:6c:96:5f:9f:e8:6e:
a4:70:2f:70:de:a8:71:71:f4:82:b6:70:db:50:7f:11:87:b0:
f0:f4:2a:2e:69:d0:7a:01:97:7c:7e:22:68:52:f0:06:24:81:
32:8f:dc:5a:c8:72:69:99:78:93:d4:bc:e7:96:14:e2:8b:1b:
37:6a:fa:74:70:e1:8e:04:82:90:a9:bb:1f:71:3b:06:d7:89:
9e:34:72:d0:64:0d:52:24:9e:fd:c5:16:49:63:10:a4:ef:ae:
79:95:ce:dd:d2:45:38:33:54:e1:04:00:4c:a4:73:32:63:00:
77:fb:e4:31:e2:d4:95:9b:62:b6:53:8e:20:bb:bd:a5:ba:04:
3d:09:f6:36:98:88:ae:8c:86:f1:09:8e:5e:5f:04:8c:09:11:
7d:ba:ec:ab:d3:75:d1:c2:96:75:d0:43:dd:80:2a:62:b8:92:
dd:84:8e:67:33:0a:d5:f9:6e:0f:8f:fe:79:2c:84:d4:71:c7:
66:15:5c:f1:a5:9e:bf:a8:16:3d:53:bd:50:6e:5b:ec:41:09:
7f:78:fc:cd:49:38:96:14:8d:af:c9:d5:98:ae:25:02:a3:e6:
f8:68:ab:8e:09:35:c3:2e:df:90:d0:77:35:73:95:0f:5a:3c:
6f:5d:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:48 2026 by rpki-client