
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier: 9je8g7jc4nGSyCVu78z+lqrogKnb8OXc1VIjQz4MJlM=
Subject key identifier: 0E:9B:7A:1C:27:EE:7E:BA:FA:D7:08:CC:26:89:E4:CE:07:41:FC:2A
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial: 03A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number: 03A0
Signing time: Wed 23 Sep 2026 00:16:34 +0000
Manifest this update: Wed 23 Sep 2026 00:16:33 +0000
Manifest next update: Wed 30 Sep 2026 00:16:33 +0000
Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 92fmnpHkQdBUkVOe9hgrWh/L0ov066TYnqjvagwX2uQ=)
2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: TSieMoGszG5SUgYORyTn0egsepHHBxgsWfXoIbA2Trg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Validity
Not Before: Sep 23 00:16:33 2026 GMT
Not After : Sep 30 00:16:33 2026 GMT
Subject: CN=6ab31a62-b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:7b:12:ba:9f:60:0c:ba:12:0a:dc:f1:0e:
40:db:d3:ef:73:ac:02:39:14:31:e0:63:4d:35:5b:
26:8b:be:11:f7:8a:1a:94:f5:06:4b:50:7a:0d:90:
47:59:e9:57:f2:c3:65:9e:3c:16:1a:79:82:c2:da:
12:f2:b3:5a:07:8d:d3:4b:04:90:7c:4c:b2:6a:df:
7e:7f:71:48:89:9e:59:13:3d:c7:4b:0d:51:9d:3a:
dc:e2:ad:15:7c:3b:26:d5:3e:6f:53:3a:83:78:08:
f2:21:20:c9:1f:e4:5e:ec:77:a4:79:8b:b0:c6:ee:
a3:49:77:f4:5f:d7:a5:0c:3a:4a:eb:1d:73:2c:eb:
6b:91:d0:cc:51:83:fd:c8:5f:f1:7b:56:7b:b9:40:
cc:32:ba:ce:c3:24:2a:10:04:08:65:3f:c3:9a:54:
c5:51:cd:c3:da:34:71:3d:7d:0b:f7:d9:29:ca:da:
db:23:f1:39:8b:a6:df:15:ce:a2:69:f4:e6:4d:4f:
4e:42:cc:56:b3:7b:39:18:60:52:11:98:13:06:0a:
51:bf:56:99:dc:e5:c2:c6:c4:56:d2:eb:c8:0f:82:
d1:7b:1f:f0:c6:e0:a6:24:3f:e7:f8:c2:57:2e:42:
41:74:4f:2f:0f:b9:97:cf:7f:fd:3e:93:f7:33:77:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:7A:1C:27:EE:7E:BA:FA:D7:08:CC:26:89:E4:CE:07:41:FC:2A
X509v3 Authority Key Identifier:
keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1c:cd:5f:fb:46:d6:b5:dd:2b:e9:f0:8c:77:9c:70:ef:8a:
da:ee:27:4b:18:0d:c1:79:54:59:16:d1:6d:ad:e0:99:6d:81:
4a:08:4d:0d:e3:25:bf:e5:79:52:ef:75:32:58:b3:c8:c4:48:
bc:c9:72:6c:f3:3d:9c:b2:18:73:3f:82:24:4c:4c:fd:f3:d1:
20:52:17:ac:ab:6a:7d:ed:60:11:b5:b5:f6:9b:9b:d2:be:12:
fa:9a:52:45:cb:c0:2a:63:28:c1:e9:f7:ef:36:a7:70:43:f9:
9a:93:ae:90:7e:ad:d5:73:7f:3d:eb:86:ab:16:8a:de:c7:9e:
6a:08:1b:d3:0c:c7:d4:6a:cc:1e:d0:4e:3d:a8:77:ac:a7:ed:
0f:30:43:19:d7:ea:32:f3:72:59:4f:bd:fb:ac:2f:3d:ab:15:
74:91:46:fe:0c:27:ae:9d:e6:0e:30:fd:d0:f2:d8:23:31:bc:
02:1e:7c:8f:f8:93:6e:7a:b9:59:e0:3f:1b:03:a9:bd:e3:38:
14:ce:3b:b7:d0:af:57:fc:9c:37:ce:87:7d:a4:c8:9b:1d:a0:
e4:e4:57:4f:51:f0:18:4f:5c:33:5b:36:f0:f2:ab:c7:da:5a:
39:6a:11:4d:1b:4d:94:f0:33:3f:a9:d2:ca:c7:f7:a1:b4:b9:
98:81:fa:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE
RTQyQjA3QjkwHhcNMjYwOTIzMDAxNjMzWhcNMjYwOTMwMDAxNjMzWjAYMRYwFAYD
VQQDEw02YWIzMWE2Mi1iNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5h7ErqfYAy6Egrc8Q5A29Pvc6wCORQx4GNNNVsmi74R94oalPUGS1B6DZBH
WelX8sNlnjwWGnmCwtoS8rNaB43TSwSQfEyyat9+f3FIiZ5ZEz3HSw1RnTrc4q0V
fDsm1T5vUzqDeAjyISDJH+Re7HekeYuwxu6jSXf0X9elDDpK6x1zLOtrkdDMUYP9
yF/xe1Z7uUDMMrrOwyQqEAQIZT/DmlTFUc3D2jRxPX0L99kpytrbI/E5i6bfFc6i
afTmTU9OQsxWs3s5GGBSEZgTBgpRv1aZ3OXCxsRW0uvID4LRex/wxuCmJD/n+MJX
LkJBdE8vD7mXz3/9PpP3M3enrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6behwn
7n66+tcIzCaJ5M4HQfwqMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD
MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX
OUh0NGI5MC1lb2plUXJCN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoBzNX/tG1rXdK+nwjHeccO+K2u4nSxgNwXlUWRbRba3gmW2BSghNDeMlv+V5
Uu91MlizyMRIvMlybPM9nLIYcz+CJExM/fPRIFIXrKtqfe1gEbW19pub0r4S+ppS
RcvAKmMowen37zancEP5mpOukH6t1XN/PeuGqxaK3seeaggb0wzH1GrMHtBOPah3
rKftDzBDGdfqMvNyWU+9+6wvPasVdJFG/gwnrp3mDjD90PLYIzG8Ah58j/iTbnq5
WeA/GwOpveM4FM47t9CvV/ycN86HfaTImx2g5ORXT1HwGE9cM1s28PKrx9paOWoR
TRtNlPAzP6nSysf3obS5mIH6ag==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:57:47 2026 by rpki-client