
$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier: 4KeYbg6eWOS90h4bfbJUW6PmHCEEBKgpS2tSSvbRfeA=
Subject key identifier: 0A:63:14:43:5B:86:82:F9:C6:0E:FC:D7:40:5B:D2:A4:60:ED:97:4A
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial: 0387
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number: 0380
Signing time: Mon 27 Jul 2026 01:53:59 +0000
Manifest this update: Mon 27 Jul 2026 01:53:58 +0000
Manifest next update: Mon 03 Aug 2026 01:53:58 +0000
Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 1RosfLTOCnX5nCFg1MrBKHWdhMLp/PwQfQca0IHWBdA=)
2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Validity
Not Before: Jul 27 01:53:58 2026 GMT
Not After : Aug 3 01:53:58 2026 GMT
Subject: CN=6a66ba36-90c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:5f:f6:d2:a7:48:47:50:b0:6a:48:1d:73:
d1:f3:af:99:91:ea:b3:9e:57:68:72:ae:f4:c7:c5:
53:ed:97:f6:ac:43:72:40:4d:b3:59:95:c6:b7:11:
b4:d1:ce:54:52:67:d3:7a:ae:e9:09:fd:8a:3c:38:
a6:a0:28:bc:27:3e:4d:12:87:35:86:c9:35:b2:8a:
2f:05:a2:c8:f5:58:05:b5:e0:52:5f:ab:7d:63:08:
4a:38:a3:b6:95:d5:d6:e9:b1:9c:ad:3f:f6:4e:f1:
af:eb:b2:40:05:6d:dc:21:e0:aa:fb:d9:07:7d:a4:
c5:f3:1a:c6:3f:b9:aa:d9:bd:af:73:f3:a4:d1:07:
93:66:1a:a9:33:b2:d1:76:cb:21:16:5c:a5:18:39:
ca:bf:03:83:de:8b:f3:4a:54:64:88:9f:bb:d4:00:
7e:30:9b:03:f2:16:37:25:e3:f8:94:01:c5:e3:70:
8e:f0:03:6b:62:c3:ed:42:57:67:80:6a:73:66:8f:
8b:c8:e1:92:db:8f:20:33:62:66:6d:c2:a2:e0:8f:
24:7f:41:a5:be:9c:e3:4e:e4:7c:57:15:db:3e:78:
83:d3:24:18:a7:c6:82:6e:14:f1:d8:7c:0b:84:1c:
fb:de:75:16:c8:a6:2c:40:e2:f7:d0:66:3a:df:c9:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:14:43:5B:86:82:F9:C6:0E:FC:D7:40:5B:D2:A4:60:ED:97:4A
X509v3 Authority Key Identifier:
keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:75:1f:d1:9c:1d:4c:ef:36:30:47:70:55:75:f8:1e:4f:eb:
e3:81:e5:cc:b5:97:8b:d5:b6:3e:ab:64:c0:f5:a4:cd:30:c8:
ea:38:f2:46:0f:51:f4:7d:86:e8:fe:13:d5:b7:aa:9a:4b:4d:
55:04:cf:d6:cd:c2:d9:58:7c:a4:68:e5:9b:24:27:0a:9c:60:
2a:8a:3d:c7:bd:b3:ee:e5:07:00:ac:7e:e7:56:77:51:07:c2:
8f:cc:e6:70:55:f0:4d:7e:01:ab:21:cb:a0:38:ff:79:40:86:
15:6f:1b:b9:b9:3b:0b:a5:82:a9:08:f1:c4:b6:1a:b4:f1:ad:
83:ec:27:7c:99:75:be:68:29:09:dc:c2:59:61:91:bb:fb:e0:
2d:63:80:a8:80:b9:2d:ff:6d:32:c9:76:93:54:5c:83:d7:82:
21:87:be:1a:fd:0e:66:80:69:24:fe:7f:d5:34:e7:4b:a9:83:
c7:f1:3a:3c:a8:e3:bd:ea:2d:be:c6:b6:bc:f9:bb:4f:90:7d:
c0:d6:d8:d4:38:e3:77:10:0b:56:55:3f:0f:04:87:ce:c6:e7:
f8:8e:15:ca:cb:af:7b:b9:83:ad:e9:ca:3d:7d:de:79:b6:b8:
72:11:38:4b:4e:57:33:91:b3:20:91:0e:41:f1:5a:d0:d7:ea:
ed:7d:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:45 2026 by rpki-client