
$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier: P7qMtl7ZCzpcqDRNNq80PLQpsRGhB/4cZ213x254TRI=
Subject key identifier: D3:78:89:69:0D:97:90:EB:DE:AF:73:A6:CD:68:FC:24:8E:1E:06:A7
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number: 023B
Signing time: Fri 17 Apr 2026 02:17:51 +0000
Manifest this update: Fri 17 Apr 2026 02:17:51 +0000
Manifest next update: Fri 24 Apr 2026 02:17:51 +0000
Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: LHnZ2sYu5uhe5v1mR1yHLbD1Zx8GhSozqXBjR1v52Kw=)
2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: 6U++pNkeW+MPTCwzdV8Vs83jpXrL1CTpZqHD9JNg/bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Validity
Not Before: Apr 17 02:17:51 2026 GMT
Not After : Apr 24 02:17:51 2026 GMT
Subject: CN=69e1984f-21b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:35:69:0f:0e:55:ef:9b:aa:6d:86:58:b2:
b4:38:aa:b8:a9:18:83:87:59:ba:02:18:dc:77:44:
7c:a7:ac:fa:1f:07:e1:8e:fb:3b:db:bf:7f:a0:97:
27:6c:1c:7a:29:52:1d:1f:00:db:99:c4:67:4d:55:
99:b6:b5:bd:7b:5e:56:96:62:e6:e0:a7:22:43:39:
ea:d8:22:56:52:ab:09:4e:79:cd:35:aa:9e:30:14:
a2:12:45:ce:3d:c3:2b:f2:87:c1:8c:ad:89:eb:7d:
dc:83:fb:8a:ba:ef:3f:24:82:99:20:fb:48:1c:9a:
03:e4:be:1a:5b:29:de:ed:74:10:a9:f9:52:54:3a:
80:4f:24:20:c7:2b:96:e0:b3:cf:7a:3e:31:0a:cb:
a7:00:6d:c6:3d:11:96:06:e7:b2:e8:ed:db:08:79:
ba:ba:9a:e3:d2:26:63:3c:c2:0a:02:21:51:58:ee:
7a:7f:65:59:7d:87:fa:1c:c3:25:1a:db:67:f4:0b:
56:ce:db:62:c7:26:c6:d6:a7:52:3f:ba:1f:18:db:
59:08:3a:e2:82:c2:18:08:3e:bc:c0:12:eb:55:3b:
f5:5a:5e:ab:ec:07:af:9e:3e:d9:0a:59:03:2e:ed:
10:36:e8:72:bf:c8:de:a3:74:d8:4a:89:c9:a5:82:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:89:69:0D:97:90:EB:DE:AF:73:A6:CD:68:FC:24:8E:1E:06:A7
X509v3 Authority Key Identifier:
keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:51:4e:e8:39:1d:2d:57:25:13:f3:94:75:79:a0:8a:03:
3d:7b:e6:9e:c7:ae:a8:03:0d:ff:7e:7b:fe:b8:5a:72:62:14:
0b:33:3a:cb:1f:43:7e:82:8b:9b:92:47:d5:80:86:cc:50:95:
78:79:7c:ab:5e:03:be:ad:d6:b1:d2:3c:ea:d0:9b:cf:54:f2:
b3:40:d9:6a:04:c4:85:f8:a3:e6:62:16:57:e0:ed:17:cf:bd:
c0:a2:ea:58:71:ec:eb:23:69:99:22:8b:84:53:e6:e5:49:a8:
c0:ca:02:a5:65:a5:9c:50:eb:9a:e2:5b:76:2f:fb:48:bc:4a:
54:62:33:6c:e7:3e:27:db:ca:9f:80:f3:4f:6b:9f:da:d3:74:
ac:d6:c2:09:80:d1:e4:71:96:4b:e6:b2:08:f7:2e:eb:d1:36:
69:d4:ec:fc:62:c3:06:50:61:2f:eb:ab:8f:12:69:f1:9b:89:
46:9e:e4:ef:9c:a2:a1:94:2e:ef:39:5e:e9:ab:63:93:89:7c:
98:1a:7b:0d:1e:51:48:51:2a:67:17:61:81:92:78:23:4a:cf:
d2:19:14:2b:4c:b3:af:f3:f0:6e:0d:0f:3a:e0:ee:96:3a:c1:
3f:2e:77:66:85:ca:f1:7d:ae:cd:88:a5:1c:ee:c0:f5:64:d4:
b9:10:81:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2
OTNGNjM0M0EwHhcNMjYwNDE3MDIxNzUxWhcNMjYwNDI0MDIxNzUxWjAYMRYwFAYD
VQQDEw02OWUxOTg0Zi0yMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw141aQ8OVe+bqm2GWLK0OKq4qRiDh1m6Ahjcd0R8p6z6Hwfhjvs7279/oJcn
bBx6KVIdHwDbmcRnTVWZtrW9e15WlmLm4KciQznq2CJWUqsJTnnNNaqeMBSiEkXO
PcMr8ofBjK2J633cg/uKuu8/JIKZIPtIHJoD5L4aWyne7XQQqflSVDqATyQgxyuW
4LPPej4xCsunAG3GPRGWBuey6O3bCHm6uprj0iZjPMIKAiFRWO56f2VZfYf6HMMl
Gttn9AtWzttixybG1qdSP7ofGNtZCDrigsIYCD68wBLrVTv1Wl6r7Aevnj7ZClkD
Lu0QNuhyv8jeo3TYSonJpYIDYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNN4iWkN
l5Dr3q9zps1o/CSOHganMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy
OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm
VHRxRHp3dEdJN2RwUDJORG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPMRRTug5HS1XJRPzlHV5oIoDPXvmnseuqAMN/357/rhacmIUCzM6yx9DfoKL
m5JH1YCGzFCVeHl8q14Dvq3WsdI86tCbz1Tys0DZagTEhfij5mIWV+DtF8+9wKLq
WHHs6yNpmSKLhFPm5UmowMoCpWWlnFDrmuJbdi/7SLxKVGIzbOc+J9vKn4DzT2uf
2tN0rNbCCYDR5HGWS+ayCPcu69E2adTs/GLDBlBhL+urjxJp8ZuJRp7k75yioZQu
7zle6atjk4l8mBp7DR5RSFEqZxdhgZJ4I0rP0hkUK0yzr/Pwbg0POuDuljrBPy53
ZoXK8X2uzYilHO7A9WTUuRCBbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:35 2026 by rpki-client