
$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier: uL9SMoHI+MAU3g//PiS94JbFXIh1sgQBKaCmaaPCf10=
Subject key identifier: 8D:FE:43:C4:DA:30:6B:08:93:33:29:3A:DF:0F:EC:86:98:30:A1:3D
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number: 0257
Signing time: Sat 13 Jun 2026 02:17:35 +0000
Manifest this update: Sat 13 Jun 2026 02:17:35 +0000
Manifest next update: Sat 20 Jun 2026 02:17:35 +0000
Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: Ppp9dsp+2AA63XUs01l3x2CYdFNYljUB+7c5G3VwiQ0=)
2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: 6U++pNkeW+MPTCwzdV8Vs83jpXrL1CTpZqHD9JNg/bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Validity
Not Before: Jun 13 02:17:35 2026 GMT
Not After : Jun 20 02:17:35 2026 GMT
Subject: CN=6a2cbdbf-63b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:59:01:2c:4d:5f:72:48:48:39:ee:82:f5:
99:27:fe:68:20:e0:ab:97:bd:eb:13:14:24:e9:71:
e8:92:31:d5:89:df:29:0d:97:e5:4e:87:8c:7b:4d:
d3:12:4a:8b:d5:1f:7b:14:ad:e7:6b:01:90:d2:67:
73:72:40:2c:e6:4c:e3:42:ec:ca:5b:de:e1:1b:f0:
65:6b:bf:9a:a2:ef:1c:c2:e7:58:98:20:98:f4:2a:
55:85:c9:77:82:74:f7:75:c7:7b:07:f1:05:1f:78:
28:2b:a9:a0:fe:e2:a9:d9:d5:f4:a8:6a:40:06:33:
45:c5:28:79:81:6d:14:5b:b2:15:09:02:30:6d:f7:
9b:02:98:ba:cf:39:6c:e7:58:f0:bb:fa:d0:f6:de:
57:49:d4:8a:a9:49:69:45:c8:36:f3:56:c8:4c:8f:
29:6e:32:b9:b5:67:32:2a:6e:e7:2f:4e:8f:df:5a:
59:ac:b5:b0:4a:a4:5c:d3:1b:ab:20:b1:46:ea:97:
18:fa:38:e9:c2:4d:db:f8:40:4b:f1:37:d5:c2:46:
02:25:d6:f5:07:b6:4a:0b:8c:fe:3b:75:0b:57:17:
09:74:68:ec:9d:0b:ec:1f:7c:b3:12:5d:c7:77:f8:
a9:f2:15:b2:e0:75:99:a7:ad:dd:16:b0:9f:c1:cd:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:43:C4:DA:30:6B:08:93:33:29:3A:DF:0F:EC:86:98:30:A1:3D
X509v3 Authority Key Identifier:
keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:fe:91:50:5a:ad:b1:ff:c0:28:34:a7:32:23:f1:f3:c7:
4d:9f:a7:0b:7c:c5:13:30:3f:cb:0d:4b:fa:f5:70:31:fe:9a:
b5:56:12:16:f4:2a:57:1d:b8:98:92:38:8a:71:7e:31:03:30:
1a:bc:ae:7d:56:80:19:8c:a8:75:40:34:4a:bb:9b:f3:b1:f0:
5c:d9:33:2b:40:8a:48:ac:34:5d:20:28:20:18:9f:61:fc:39:
19:16:3e:e2:a9:75:0b:03:ef:c7:f3:83:50:8f:4c:32:a6:42:
ba:ac:b6:ea:e4:17:a4:51:e3:6e:17:f3:1f:8a:0b:dc:3f:71:
2a:9d:79:05:2e:34:97:c7:be:07:d8:66:5e:6a:f8:f2:00:be:
d4:08:a3:89:ee:05:c2:ab:eb:6b:a6:09:d6:ff:3b:15:cf:ea:
92:3f:31:c8:20:02:34:0a:4b:7e:07:39:8a:12:50:9b:c1:9a:
a1:8c:ef:cc:9d:1c:df:16:c6:d0:0f:f2:2d:69:ba:15:70:fe:
db:ee:c7:72:8c:09:4b:13:b0:5e:57:32:cd:1e:c5:8f:99:14:
12:36:7a:e4:81:b7:0e:3a:d2:ed:18:3e:de:72:8a:cb:73:22:
e9:a4:af:a0:71:3e:7e:c4:62:43:de:2f:cb:9b:25:69:e6:9e:
14:51:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:44 2026 by rpki-client