
$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json)
Hash identifier: rjU7Uo9BzW3xaPTe/JgBQxtlYg1xfWdFPBzfyPxfd1g=
Subject key identifier: D8:26:0D:8F:5A:50:ED:9F:65:C2:A0:F8:12:AE:39:71:10:25:C9:E8
Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
Manifest number: 06FD
Signing time: Mon 02 Mar 2026 00:59:50 +0000
Manifest this update: Mon 02 Mar 2026 00:59:49 +0000
Manifest next update: Mon 09 Mar 2026 00:59:49 +0000
Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: gjb0OYdCQ0c5bHXH2jau2xnxYU022vrfQel4EbqWU3Q=)
2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: Rg5f1AR5kausNOtPTErApCWSrgBHSd9016YNBUMj2Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Validity
Not Before: Mar 2 00:59:49 2026 GMT
Not After : Mar 9 00:59:49 2026 GMT
Subject: CN=69a4e106-2476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:3e:94:ae:69:c0:88:2a:06:29:37:d8:d3:
7d:9b:cd:c3:bf:7f:d9:80:b4:4e:d8:c7:93:b0:22:
b8:a6:40:cb:8b:9f:34:5a:66:58:13:75:c4:77:4e:
90:a0:6a:67:fe:a2:60:72:ae:49:e4:cd:54:a5:35:
f9:44:d7:e1:66:cd:13:c4:a4:f7:15:7b:46:68:fd:
fb:dc:4d:46:0e:68:a7:4f:0f:ba:44:5c:5c:19:e6:
1d:82:63:18:71:35:d3:84:20:26:39:02:1a:33:c4:
6b:44:76:25:59:62:32:5d:fe:c9:e3:45:33:a8:54:
ea:e5:d9:33:a7:c0:4f:e4:a1:a0:a7:00:64:87:32:
ae:0d:30:a8:ad:99:59:de:b8:8f:e6:ed:4f:c8:b5:
f7:a6:b2:ce:98:93:9c:16:46:ff:ad:b9:ea:67:0b:
d4:da:65:be:34:4d:d5:94:e0:3c:cd:19:50:f8:37:
1f:a8:59:f3:1e:1b:dc:9a:31:be:31:48:f0:54:7e:
2f:d1:6d:19:ab:a0:f6:88:89:ff:2a:83:d6:35:a3:
3e:9f:d5:e1:58:da:77:e9:fa:51:7f:cd:17:00:28:
c0:da:e9:d5:98:9c:fb:65:24:fb:c4:13:51:89:12:
b8:41:8c:56:1f:9a:b3:9b:3c:e4:ba:22:13:02:17:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:26:0D:8F:5A:50:ED:9F:65:C2:A0:F8:12:AE:39:71:10:25:C9:E8
X509v3 Authority Key Identifier:
keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:27:59:74:30:9d:a8:35:4c:06:68:04:7d:e5:06:7e:9a:f6:
01:be:d3:e7:b6:47:00:6d:7d:f7:5a:a4:b9:c3:32:62:7c:70:
de:b0:f1:a1:15:86:76:c2:8c:79:9e:fc:80:7d:07:14:7f:cc:
3c:2a:cf:ff:21:5f:9b:aa:04:77:ff:fb:fd:10:40:19:6c:a1:
44:99:36:6a:62:66:2d:df:62:f6:c7:98:1e:89:d8:8c:9e:d2:
b4:8a:c6:e9:d7:33:eb:4e:42:9d:66:0f:54:fb:00:65:74:98:
69:0e:61:c3:16:8f:af:bd:bb:f3:f5:16:fe:56:31:d7:cf:58:
f7:eb:47:f5:94:65:4d:da:94:50:da:6b:1f:b4:33:06:cc:96:
65:1a:77:21:0c:24:da:b8:f0:19:60:dd:22:c4:2e:a6:f8:7e:
82:a6:e8:41:9b:1e:ac:a8:f2:dd:a0:5a:f5:2b:f8:7a:99:89:
4b:c6:24:e9:00:c0:71:07:21:8d:23:0c:d3:0e:9c:6b:c2:07:
3f:c7:46:61:8d:00:d5:74:3b:66:ba:a5:6c:cc:45:e5:47:43:
1b:80:66:c6:bb:96:1d:25:ba:06:f3:ce:ed:cb:7f:5b:04:58:
69:90:55:88:0b:5e:e5:c1:e7:22:2b:a6:ff:6f:99:45:0d:4d:
50:5a:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:44 2026 by rpki-client