
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json)
Hash identifier: HNSpwVf216hehsqvyU+8Soggpano6r1CPFUkMcC57OM=
Subject key identifier: C5:78:59:7A:89:D1:47:1A:45:9E:AF:21:42:BA:87:A3:52:D9:F4:C5
Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Certificate serial: 07A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
Manifest number: 079F
Signing time: Sat 10 Oct 2026 21:34:24 +0000
Manifest this update: Sat 10 Oct 2026 21:34:24 +0000
Manifest next update: Sat 17 Oct 2026 21:34:24 +0000
Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: flg+qZmFzzyABMJ44Fd1CUmtGceNaZAWBspU3tOg/3g=)
2: 8C78A208009911F18C66F2A2636F56BC.roa (hash: VMBXFHKOaU6A+ngxQkXLpShoYXNNiq9XF4rBuPcDtMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Validity
Not Before: Oct 10 21:34:24 2026 GMT
Not After : Oct 17 21:34:24 2026 GMT
Subject: CN=6acaaf60-7141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:ce:25:7d:8d:21:50:9a:8c:0d:44:8b:fb:
be:7e:2e:b8:81:91:ee:8f:5a:7f:f7:a2:36:31:ba:
f4:24:f6:8d:22:b4:1d:48:16:e8:8f:90:31:cf:0b:
94:3a:6d:72:d2:c5:b3:3c:90:85:d8:1e:93:e8:02:
b0:ab:a6:e3:9f:0f:af:0b:e6:c1:ec:6e:d4:88:a0:
9a:94:d7:e0:ff:76:0b:43:69:f0:e2:7a:f8:fc:e9:
d6:ec:42:89:9b:bc:84:9b:d8:a7:4d:2e:32:cc:78:
25:c8:01:87:0d:ee:9b:bc:f5:4d:61:04:40:3a:97:
67:1c:0d:82:17:b6:4d:f6:d4:13:f3:98:9e:4d:3c:
a8:94:fb:af:97:50:d3:18:2a:81:c2:e6:05:e2:af:
33:9c:27:46:37:ab:0c:fc:f6:32:02:f0:c6:fa:f2:
69:d3:37:71:67:c1:a2:9d:54:94:5a:3d:d2:c6:10:
90:40:8a:4c:9d:80:3a:77:d3:24:ea:22:b2:ad:92:
db:ec:07:1a:08:17:0d:ec:0d:b2:74:cd:a5:4c:54:
c1:ba:49:43:46:d9:cb:8e:50:b5:35:95:38:39:08:
ad:3e:66:32:f7:9c:ef:fe:da:49:c8:d7:95:46:b4:
c9:a8:4d:80:82:3c:57:ae:bb:a4:71:f9:7e:5e:ba:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:78:59:7A:89:D1:47:1A:45:9E:AF:21:42:BA:87:A3:52:D9:F4:C5
X509v3 Authority Key Identifier:
keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:aa:52:67:11:44:7e:48:98:f0:c5:c3:73:8b:ee:b5:9a:
d8:fe:9e:be:6e:84:1a:05:f3:a3:26:34:83:5c:4d:17:dd:33:
54:ce:d9:b3:49:11:e4:1a:5d:c1:d7:f1:62:97:98:5b:ea:f9:
7b:b0:5b:c9:28:ef:6e:99:d2:cf:3c:0f:ea:ab:4d:7e:43:bd:
d6:51:7a:5c:07:ec:c3:50:5e:f8:78:fd:72:61:86:bb:47:f2:
69:52:40:6a:37:f1:35:7f:7d:38:1c:b5:bc:49:7b:91:82:12:
54:52:59:df:fd:11:6e:ad:ba:0d:9b:ce:b2:d3:35:ba:b9:ed:
37:97:84:a4:8e:47:5b:bf:59:78:85:b8:94:de:17:5d:ad:6c:
1f:63:e6:54:81:1f:05:e8:f2:20:58:a1:30:94:9c:18:8a:d5:
ce:90:f3:9e:5f:4c:59:7b:50:cf:5a:00:21:12:4f:02:d8:42:
5d:ad:b7:ba:f0:fd:3b:7d:a6:a9:d9:bf:60:89:7a:4b:42:25:
87:89:1b:33:99:3d:97:83:c5:fb:ee:d6:7c:f2:dc:f1:ff:7e:
e5:5b:80:06:d9:50:b2:35:be:2c:5f:b8:90:1a:13:fa:4f:de:
3f:2a:ac:3b:48:2b:a7:b2:2e:f6:cc:db:3b:57:e5:39:1d:9a:
3c:c8:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:12:17 2026 by rpki-client