
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json)
Hash identifier: bIXUxWD+HQLCHUrCKn4Ka0TpB4hbSvGw44huc1K1ADo=
Subject key identifier: 15:A4:B4:D6:F1:9D:11:1C:4A:49:23:0E:1D:A2:C7:6D:F6:7F:29:74
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial: 055F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
Manifest number: 0555
Signing time: Wed 29 Jul 2026 00:04:42 +0000
Manifest this update: Wed 29 Jul 2026 00:04:42 +0000
Manifest next update: Wed 05 Aug 2026 00:04:42 +0000
Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: FvlCGLKFBO8yo9IhBwuP/bQpcK4j+ULNHRpcoECYRms=)
2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Validity
Not Before: Jul 29 00:04:42 2026 GMT
Not After : Aug 5 00:04:42 2026 GMT
Subject: CN=6a69439a-7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:69:13:ca:a3:c7:45:7e:ff:a3:f1:6f:53:
9e:d8:2c:8f:26:25:42:d3:bc:1e:eb:37:cd:f2:e5:
21:5b:64:88:f3:08:3a:97:7e:68:45:c3:a2:5b:8a:
f9:54:fa:24:b4:c4:88:86:7f:a5:41:04:54:08:a1:
b3:84:c1:23:08:cf:ea:a0:38:55:ce:fb:a6:ef:08:
09:41:77:f7:ca:3b:7c:bd:a5:a2:1a:f2:1b:13:03:
b5:a5:6b:64:94:8d:4e:65:63:5b:b6:7d:0b:d7:65:
74:87:75:06:ff:3a:38:67:4f:c1:59:66:3f:2f:c9:
02:2f:b0:e0:f9:fb:6d:2e:6f:49:44:63:92:df:1c:
b1:5f:77:13:ab:d6:aa:33:a1:03:1d:43:75:c9:ea:
c4:0d:8e:ad:43:08:4f:2c:2e:52:12:d7:75:be:d9:
71:c9:06:87:1e:fa:08:46:33:6a:57:eb:7a:54:11:
51:1d:c4:ee:04:1f:d4:3f:14:ca:ef:9f:2b:03:21:
61:07:d4:dc:46:22:ee:6b:3d:23:20:17:ed:7b:ef:
3f:45:1d:75:87:c8:e9:3a:75:9f:34:99:7c:b4:5a:
0a:39:11:c2:40:b3:80:b5:46:44:f9:81:7c:86:89:
55:39:b1:5b:e3:c8:aa:76:f2:0e:e8:e8:91:e8:7d:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A4:B4:D6:F1:9D:11:1C:4A:49:23:0E:1D:A2:C7:6D:F6:7F:29:74
X509v3 Authority Key Identifier:
keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:20:82:8e:c3:1a:20:5b:c2:3e:08:15:69:6a:eb:3e:61:6c:
66:ed:70:f3:0c:5e:fe:45:3c:2f:06:26:d6:c1:a3:b1:36:b3:
57:70:97:6f:ae:73:47:78:0d:6f:e3:43:29:5f:77:60:56:65:
54:fa:bb:3f:66:48:98:8c:51:9f:61:22:49:ab:eb:e8:cd:65:
61:1b:f0:4d:31:d1:83:7e:52:70:88:c0:fe:13:7a:7b:fb:4b:
c6:a2:85:43:30:ea:1c:c2:64:e9:52:c1:02:05:66:80:95:e8:
40:81:ce:1c:00:a3:e1:bc:8b:ec:39:3c:98:b7:83:d8:33:79:
3a:04:94:29:cf:92:74:5a:a7:85:8a:66:6b:67:6b:43:df:b2:
0e:28:64:71:44:44:bf:ec:41:d4:f7:75:16:35:41:5e:72:34:
ad:32:d1:37:72:a5:89:fa:77:53:10:62:71:c6:e2:62:79:70:
a4:f6:eb:38:3e:96:27:72:18:96:91:fb:43:5a:22:d9:91:02:
12:ee:6e:f8:80:3a:18:19:85:5e:f1:00:bd:39:d1:8f:70:fd:
2c:b4:69:9e:3c:06:6a:21:9a:29:d1:2d:1d:74:24:c8:46:24:
1d:78:90:cb:15:ff:0b:28:0e:9f:09:10:94:2c:0a:10:d6:80:
7c:bf:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:19 2026 by rpki-client