
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json)
Hash identifier: Cge12+pkaAb8Uavv9VtsSCZpF8ihKXKPc2mrCdc7nj0=
Subject key identifier: E1:40:1F:55:3C:AF:46:4A:75:5F:D2:60:BE:B4:2D:2C:2B:BD:07:D8
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial: 050D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
Manifest number: 0506
Signing time: Sun 01 Mar 2026 00:16:25 +0000
Manifest this update: Sun 01 Mar 2026 00:16:24 +0000
Manifest next update: Sun 08 Mar 2026 00:16:24 +0000
Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: Lcyc/E4cTmoRVpv7YLsKtvVmQaCJiLkexl09DB8v23M=)
2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: PC3JLVy9ph8UWlBC5sdOTbv0EvOcfdPL1O4IKJVccxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Validity
Not Before: Mar 1 00:16:24 2026 GMT
Not After : Mar 8 00:16:24 2026 GMT
Subject: CN=69a38559-0bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:3b:c9:05:e3:79:f2:0e:a3:6a:6f:69:a4:
80:96:6f:47:af:69:00:c0:55:65:ac:aa:db:26:47:
8d:da:21:e1:13:bc:d8:66:d9:0e:71:24:37:3b:4f:
58:47:77:e2:16:15:02:0b:b3:7a:a6:d6:a6:a4:3a:
e6:42:04:22:cf:fb:4d:15:60:1d:5d:02:b9:60:3b:
40:6a:2f:cd:8a:6b:34:8c:98:69:51:06:eb:4d:c2:
0f:00:44:b5:68:17:fd:96:ab:bc:2c:e2:b7:ab:24:
10:d2:d2:ff:0f:01:07:8d:24:1b:77:ce:81:72:9e:
74:3d:2f:90:c4:f0:f9:f7:8e:e3:4e:72:6b:eb:9a:
2a:ff:e9:3e:7a:dc:25:e7:c6:7a:08:c4:9c:be:60:
8d:e3:e0:c4:c7:63:fb:2c:96:0c:63:01:89:82:3e:
d7:75:85:b5:cd:8c:bb:b0:b3:f2:ab:b1:07:ac:78:
e1:74:b6:a0:8b:ac:28:d4:16:20:f1:6f:60:46:db:
89:1a:3e:bc:1f:3c:f0:34:6c:7e:ef:19:78:42:da:
26:38:07:87:6d:ce:59:00:e1:a9:c4:b5:f6:d1:a0:
15:f8:f9:21:47:7d:a2:7f:6e:59:fa:04:40:b4:26:
f9:da:89:17:b2:a3:fb:fe:bb:a2:c7:a6:65:4f:3e:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:1F:55:3C:AF:46:4A:75:5F:D2:60:BE:B4:2D:2C:2B:BD:07:D8
X509v3 Authority Key Identifier:
keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ec:4b:e1:49:82:6d:0a:ec:0c:a9:2b:ff:50:5c:cc:15:2c:
6d:1b:98:ba:ae:91:27:91:af:1e:f2:36:cd:10:72:e5:d7:51:
86:e3:c4:b1:d2:0b:5a:f6:05:2f:4c:85:68:b4:2a:45:66:f0:
09:0f:5f:f3:1b:2a:fb:b1:5d:ef:75:c8:67:1e:fc:ad:7f:a3:
15:81:dc:64:40:0a:67:33:44:26:a1:07:f6:bc:89:d5:73:2c:
9d:b0:4b:c0:4f:59:1b:5b:0c:ae:a7:46:54:69:50:a9:59:8a:
9c:27:c6:2c:f2:c6:5a:13:51:c7:c7:ff:e3:b7:50:47:b2:37:
bc:39:61:0e:da:94:9c:99:05:d2:0d:e2:4c:69:80:b1:4a:ea:
a9:31:25:eb:9b:50:31:46:fd:33:c5:68:c8:b5:16:55:3b:25:
b3:ba:4a:53:ea:12:f7:a1:2b:15:ff:28:2b:2e:5e:f8:6e:0d:
e5:c5:ff:cd:b7:48:cc:60:84:a1:cd:f1:94:1f:e9:7e:6f:cb:
ec:99:ac:ab:3a:3f:6b:9c:e3:e9:64:3f:66:83:1b:a5:5e:51:
22:3c:a1:c1:06:53:3a:7c:13:39:3f:93:5e:a3:24:ce:be:e4:
e7:60:7b:5d:50:0a:4d:ee:94:5e:2b:18:24:5b:0e:93:8e:d1:
68:23:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:05 2026 by rpki-client