
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json)
Hash identifier: LcqDCMG9+87orWXZkYQZtvlUEC9hxudytHOyoZV04ik=
Subject key identifier: 3E:0E:7A:7C:14:3B:81:19:5F:62:DE:ED:BA:26:89:D4:0F:D7:89:6A
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
Manifest number: 0108
Signing time: Tue 21 Jul 2026 07:41:42 +0000
Manifest this update: Tue 21 Jul 2026 07:41:41 +0000
Manifest next update: Tue 28 Jul 2026 07:41:41 +0000
Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: 7mk9483b4BHwU6FhPBSBRcjaKmlIJUHA8quqnHFNx3U=)
2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 07:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Validity
Not Before: Jul 21 07:41:41 2026 GMT
Not After : Jul 28 07:41:41 2026 GMT
Subject: CN=6a5f22b5-3c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:70:61:61:89:4b:d0:e2:f8:16:9b:25:41:4d:
f5:17:16:e7:9b:bf:3c:9d:09:70:6c:ca:35:aa:a4:
ef:13:6c:ff:c0:d3:da:4a:f3:a6:e3:64:30:1c:8c:
98:2b:d7:1f:5e:c3:60:ee:78:cf:c0:1f:86:00:23:
14:fb:e5:50:ef:6f:5c:27:19:ec:1d:da:b1:30:36:
1a:eb:5a:3e:c7:70:ac:85:bc:ee:06:fa:b7:af:c6:
fe:aa:3b:a3:e5:9c:ab:ae:10:2a:f4:26:e7:1f:a2:
4c:72:ec:19:8b:12:80:ae:39:f9:12:ef:96:e5:11:
ba:27:2c:fb:5c:d5:01:69:2c:0d:f2:f9:e7:ba:16:
76:53:44:50:b0:27:55:33:75:d0:21:03:fd:a9:43:
ca:ac:bb:39:ed:5a:8b:fc:c5:74:03:f2:0b:66:e7:
5d:5f:dd:93:c8:43:45:63:b6:6a:6c:aa:21:d7:e3:
64:37:ef:eb:85:5d:47:77:bb:d4:4e:e7:7f:e0:8e:
e2:d7:5c:4d:d0:70:a6:1c:74:38:b1:aa:48:1f:61:
20:59:c8:89:6c:79:97:a1:1f:14:2a:29:ed:10:86:
53:79:59:ad:34:ff:42:3e:0e:ef:df:e9:18:88:51:
ff:32:a0:b1:b6:2a:ed:d7:e8:c2:dc:ce:cb:93:4e:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:7A:7C:14:3B:81:19:5F:62:DE:ED:BA:26:89:D4:0F:D7:89:6A
X509v3 Authority Key Identifier:
keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:b6:96:6d:12:df:9a:59:ff:fa:55:b2:b2:4b:af:bc:60:
d7:54:16:8b:b7:51:b7:d2:1e:88:7d:c5:37:5d:84:57:6f:77:
f0:cc:6c:1f:3d:c6:ab:26:d4:8b:3b:b6:45:26:f1:09:d2:b9:
06:d4:08:4e:49:19:d4:a8:20:98:73:ae:a2:b9:67:49:5f:9e:
51:14:8d:53:ae:c7:44:37:47:4b:40:3b:b3:71:bd:ad:3e:a7:
94:33:e9:db:ec:64:f6:82:a6:b4:92:56:72:06:55:36:2b:79:
a7:a8:d5:2d:3a:64:88:28:e2:fb:d2:b4:1e:f6:68:18:ab:ec:
df:af:72:3c:cb:79:a9:cc:6f:91:81:c0:3a:b0:6f:45:cf:57:
cf:fd:db:54:50:18:bc:8f:8e:e8:a3:ab:7a:6c:31:47:d4:16:
4f:2f:05:c2:2e:28:97:33:f7:e6:ab:51:b7:90:0e:51:5b:12:
6e:f3:e6:f0:4a:78:93:e8:8d:34:d0:7a:0b:88:1a:8e:bb:88:
62:24:8f:56:1b:43:ff:3b:00:cf:da:e1:51:ff:30:72:e4:be:
80:a4:1f:de:ab:1b:ee:7a:11:20:05:65:65:dc:2b:23:ee:4c:
60:a2:51:4e:8e:91:8f:8f:ba:9b:1e:10:6e:0f:fd:32:a0:65:
e5:45:a4:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2
N0I3NzU1MjYwHhcNMjYwNzIxMDc0MTQxWhcNMjYwNzI4MDc0MTQxWjAYMRYwFAYD
VQQDEw02YTVmMjJiNS0zYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9XBhYYlL0OL4FpslQU31Fxbnm788nQlwbMo1qqTvE2z/wNPaSvOm42QwHIyY
K9cfXsNg7njPwB+GACMU++VQ729cJxnsHdqxMDYa61o+x3CshbzuBvq3r8b+qjuj
5ZyrrhAq9CbnH6JMcuwZixKArjn5Eu+W5RG6Jyz7XNUBaSwN8vnnuhZ2U0RQsCdV
M3XQIQP9qUPKrLs57VqL/MV0A/ILZuddX92TyENFY7ZqbKoh1+NkN+/rhV1Hd7vU
Tud/4I7i11xN0HCmHHQ4sapIH2EgWciJbHmXoR8UKintEIZTeVmtNP9CPg7v3+kY
iFH/MqCxtirt1+jC3M7Lk04iKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4OenwU
O4EZX2Le7bomidQP14lqMB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz
RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs
TDdZY3BCdHFUOEZudDNWU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk4O2lm0S35pZ//pVsrJLr7xg11QWi7dRt9IeiH3FN12EV2938MxsHz3GqybU
izu2RSbxCdK5BtQITkkZ1KggmHOuorlnSV+eURSNU67HRDdHS0A7s3G9rT6nlDPp
2+xk9oKmtJJWcgZVNit5p6jVLTpkiCji+9K0HvZoGKvs369yPMt5qcxvkYHAOrBv
Rc9Xz/3bVFAYvI+O6KOremwxR9QWTy8Fwi4olzP35qtRt5AOUVsSbvPm8Ep4k+iN
NNB6C4gajruIYiSPVhtD/zsAz9rhUf8wcuS+gKQf3qsb7noRIAVlZdwrI+5MYKJR
To6Rj4+6mx4Qbg/9MqBl5UWkoA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 04:40:20 2026 by rpki-client