
$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier: FxY6QwNCM0rO7LMinbRxVEqEih2PGFxE9kADfepBZtU=
Subject key identifier: B6:B2:9C:A1:C7:5F:B1:02:93:FF:D4:20:7B:77:CF:F9:F4:86:D7:3F
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number: 03DB
Signing time: Tue 23 Jun 2026 00:39:35 +0000
Manifest this update: Tue 23 Jun 2026 00:39:35 +0000
Manifest next update: Tue 30 Jun 2026 00:39:35 +0000
Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: tUc1bv9yYP+OZBxSurqEZCLSsVQm20/WZJNoD3AgopA=)
2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: D8m13spLSM0y5GB/4qATdHzlSdpaWUvX2eUbzxTPsS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Validity
Not Before: Jun 23 00:39:35 2026 GMT
Not After : Jun 30 00:39:35 2026 GMT
Subject: CN=6a39d5c7-7f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:e5:bc:33:69:b9:44:fe:90:9c:7e:06:4f:
86:11:02:3c:2a:6c:08:42:0e:f3:cd:21:ee:a3:be:
6c:e7:3a:fd:b3:b7:d1:02:7c:a4:66:b2:f2:a9:fa:
2b:a8:4b:c6:dd:7d:c2:25:d8:5b:4f:2d:1c:80:46:
db:b8:11:07:59:f7:1c:3c:dd:ee:b7:b8:a5:d6:ce:
4c:d9:d0:88:29:db:86:97:60:75:51:94:d4:22:05:
82:f4:ac:ca:b2:f9:8b:9c:5b:c3:f4:43:fd:d8:d2:
01:ea:90:44:28:4a:80:19:50:27:4d:c2:98:ae:14:
70:d9:3d:43:f0:dd:a6:8a:a6:42:c8:ef:39:57:ba:
07:5c:cb:4d:26:74:0f:06:55:66:19:69:2c:42:1e:
9d:f7:33:80:d0:2a:ab:3c:b1:b9:3f:94:26:49:df:
33:39:e0:22:50:6b:62:0b:66:0a:45:2d:80:5f:d7:
40:f2:4d:d3:0c:1e:68:0b:9b:9d:90:c8:85:d5:24:
fd:94:67:a8:6a:ba:91:a0:a8:77:75:72:b0:57:2b:
4f:d7:df:e6:0e:cc:13:68:6e:84:d5:64:65:68:a9:
b3:c6:63:ea:39:dd:f9:bb:64:17:a2:cd:6b:0a:bf:
e2:0e:5f:9d:9b:98:d5:42:eb:f7:32:6d:1d:fa:bf:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:9C:A1:C7:5F:B1:02:93:FF:D4:20:7B:77:CF:F9:F4:86:D7:3F
X509v3 Authority Key Identifier:
keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:5e:ff:0f:e3:bc:dc:03:b9:3c:cb:e0:fe:e1:81:aa:5b:
56:5f:40:50:a1:bf:6a:23:99:22:73:1d:bb:13:79:4e:a1:66:
6b:b3:41:64:7b:28:3a:87:97:56:c6:a9:d5:38:6f:db:e2:e5:
f4:05:85:ee:06:dc:75:51:04:6c:6b:bc:41:3c:c8:b6:5e:cb:
d5:9f:40:c6:b6:37:e9:f9:b9:72:6f:0f:01:f8:2a:a6:ca:45:
b2:16:29:0f:eb:98:f6:9f:94:58:86:bb:30:05:7f:90:21:b2:
ed:7c:1f:fb:cd:2e:ea:34:81:b0:7a:0e:b2:32:f9:1b:9f:d9:
d5:ea:f1:4a:f8:41:15:8a:9d:3b:78:e6:f5:99:7e:fa:53:74:
33:51:32:f5:20:ac:59:98:26:9b:10:fb:fb:21:c0:ec:b9:13:
e0:a4:fa:a3:a5:1d:c3:62:41:b2:b7:8b:24:ef:6f:c5:e1:36:
38:aa:f6:22:6b:b9:e8:9b:a3:32:e8:de:7a:3f:51:6c:7c:9f:
ff:71:d6:f3:98:52:69:5a:1b:eb:5b:d8:12:98:f1:0f:f3:b5:
56:d1:a2:ba:65:50:93:8a:14:f5:9a:74:15:2b:3b:b0:9f:cf:
c4:60:62:31:ef:3f:a0:f9:46:2e:eb:86:32:e6:30:0b:bc:12:
76:13:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:28 2026 by rpki-client