
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json)
Hash identifier: i+mVxYR5Kij16hfw6n7D9txNkGtgK/W9aRma8Eojdk0=
Subject key identifier: DA:B6:08:50:B2:3A:CF:0C:FB:B5:64:2C:A3:89:65:5B:73:23:B3:3D
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
Manifest number: 0178
Signing time: Wed 05 Aug 2026 05:57:40 +0000
Manifest this update: Wed 05 Aug 2026 05:57:40 +0000
Manifest next update: Wed 12 Aug 2026 05:57:40 +0000
Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: /ki9sDeVwzVDL6WvcgVFvCy1nBAAHgorkBjHEIkIkuI=)
2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: IiOfuavzgr4udhdI2026QD5t6vsu21nW0i15GhoklvI=)
3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: kiewIghlA3eSE6JqoPitcKxULZmtrJbpqxq8AfoM0zA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 05:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Validity
Not Before: Aug 5 05:57:40 2026 GMT
Not After : Aug 12 05:57:40 2026 GMT
Subject: CN=6a72d0d4-6cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:32:dd:3e:a0:d8:23:7b:23:90:ff:81:05:
85:b9:9e:32:ea:71:e3:1a:c9:ca:0c:0c:34:fb:4f:
16:fa:f6:bf:08:fe:c3:22:81:8c:f3:cc:19:37:1e:
d8:d2:99:be:dd:87:73:a9:e1:d4:a0:d0:8e:82:3f:
86:19:ef:d2:4c:d3:0b:23:81:c4:bf:66:0c:d5:41:
e9:e8:f3:0c:e6:60:c5:be:18:98:26:e1:68:29:08:
c6:65:f1:b5:d2:0f:6f:fc:da:f2:4d:4a:9f:14:1b:
36:ca:ec:af:c4:2f:53:50:7c:2c:2b:50:79:7f:b1:
4f:8b:dd:50:27:d7:b6:78:a6:22:71:b6:01:0b:b9:
a8:3c:03:91:58:92:0d:2e:ae:ed:ee:69:9d:2c:26:
d6:b8:27:a7:a8:81:cd:5b:77:b7:6e:3c:04:c3:27:
6a:71:2c:8d:21:f8:e0:65:87:87:fa:a7:60:fc:df:
b4:00:55:e6:14:39:80:28:f0:7e:8e:88:6a:f0:e5:
30:63:91:40:5a:3e:ef:30:72:9a:17:27:5e:45:14:
b9:61:20:4f:d8:b5:bc:af:5d:92:4e:76:14:ca:9d:
d6:06:10:91:12:83:9a:2f:6d:fc:11:bb:1b:18:60:
00:70:30:f6:56:35:c9:a6:44:9e:1e:9a:8b:d8:2c:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:08:50:B2:3A:CF:0C:FB:B5:64:2C:A3:89:65:5B:73:23:B3:3D
X509v3 Authority Key Identifier:
keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:e4:2d:32:fb:77:79:70:02:5a:cc:d1:97:2b:97:bd:27:
6b:c8:a0:35:0c:cd:5b:b1:bf:14:69:03:df:5b:a4:42:95:a2:
79:67:4e:59:62:86:73:5f:09:b0:13:4d:49:e3:a2:18:4f:76:
21:fc:51:1b:00:5c:a9:62:75:2f:d9:06:b0:b8:4b:c7:27:a6:
33:fd:57:33:ba:be:57:39:b1:3d:d0:83:48:c7:88:50:aa:75:
e6:3f:be:0c:49:3e:6a:77:f9:35:cc:f5:80:c8:74:58:38:3d:
15:ac:0c:09:3a:9e:6d:70:a6:75:f8:65:49:0f:4c:88:23:80:
b7:8e:08:b9:63:94:a2:8d:23:52:97:5d:d4:23:75:11:02:e7:
55:ee:39:96:e2:b2:92:86:b4:f6:08:b4:26:82:6a:00:dc:e0:
ca:5c:40:cb:59:d9:77:5e:cc:c5:3c:52:70:0f:05:a9:a5:49:
2d:bd:fa:d0:81:7a:af:ee:71:ae:24:f9:af:8b:8e:23:d8:6e:
d7:59:f9:c6:40:62:23:44:66:48:3f:76:4f:a1:6e:e8:dc:68:
67:d5:5d:a5:b5:28:48:3f:19:96:4b:5c:fc:db:0c:d8:83:d2:
ba:7b:4d:a4:c5:e2:94:a0:0a:83:11:c2:32:04:c5:e8:15:4b:
ba:b2:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:56:44 2026 by rpki-client