
$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier: F56Qn++ju39JB2COpIUn1Jx7iGUfU85WYYJJXodmN84=
Subject key identifier: 61:97:03:B3:B8:2C:E9:BA:C0:8B:AB:2A:E0:85:99:CB:B5:F5:40:65
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number: 038E
Signing time: Wed 19 Aug 2026 01:05:44 +0000
Manifest this update: Wed 19 Aug 2026 01:05:43 +0000
Manifest next update: Wed 26 Aug 2026 01:05:43 +0000
Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: yrekOp7mFpR804X+mTTMqfa2RBZuUfz1/Vemt8/+Ojo=)
2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: TSieMoGszG5SUgYORyTn0egsepHHBxgsWfXoIbA2Trg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Validity
Not Before: Aug 19 01:05:43 2026 GMT
Not After : Aug 26 01:05:43 2026 GMT
Subject: CN=6a850168-ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:3d:40:c9:bb:83:8e:b4:1e:75:07:7b:f6:
7e:71:e0:9a:72:79:75:c1:bf:8a:57:5c:8c:40:97:
cd:59:92:51:9e:42:aa:ff:9d:35:79:5e:e5:37:5a:
19:cb:b0:05:4a:f3:a6:47:09:32:67:10:19:56:ba:
2b:1a:14:ca:9a:ca:f6:1a:fb:99:d3:27:57:9b:7c:
9c:e3:4e:69:8c:4f:81:e0:ca:3d:8d:b1:00:cc:74:
eb:83:61:ac:b7:86:0b:f0:11:3e:cc:37:12:67:b7:
e9:86:8e:94:3c:32:f6:5b:bc:82:fc:32:c8:27:ce:
8c:5a:22:95:88:e7:f4:2a:2b:34:98:1b:66:1a:0a:
08:a5:ef:05:31:0a:07:8d:b9:e0:18:35:15:e4:fe:
eb:dc:54:6d:1c:f8:d2:d0:29:0e:50:de:68:bf:12:
0e:6e:83:ff:81:0d:05:e0:64:5b:55:98:28:90:79:
9c:41:68:f3:03:cc:1e:66:8e:7b:4f:ef:48:ed:f5:
13:a2:9d:a2:8e:e5:e9:ed:93:0f:ad:5b:c4:d1:df:
bc:58:e8:c2:a2:8d:1f:7a:23:ca:bb:96:b0:26:86:
77:6b:39:ea:a9:c1:a1:90:7a:fb:f7:72:ea:09:76:
b1:c1:f3:b0:d7:7b:43:cb:75:e3:f2:1a:30:e7:60:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:03:B3:B8:2C:E9:BA:C0:8B:AB:2A:E0:85:99:CB:B5:F5:40:65
X509v3 Authority Key Identifier:
keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:43:70:53:a1:1a:b3:6a:c2:7c:3d:24:c3:d0:3f:eb:0c:02:
60:c9:67:c5:cf:0e:e5:bc:13:4a:a3:69:60:96:fd:3d:ba:7f:
28:8d:80:7f:46:64:bb:20:ce:75:e9:33:f6:0a:ba:76:ab:66:
86:e1:02:cd:9f:52:5c:28:f4:7f:24:80:f9:01:81:e2:69:97:
0b:b2:e3:10:05:b5:1f:1c:4e:9b:b9:eb:72:8d:f7:ef:e9:7d:
49:e6:84:5f:d8:16:f4:85:d2:7d:ee:70:de:a8:ba:36:e7:01:
8d:af:1c:08:6c:b3:e2:51:7e:00:e9:72:24:6c:df:ae:80:f9:
fc:49:2f:18:a5:26:8c:9f:85:98:51:fe:39:1a:6e:9e:b3:9f:
85:7b:b5:b5:04:83:6a:a9:5b:53:4e:7e:68:37:4c:43:29:34:
d5:49:dd:4c:ad:2d:41:d2:f0:ef:bc:d1:de:00:c9:e7:b6:ad:
db:73:72:41:96:50:b5:e0:2a:e5:54:b1:ab:34:43:fc:29:63:
ca:4b:a5:c1:76:5f:f6:8d:bb:ef:a9:6f:cd:b4:42:e6:49:2b:
a1:b2:51:44:18:30:c6:a1:2b:48:3e:fc:b6:ca:bc:85:6a:07:
0e:b6:65:8f:f9:3d:44:83:5a:4b:f6:4e:bf:df:0c:b7:e1:59:
6a:ee:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:24 2026 by rpki-client