
$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier: K6M7MBNFL+P8P4zfeI0ufX3b2mND6CWYXzqpHbYIOB8=
Subject key identifier: A3:CB:90:85:6F:50:6C:C7:78:40:C8:6A:3D:95:FE:3D:B1:9A:B2:A8
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number: 0252
Signing time: Mon 01 Jun 2026 03:03:52 +0000
Manifest this update: Mon 01 Jun 2026 03:03:52 +0000
Manifest next update: Mon 08 Jun 2026 03:03:52 +0000
Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: mMDWvSaxNPJgBsXB1SVUu1K84rUBFNpV1nUUwStOVnQ=)
2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: 6U++pNkeW+MPTCwzdV8Vs83jpXrL1CTpZqHD9JNg/bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 03:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Validity
Not Before: Jun 1 03:03:52 2026 GMT
Not After : Jun 8 03:03:52 2026 GMT
Subject: CN=6a1cf698-c07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8e:96:f4:b5:16:5b:2c:a4:32:2a:e3:98:
65:c4:3e:b5:08:75:84:cf:88:5f:fa:3f:fc:a4:58:
53:0d:8d:aa:40:ff:bd:19:7d:76:df:5c:18:ba:f8:
dd:2b:e0:fe:c3:44:62:3b:54:be:be:0c:d9:02:8c:
95:4d:6f:de:78:67:da:13:e5:84:ba:10:76:29:6e:
86:f7:50:75:9e:13:a2:8c:93:e2:32:e1:1a:bd:4b:
9e:05:9d:8b:35:ed:a7:b1:65:56:25:90:6b:50:01:
00:cb:ad:d4:71:e4:93:40:12:bb:42:92:7e:6a:4d:
f1:87:97:89:56:ce:e0:8d:e3:3d:31:90:04:40:40:
eb:b5:56:23:75:f9:7e:0a:04:25:fc:ea:49:9a:fc:
4e:2b:c0:da:20:43:94:2b:f4:a4:76:ca:a5:36:e2:
3f:45:bb:a7:4b:72:2a:58:ea:8a:5d:e9:cd:f8:e1:
75:b6:98:47:00:fd:80:5c:3b:fe:1b:4e:6d:52:93:
c9:45:19:c7:b2:7c:7f:de:b6:ab:20:2c:d6:b4:6c:
32:52:07:52:85:dd:c4:f0:e9:cd:d5:43:94:fe:b9:
5e:4b:2a:b8:76:32:b3:20:f9:69:90:53:b5:06:ee:
00:fe:52:95:84:2a:d7:96:d0:0e:00:27:3f:5d:f5:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:90:85:6F:50:6C:C7:78:40:C8:6A:3D:95:FE:3D:B1:9A:B2:A8
X509v3 Authority Key Identifier:
keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:b7:bc:7e:07:27:6b:62:20:26:d7:ee:46:18:d0:97:66:
b5:c4:ea:c2:f1:12:4d:cd:67:01:d8:47:bb:9b:1d:31:d3:a5:
be:ee:df:56:92:93:7a:57:88:79:ab:6e:02:fd:69:cc:0c:82:
af:92:c7:b6:fa:0e:06:d5:5a:df:c0:22:8b:5b:6c:d4:5d:31:
c2:82:80:99:4d:01:a3:c2:0b:cb:02:0e:50:38:dd:bb:84:74:
77:be:5d:06:7b:14:07:10:af:eb:e8:4d:e7:b3:77:9b:4a:ef:
48:e8:28:94:bc:aa:26:ab:34:54:c6:29:c6:91:ec:7a:74:0c:
91:9e:0f:e6:ca:19:ab:fd:6d:9b:c4:42:e6:0d:09:94:bd:de:
69:2a:50:f1:65:a2:4e:3a:2c:94:54:ce:2d:d0:67:b1:dc:e2:
5d:9d:3a:bd:c7:d6:07:b7:f5:17:70:27:78:65:8d:87:71:e5:
90:06:d2:d2:42:a7:80:e8:fe:65:a9:26:f5:38:b4:a0:1c:cb:
10:2c:90:b6:78:40:82:cb:52:22:1f:3f:ee:c7:d1:84:b5:d7:
58:59:52:a3:4d:10:8a:98:fb:37:5f:f2:e3:9d:49:6b:dc:05:
74:af:31:b6:c7:b7:2d:50:7f:f3:9d:f5:bc:59:d3:23:73:f6:
26:a8:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:35 2026 by rpki-client