
$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier: UvYozJ1FjFML//x0QYDIhwBP//ifjalcmEdL/H0eVzo=
Subject key identifier: EE:6C:B6:B1:05:84:47:F7:A6:F5:42:33:B5:5A:4C:1B:92:5C:C5:3D
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number: 021C
Signing time: Thu 19 Feb 2026 01:35:31 +0000
Manifest this update: Thu 19 Feb 2026 01:35:30 +0000
Manifest next update: Thu 26 Feb 2026 01:35:30 +0000
Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: vmvJSi5iVx9dOsdc+ivtEmS3CzbRjb7DJXzOXiAuHEw=)
2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: L3qkCPmXp0iJV192Ab/fphVf55ttABMSsjRwG8i7X3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Validity
Not Before: Feb 19 01:35:30 2026 GMT
Not After : Feb 26 01:35:30 2026 GMT
Subject: CN=699668e3-24e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:6c:ad:86:cb:1c:d8:56:38:d2:34:71:d0:
57:70:2b:cb:c8:d5:56:53:e7:97:23:82:b7:41:72:
75:ad:0a:2e:04:32:4e:1f:c4:5a:45:6a:ac:5e:5f:
ef:db:80:8e:27:1a:04:66:87:4f:1d:40:9e:ea:9d:
ce:bb:ec:d0:53:5a:d8:69:fa:84:b3:7e:31:6a:28:
18:f4:57:12:af:eb:52:c4:46:e0:bc:72:a1:0d:7a:
07:7e:9f:79:b9:d1:50:a7:80:55:88:b7:28:22:93:
c4:0d:0e:dd:8a:d4:99:40:26:e3:88:3e:e9:60:66:
ab:27:19:3e:6f:94:0d:8a:b7:d8:03:42:a3:d1:c0:
cf:1e:e6:c5:22:95:77:40:29:1a:45:e0:bf:55:76:
b7:67:0a:4a:13:af:b5:06:55:bb:b4:10:52:de:59:
2e:03:39:0c:48:a8:52:98:92:f7:13:f7:26:47:ca:
d9:49:2a:0e:82:b1:ed:43:e9:4d:4d:a8:a7:22:d6:
72:f7:49:28:d4:06:17:9f:e2:57:0d:9a:0a:ef:15:
17:9f:0a:2e:25:36:fa:9c:12:eb:b4:40:b3:0b:57:
17:1d:cd:c5:49:9f:bf:28:29:e2:28:93:10:f2:3b:
fd:a1:6d:56:a7:16:6d:77:c3:c2:a2:5b:cc:e7:e7:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:B6:B1:05:84:47:F7:A6:F5:42:33:B5:5A:4C:1B:92:5C:C5:3D
X509v3 Authority Key Identifier:
keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:eb:33:6c:9c:38:12:f1:8e:d0:3e:26:e8:b1:e1:80:22:c3:
c3:be:4f:fb:30:fd:69:ea:c8:49:fc:08:a5:3f:8c:d5:ad:9f:
de:84:c3:17:81:63:0f:19:d1:30:4c:cd:f5:cb:8e:e1:f0:35:
8c:95:f2:c0:4e:64:80:52:ba:51:c0:8e:39:e2:cd:19:ea:c0:
0f:f3:cc:47:cb:cb:78:b4:e5:69:88:de:6f:89:b5:c6:2d:8f:
85:25:10:fc:9e:c3:47:50:a0:f1:65:e5:c1:a3:20:68:c6:cb:
49:ba:37:ba:59:af:1c:c5:5e:53:d8:97:05:74:35:cc:50:91:
38:09:f6:4e:a9:31:0b:58:d6:d7:2f:6b:51:ea:79:75:73:fa:
98:7a:09:99:78:54:cf:27:b1:94:22:2c:bb:5a:96:f8:7d:cc:
99:91:5c:51:0e:15:85:16:56:68:ea:a3:38:7a:48:2d:f4:d4:
18:d6:ce:74:ea:c1:d7:36:a3:54:0f:24:94:6f:c9:0d:dd:dc:
09:d9:18:e3:2d:e1:04:6a:c3:5f:0b:6d:1f:cc:a1:ea:41:dc:
ea:ca:13:ea:78:15:63:9a:e2:b1:26:f9:74:6a:be:b2:36:13:
78:b6:97:88:50:6b:46:d8:d2:73:ed:b9:86:e8:ae:11:b7:9a:
f6:e9:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:41 2026 by rpki-client