
$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json)
Hash identifier: SYbDM4CjnDh6UfzMCu18keHLG6xf9dR7cmToiq6T1og=
Subject key identifier: D2:4F:E3:CA:8A:91:F2:18:F4:7F:B7:03:25:A1:AF:A2:00:2E:17:F1
Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Certificate serial: 06C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
Manifest number: 06BF
Signing time: Tue 04 Nov 2025 22:12:39 +0000
Manifest this update: Tue 04 Nov 2025 22:12:37 +0000
Manifest next update: Tue 11 Nov 2025 22:12:37 +0000
Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: PGaYGhy3QPd1xVQz5VvwV60op0m8AEFrgj8MdOpUMPk=)
2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: FCcszwJptQkcVppu2l7EfA+c1nSvvhedE2ZFRuB0CdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Validity
Not Before: Nov 4 22:12:37 2025 GMT
Not After : Nov 11 22:12:37 2025 GMT
Subject: CN=690a7a56-7336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:00:87:93:12:55:03:a6:48:03:4b:1c:24:
c0:b8:fb:57:0a:78:0e:fb:ce:b2:63:f4:de:fb:ab:
5e:c9:36:a3:cc:77:0f:f7:2e:16:4e:ec:14:f7:77:
14:a7:c2:a6:94:3f:95:1f:49:8f:49:13:1f:5b:31:
d7:d7:83:14:48:72:53:0b:32:ef:6b:8a:7c:f7:5f:
68:03:63:a5:1b:51:d5:ab:c6:e8:a2:05:c3:58:9d:
ce:30:ef:de:7c:a1:8d:3c:af:ce:c3:d3:98:75:3d:
15:f9:b4:c3:83:bc:61:7d:26:2c:92:d9:b1:d2:b1:
06:0e:39:fb:37:1f:7e:1c:82:88:03:91:88:df:40:
f7:e0:d4:3d:7e:eb:53:d9:3b:1c:b3:cb:53:0d:ab:
19:27:02:97:a1:3a:3f:23:d8:a3:8f:6f:30:e8:67:
a7:95:36:b3:0d:2b:ad:21:e9:0d:41:42:5f:ff:f6:
e6:57:9f:dd:4e:53:f7:06:eb:bc:ea:89:6f:c7:16:
38:e7:8b:f3:af:d4:a9:41:b5:e1:2d:ec:35:cb:7d:
88:70:2c:a2:c3:e1:22:29:63:7f:c0:4c:5c:63:88:
01:a1:32:69:c3:1b:87:95:54:77:ca:dd:2c:ef:0b:
af:c1:1a:62:5e:ac:19:12:8a:ef:45:37:25:98:fb:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:E3:CA:8A:91:F2:18:F4:7F:B7:03:25:A1:AF:A2:00:2E:17:F1
X509v3 Authority Key Identifier:
keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:80:51:7b:4c:f2:c2:1a:80:a2:4f:35:68:ef:b5:1a:0f:fc:
06:db:53:e6:9e:7e:71:3a:95:4b:61:21:53:3c:0a:b3:de:91:
6e:e1:5a:eb:f4:3d:ac:4d:6d:49:79:e3:b2:c3:50:b1:c7:80:
2d:8a:c1:e4:84:cf:86:6c:ed:34:d0:f6:09:75:ae:e5:f9:78:
49:9b:17:30:be:71:cd:94:a9:cc:bb:28:83:9a:82:6b:71:d2:
0e:46:f7:2d:cf:71:eb:95:18:49:2d:2f:2d:51:d4:3a:f7:b5:
e8:2c:52:23:db:f0:5a:52:0b:76:6a:ed:4f:26:10:90:3a:d2:
18:7f:44:43:d0:2e:25:9b:8e:56:4f:42:fa:dc:03:04:1f:47:
86:0f:73:59:aa:87:02:37:72:6d:49:d5:e5:08:44:6b:72:97:
e8:33:eb:55:d4:fe:5c:13:24:db:fa:2b:48:c0:05:ee:59:76:
d8:ee:fd:c2:bc:48:f3:e2:17:cb:f9:58:4a:ba:8a:19:f5:f9:
0b:4e:7a:ad:fc:8a:a9:dd:f8:5a:9e:ac:37:d0:b9:34:90:02:
59:cb:f6:22:7e:3a:dc:6f:9d:f6:d4:61:57:a2:f1:96:d7:aa:
4a:92:31:19:0d:f5:34:5f:ff:d4:b3:ba:54:d4:53:d8:fc:6c:
96:f8:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:10 2025 by rpki-client