
$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json)
Hash identifier: HZ6nduWX5OtU9EP1Vky2CTiRAHfmpLLiJ/tf3ysjWYg=
Subject key identifier: 5D:60:D0:F2:BE:D6:4C:F8:31:9B:EA:12:13:88:34:48:3A:64:2A:5C
Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Certificate serial: 0789
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
Manifest number: 0784
Signing time: Tue 18 Aug 2026 21:54:26 +0000
Manifest this update: Tue 18 Aug 2026 21:54:25 +0000
Manifest next update: Tue 25 Aug 2026 21:54:25 +0000
Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: PDlzEqGDNPCT5jYz56GbFB/wRPVl+zgnXNUN1eQ3Hyc=)
2: 8C78A208009911F18C66F2A2636F56BC.roa (hash: VMBXFHKOaU6A+ngxQkXLpShoYXNNiq9XF4rBuPcDtMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Validity
Not Before: Aug 18 21:54:25 2026 GMT
Not After : Aug 25 21:54:25 2026 GMT
Subject: CN=6a84d491-7454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:8f:a2:34:f1:35:ab:98:93:ba:c5:10:a2:
a8:50:21:8b:d9:9f:a3:10:61:50:6f:b4:62:9b:62:
d1:fd:59:98:53:2a:60:f4:97:cc:1c:70:63:72:0f:
14:d0:03:57:9e:b9:08:d6:bb:85:a0:c9:92:db:6d:
81:a9:d8:f6:81:df:49:90:19:b0:db:9d:be:02:78:
04:64:2d:71:c6:93:13:31:2a:36:fb:e8:f1:1f:75:
30:4b:82:91:a1:3e:c7:77:a5:15:86:af:c1:d8:ef:
cb:9f:0a:36:58:4b:b6:82:46:97:21:6d:fe:53:92:
87:10:ea:71:e6:67:24:44:ef:d3:89:71:83:56:58:
b3:05:e5:f3:af:b2:71:68:5e:59:1d:4b:df:c3:aa:
ab:b9:95:19:d9:42:6f:6d:5c:ec:d2:08:2d:ac:52:
e9:45:6d:31:0d:a3:fa:26:b8:fc:26:60:1c:94:4d:
dd:0a:31:e8:a5:07:3c:d7:d9:f6:17:ee:35:9b:64:
10:69:cd:2b:d9:40:c0:e2:c9:51:b1:bf:9e:bb:63:
2e:7f:1e:a3:c8:d4:63:1f:e3:7f:95:f2:96:77:f3:
c0:b8:5d:32:c1:79:fa:64:46:28:4f:a7:eb:d2:28:
30:64:3b:1a:38:98:56:59:9e:54:5c:56:21:85:0d:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:D0:F2:BE:D6:4C:F8:31:9B:EA:12:13:88:34:48:3A:64:2A:5C
X509v3 Authority Key Identifier:
keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:eb:bc:18:60:78:8a:e7:0c:32:67:08:98:5c:36:87:6e:c7:
1f:a1:c3:cb:7b:d3:f0:ec:7d:dd:18:eb:0d:27:ad:cc:5d:95:
92:ac:2a:78:3b:9b:96:35:90:bd:dd:54:b8:67:36:98:a2:9c:
72:49:05:39:74:33:1f:78:29:61:37:99:87:97:df:fd:5c:61:
ae:dd:17:05:9b:63:88:47:55:3e:e5:c6:68:be:da:6d:90:7e:
61:15:80:82:e7:34:1b:f2:ca:7d:38:83:34:ce:85:f8:9e:45:
b3:84:08:a2:7f:12:27:e9:72:e3:a0:f1:d9:76:a2:20:7d:e4:
40:56:6b:49:0f:87:e4:fa:3c:14:6d:32:c8:0e:a4:c7:6d:ac:
e2:30:59:ff:e7:fe:3e:e1:fd:24:02:dc:9c:6b:29:e5:2d:c9:
3e:43:54:19:bd:09:05:6a:55:62:3d:b4:77:b6:7e:54:da:a6:
a1:4a:d0:a4:49:16:7b:be:18:c2:79:a6:5a:df:ee:c7:81:4e:
df:4f:14:26:c5:17:b9:a5:21:47:44:70:11:49:5d:0a:5a:64:
cc:bc:aa:90:32:7f:1a:0d:58:08:97:2c:76:e0:0f:52:f3:b4:
bb:c8:32:e2:5c:1b:c4:da:e7:48:be:63:7b:05:bc:c9:87:6a:
44:57:84:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM3RUExMTAvBgNVBAUTKDA5MTFFOTlBQURGNjY0RjAzOTkyOUNBQkJCNDg3NEEz
QTE2MUNBQUQwHhcNMjYwODE4MjE1NDI1WhcNMjYwODI1MjE1NDI1WjAYMRYwFAYD
VQQDEw02YTg0ZDQ5MS03NDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmQ2PojTxNauYk7rFEKKoUCGL2Z+jEGFQb7Rim2LR/VmYUypg9JfMHHBjcg8U
0ANXnrkI1ruFoMmS222Bqdj2gd9JkBmw252+AngEZC1xxpMTMSo2++jxH3UwS4KR
oT7Hd6UVhq/B2O/Lnwo2WEu2gkaXIW3+U5KHEOpx5mckRO/TiXGDVlizBeXzr7Jx
aF5ZHUvfw6qruZUZ2UJvbVzs0ggtrFLpRW0xDaP6Jrj8JmAclE3dCjHopQc819n2
F+41m2QQac0r2UDA4slRsb+eu2Mufx6jyNRjH+N/lfKWd/PAuF0ywXn6ZEYoT6fr
0igwZDsaOJhWWZ5UXFYhhQ32TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1g0PK+
1kz4MZvqEhOINEg6ZCpcMB8GA1UdIwQYMBaAFAkR6Zqt9mTwOZKcq7tIdKOhYcqt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzdFQS8xRTk2NTYzMDZB
NTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQQTVrcHlydTBoMG82Rmh5
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NSSHBtcTMyWlBBNWtweXJ1MGgwbzZGaHlxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzdFQS8xRTk2NTYzMDZBNTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQ
QTVrcHlydTBoMG82Rmh5cTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEeu8GGB4iucMMmcImFw2h27HH6HDy3vT8Ox93RjrDSetzF2VkqwqeDubljWQ
vd1UuGc2mKKcckkFOXQzH3gpYTeZh5ff/Vxhrt0XBZtjiEdVPuXGaL7abZB+YRWA
guc0G/LKfTiDNM6F+J5Fs4QIon8SJ+ly46Dx2XaiIH3kQFZrSQ+H5Po8FG0yyA6k
x22s4jBZ/+f+PuH9JALcnGsp5S3JPkNUGb0JBWpVYj20d7Z+VNqmoUrQpEkWe74Y
wnmmWt/ux4FO308UJsUXuaUhR0RwEUldClpkzLyqkDJ/Gg1YCJcsduAPUvO0u8gy
4lwbxNrnSL5jewW8yYdqRFeETA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:33 2026 by rpki-client