
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier: FF4W9+AHJZqA7WgmAnVQk+fJokWKPh7rIKQ7y+9CdXQ=
Subject key identifier: E8:1E:65:D5:36:49:27:23:CA:D8:81:86:21:9B:5C:0B:9F:2D:1A:D5
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number: 01FE
Signing time: Sun 01 Mar 2026 03:56:55 +0000
Manifest this update: Sun 01 Mar 2026 03:56:55 +0000
Manifest next update: Sun 08 Mar 2026 03:56:55 +0000
Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: 8Iga0x/8+5ZbgfwVfgqg93YiR7BBFmPL0wOSn2K17tU=)
2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: 3WTSm0ARO6OxYTvyrfdEmxZEWxigI2p51l76SgzYhn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Validity
Not Before: Mar 1 03:56:55 2026 GMT
Not After : Mar 8 03:56:55 2026 GMT
Subject: CN=69a3b907-0cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:c3:aa:19:86:a5:26:aa:d1:df:b0:e2:3f:
8f:53:8c:a4:5d:6a:88:87:a2:73:bb:64:06:28:da:
f6:3b:55:04:b5:7c:7b:37:29:9c:a4:45:d7:6f:f5:
d8:a5:ae:23:90:f8:9d:93:ff:59:61:80:38:8c:31:
1b:84:0b:89:09:08:b6:f1:34:11:ff:63:84:3d:c2:
75:ad:2a:a2:fa:8e:e0:19:b8:ba:b2:c7:24:13:c1:
cc:d4:4e:ba:90:49:a6:ac:cd:6d:a7:64:29:84:af:
70:e5:15:b9:d5:2d:9b:f8:cb:73:59:f1:ad:49:15:
39:ba:34:2c:4d:ff:2d:4c:fb:42:a7:3b:1c:62:60:
b6:28:30:e0:af:0c:5e:7f:94:c4:8e:c0:f9:e0:34:
e5:16:c5:c2:72:ed:90:45:45:77:cf:71:be:4a:c5:
9f:89:f9:6a:6c:c5:e0:27:88:58:bb:a2:53:af:79:
5c:8f:ad:57:74:6b:fc:fc:55:b9:87:3f:b6:11:6a:
f2:84:20:5b:21:ae:e0:cd:b1:0e:5b:83:a2:25:b1:
dc:fc:ad:72:01:f0:40:7b:bb:f9:a8:32:36:d1:89:
c8:0b:37:49:85:6b:8f:08:8f:e4:e7:64:be:07:86:
0b:99:c8:9b:3b:56:e0:8c:a4:45:47:75:3d:04:a2:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:65:D5:36:49:27:23:CA:D8:81:86:21:9B:5C:0B:9F:2D:1A:D5
X509v3 Authority Key Identifier:
keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:8f:36:86:57:1a:ae:c6:5c:cb:97:d2:18:7a:f5:51:c9:fb:
9f:86:78:95:6d:62:41:cf:35:71:27:80:95:8a:9c:d0:60:6b:
74:07:b3:b3:f3:16:77:8a:79:9c:ae:ae:01:b7:4f:1c:99:4a:
bd:b4:99:00:96:3d:82:cb:1a:3d:d9:ff:73:10:b0:73:64:e5:
3f:45:31:6c:73:dd:a8:26:2f:8c:4a:dd:41:a9:93:e7:a0:ce:
86:96:58:86:ce:f5:04:66:b4:15:6f:de:ed:47:c1:f5:ef:48:
64:9a:bc:ae:8d:27:48:d3:28:52:c3:3e:56:c5:d5:ad:e3:71:
2b:7a:f6:a2:50:9e:22:e1:49:ca:bd:63:ca:04:50:3a:fa:66:
81:2b:37:ad:a1:91:90:0e:6c:0f:c5:a7:42:1d:ec:56:b8:54:
fc:d8:41:a5:c1:13:de:c4:de:11:0b:ca:8b:0e:79:ca:ee:5d:
96:c2:c0:ec:2e:4b:47:c9:11:2d:1c:29:d1:02:40:f7:8e:7b:
c0:ac:9a:9b:ed:f4:49:fd:0a:6f:7a:8b:b2:f5:b2:55:ff:54:
a4:60:6d:00:bb:1b:f2:f2:43:51:3b:bb:39:21:89:13:0c:3a:
4c:28:1e:9c:94:dc:5d:d1:a7:ea:3a:fc:7c:5b:9f:56:97:c7:
e6:0d:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:00 2026 by rpki-client