
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json)
Hash identifier: ymhSI8f9jQ5CshltbJtiNh9mM6XE4bkbqNwRElm4ftA=
Subject key identifier: 8D:41:4D:A4:D5:B9:96:BB:C3:77:08:78:66:ED:AF:2E:D4:6B:5C:32
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
Manifest number: E1
Signing time: Wed 23 Sep 2026 06:29:01 +0000
Manifest this update: Wed 23 Sep 2026 06:29:01 +0000
Manifest next update: Wed 30 Sep 2026 06:29:01 +0000
Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: DXE/Dtn3n+vnaqaKl5F3B+E34gRN7Q2YS0N/xke1mIo=)
2: FCD28A70629911F1B304DBAA9547A888.roa (hash: ToHkUPANxhil4tua2mZwYLRs1IHTvdoyrpN1GN7PO44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Validity
Not Before: Sep 23 06:29:01 2026 GMT
Not After : Sep 30 06:29:01 2026 GMT
Subject: CN=6ab371ad-db04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:e8:33:cc:2e:92:a6:68:a7:17:c2:98:00:
a0:e0:81:02:a4:bf:2e:40:cf:65:ea:b6:f6:67:4a:
e1:e1:7d:b9:6a:2a:3a:b7:2e:7d:98:cc:28:b4:25:
f1:c4:7b:e5:73:fd:49:78:95:28:60:b3:72:a3:73:
56:b4:0b:d3:67:d1:0d:2e:47:4a:4c:2d:2f:34:e4:
44:17:6e:92:b1:0a:87:93:a2:70:28:95:7d:69:26:
b8:a3:3e:a8:ae:46:03:8e:41:ec:c1:e7:f4:e4:06:
04:94:72:fd:bd:b0:1e:75:51:d2:d3:59:a5:3d:a0:
f1:81:df:09:1f:6d:98:20:f4:d7:36:c4:06:8d:6c:
85:c9:c0:a2:4f:eb:22:bc:83:83:76:eb:57:e9:c8:
cc:82:19:eb:bb:37:cc:28:7b:00:bd:15:d9:a0:1d:
f5:fb:2a:97:75:17:a8:14:53:be:53:dd:f4:e6:eb:
f7:1d:d5:83:66:75:85:7d:1a:51:19:ae:25:66:23:
89:b0:9d:d7:f1:94:98:88:1c:2a:92:b5:04:ac:ea:
f5:14:2a:e7:5a:40:b6:db:df:ea:ea:a6:7c:d4:05:
63:37:0c:22:6f:0d:d5:28:2d:1b:a7:15:1a:06:67:
8f:74:9f:b3:35:97:18:6f:2a:60:6a:fd:42:19:72:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:4D:A4:D5:B9:96:BB:C3:77:08:78:66:ED:AF:2E:D4:6B:5C:32
X509v3 Authority Key Identifier:
keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:f9:32:c3:a8:77:f6:b2:4d:9a:67:4d:40:8e:83:55:95:3b:
04:00:e9:b4:0c:7e:97:6b:e4:6c:fe:c9:29:48:ce:6a:a0:a1:
70:d8:d1:b0:e1:82:7e:84:86:0b:83:bf:3b:7c:68:21:8d:2d:
22:f9:0f:86:ea:32:a9:07:58:6d:9b:bc:30:09:6d:a9:4a:e7:
4c:59:f4:33:9c:62:b3:a7:f7:ef:fc:d3:d8:0d:54:94:43:bf:
c6:72:62:1b:58:af:0f:fc:77:ea:38:88:90:1e:1b:1e:b6:03:
2a:7f:9a:fa:a2:c0:7c:8b:db:86:b7:ec:3a:bb:4f:11:4d:4d:
50:b7:58:1c:67:6a:9e:2b:0b:22:ab:18:74:43:5f:9f:92:bb:
b5:60:57:8d:cb:4b:c9:d6:ff:cd:4b:08:ba:d9:07:dd:0e:db:
cd:ec:2a:3a:e5:bb:2d:ac:12:b8:5b:b5:c9:3c:23:30:89:1b:
79:19:e5:92:58:ea:e5:70:35:b4:ad:67:ab:a3:f2:67:df:39:
0d:58:1e:3e:3b:12:49:1a:2b:c8:e4:db:9f:89:ad:1d:70:11:
74:cf:8e:f8:e7:87:87:03:c4:8b:95:ea:14:9d:c1:aa:a8:c5:
28:76:8a:5a:3d:31:92:8c:b1:a5:26:3d:43:75:f0:3e:46:c6:
d4:0a:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:39:37 2026 by rpki-client