
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json)
Hash identifier: EzI4f0pVyFidfVy7RKg9Z9bPF/lzjfu5jCAdX5VYkdo=
Subject key identifier: E8:BE:65:ED:92:1D:C5:14:59:CB:38:B7:DB:7C:07:98:75:8E:58:9D
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
Manifest number: 6E
Signing time: Sun 01 Mar 2026 09:17:27 +0000
Manifest this update: Sun 01 Mar 2026 09:17:26 +0000
Manifest next update: Sun 08 Mar 2026 09:17:26 +0000
Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: TYXuc9xQPSdDaTMn4GGYqTagxCf2pjf/gtXl/3Ckzh0=)
2: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: PAvwTfnZ/W9fr7RnaDWJUDQG4Z1oLxvvzVFavJSMKUc=)
3: F8E93410A85C11F0A2A48E76C4F9AE02.roa (hash: uSc+a7UP/AciXljHJWSm6FJ7cB1ozyvjX6O58aed8lU=)
4: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: tj++9M2lVWEa5egkhERYRXuWpoUuhAiNGmVaKo9CiAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Validity
Not Before: Mar 1 09:17:26 2026 GMT
Not After : Mar 8 09:17:26 2026 GMT
Subject: CN=69a40426-c055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:85:48:8a:11:fe:36:fb:89:2e:35:f3:75:
84:16:38:ee:9c:39:70:ba:5f:9b:0c:b7:1b:d8:0c:
09:c8:23:4c:a6:98:d1:33:ef:0b:52:e6:f1:7b:f3:
73:93:88:ab:cc:97:8c:9f:9e:24:f4:16:29:31:98:
b1:8e:b2:13:c5:34:d6:30:f6:3d:0b:5b:5e:9c:bf:
c0:b4:c7:6d:86:90:27:30:95:77:42:89:ea:e3:43:
f3:46:05:d5:e1:75:fd:d4:4a:8e:88:cb:48:df:d7:
89:e3:dc:12:87:95:1d:17:b4:55:67:0e:81:5d:32:
6d:cd:31:31:61:e1:85:94:b0:08:14:00:8b:90:f3:
9c:d9:b3:37:8b:72:f0:6b:69:ae:f0:3e:b0:0a:90:
41:42:72:de:71:cc:a6:19:3d:90:03:26:e5:3a:0f:
f9:1a:a3:92:57:a7:9d:7e:ff:d6:3d:eb:d0:90:40:
03:41:52:55:ee:e7:a2:aa:13:20:7f:3c:70:45:77:
83:29:8f:07:00:67:46:cd:ad:55:18:95:ef:28:c9:
0f:32:ef:60:7e:60:3a:55:fd:3f:54:26:6b:07:75:
00:40:b1:d0:bf:a3:8e:e3:76:d5:37:d2:aa:86:82:
6d:3f:16:48:c7:f4:16:74:03:16:c2:d8:c5:1f:2a:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:65:ED:92:1D:C5:14:59:CB:38:B7:DB:7C:07:98:75:8E:58:9D
X509v3 Authority Key Identifier:
keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:0e:f2:25:25:48:35:2c:29:e6:77:f5:72:46:01:54:14:
0a:be:9d:40:94:d7:73:91:bf:58:a6:1e:85:38:1a:4f:66:23:
66:dc:f0:3a:4a:06:67:25:5b:2a:14:03:0f:b6:89:13:9c:cf:
a2:2f:96:db:d7:85:e4:3e:14:72:c0:fc:21:6e:16:99:58:dd:
95:19:c5:7b:00:73:e2:ea:8e:c3:55:b0:3f:6c:55:21:5f:d7:
10:24:8c:fd:35:90:d6:1f:e7:0a:bb:75:dd:60:28:9a:b4:7d:
a8:26:08:b1:a1:ae:17:7b:b6:22:8f:9f:89:ae:7d:67:60:f1:
05:35:3d:ca:f0:63:1e:4c:8e:18:8a:1e:c6:b7:dc:29:9b:69:
e3:ed:c1:63:d8:a9:65:60:a6:aa:ff:dd:08:97:07:5b:bc:c7:
fd:32:cb:3f:d8:26:3d:1f:ee:f2:7a:85:82:41:11:aa:4c:77:
bd:5c:5d:35:93:da:dd:16:06:e6:47:7f:39:99:5c:ee:21:d0:
24:08:1b:a8:18:b1:b5:76:a9:33:cb:f0:9c:a2:70:09:d3:50:
a9:5c:84:a3:1d:dc:8c:53:d2:f7:c9:fc:7a:62:ac:7e:da:da:
b5:80:23:c3:ad:70:1d:dd:88:39:29:d9:cc:ea:40:7a:fa:fe:
90:b0:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:34 2026 by rpki-client