
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier: L6K8t2FXQQHInmE7itP7AHbOXJzB939t0n/FWVTTUJk=
Subject key identifier: BF:90:68:AA:35:6C:6E:0F:E1:66:2A:E6:AE:BB:7D:AC:5A:2A:59:65
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number: 018E
Signing time: Thu 23 Jul 2026 05:51:56 +0000
Manifest this update: Thu 23 Jul 2026 05:51:55 +0000
Manifest next update: Thu 30 Jul 2026 05:51:55 +0000
Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: /FnudgsZYTvs/4uUz/fiRll8+6/QdxsSYSRzNanjMX4=)
2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: aiPj5qLmPxh3oQRYi1d6G2G9c+URYkn5SsXHLLb5NHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Validity
Not Before: Jul 23 05:51:55 2026 GMT
Not After : Jul 30 05:51:55 2026 GMT
Subject: CN=6a61abfc-cd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:20:1e:cd:bd:32:e1:df:ac:2a:dd:15:46:
3d:8c:e7:4f:60:53:32:66:36:9f:e2:f2:27:3f:14:
d0:f3:12:80:ee:4b:a6:ce:0f:89:0a:53:5e:3e:c2:
9e:00:4b:89:70:f4:e1:a4:69:78:b9:00:a4:86:21:
6c:86:f1:91:3e:a1:76:08:36:e0:d0:90:fa:b2:cb:
cc:ac:f5:36:4f:03:1e:a5:8f:0b:83:19:6c:b7:d4:
13:a2:cb:19:b3:97:6a:47:65:9f:bc:c0:1a:01:9f:
58:f2:ef:ea:9d:be:0a:91:81:73:26:d6:94:06:c7:
5f:02:8f:79:25:2d:bf:f9:c1:48:eb:a1:56:8f:53:
61:01:87:53:55:27:ba:31:e2:05:a0:b6:fd:ea:28:
a4:f4:5a:b6:3e:81:32:f0:bf:ec:7c:68:b9:f3:43:
3c:d8:04:49:e2:89:ea:f2:0f:2e:ad:5f:c8:5d:15:
54:c0:f9:e5:a4:23:87:31:23:f1:44:ac:7f:b2:39:
f8:3d:07:20:09:a3:69:00:a3:3e:4c:cb:27:e5:1e:
a3:a6:a3:90:2e:72:d3:c7:3f:0a:75:6a:a0:90:25:
ca:78:fd:08:e2:bb:77:f1:70:c0:f8:e6:8a:d4:59:
40:ac:5e:c6:ca:d5:26:60:b8:8b:45:f3:ae:f7:8d:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:68:AA:35:6C:6E:0F:E1:66:2A:E6:AE:BB:7D:AC:5A:2A:59:65
X509v3 Authority Key Identifier:
keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:a1:a1:6e:8e:6a:55:c5:c5:a5:4c:2c:38:75:38:db:13:
4d:01:ae:bd:d2:c2:01:cb:1a:f9:af:1c:94:15:37:ad:1c:ab:
4a:2d:d7:c4:34:ff:e7:bf:69:9c:56:fa:98:fd:2c:a8:76:fb:
0e:fb:31:9c:ec:20:63:89:ff:bf:54:14:60:cf:dd:6c:dd:09:
81:5f:85:38:f3:84:13:d4:44:c7:ec:94:a5:4b:2c:31:a7:a9:
b2:12:ba:bf:fb:fb:88:d5:b5:d5:d4:bd:55:4e:24:e7:b2:49:
d9:44:1d:1a:d6:39:c9:a7:c8:b8:b1:b6:81:90:ca:84:6f:8e:
6d:6a:69:fb:0c:b0:97:50:95:e5:72:94:2a:07:c4:45:ae:2c:
35:ed:e5:02:87:d3:fd:2f:4e:8d:88:ed:46:5b:ff:6b:fe:b3:
b9:7d:60:73:a5:91:33:d1:24:26:fa:38:bb:0b:0b:26:fc:86:
b6:81:fe:06:ef:2f:ae:8f:0e:34:17:31:e1:c3:90:d9:8b:bb:
0c:54:32:6b:1a:c7:97:19:2c:db:c2:76:3b:f5:9b:03:93:d9:
5e:62:41:8e:27:27:02:87:4b:ca:6b:73:09:c3:e5:ce:82:99:
04:ab:52:3f:8e:e1:88:f9:b3:1b:87:87:3f:1f:1f:22:6a:50:
00:aa:c2:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhFRUIxMTAvBgNVBAUTKEE2MTk5NTBDQ0E2NDY0ODdBQjlCRDQ0QTQxRjdGNkM5
QjQwOUIzRDcwHhcNMjYwNzIzMDU1MTU1WhcNMjYwNzMwMDU1MTU1WjAYMRYwFAYD
VQQDEw02YTYxYWJmYy1jZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5DAgHs29MuHfrCrdFUY9jOdPYFMyZjaf4vInPxTQ8xKA7kumzg+JClNePsKe
AEuJcPThpGl4uQCkhiFshvGRPqF2CDbg0JD6ssvMrPU2TwMepY8Lgxlst9QTossZ
s5dqR2WfvMAaAZ9Y8u/qnb4KkYFzJtaUBsdfAo95JS2/+cFI66FWj1NhAYdTVSe6
MeIFoLb96iik9Fq2PoEy8L/sfGi580M82ARJ4onq8g8urV/IXRVUwPnlpCOHMSPx
RKx/sjn4PQcgCaNpAKM+TMsn5R6jpqOQLnLTxz8KdWqgkCXKeP0I4rt38XDA+OaK
1FlArF7GytUmYLiLRfOu943zzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+QaKo1
bG4P4WYq5q67faxaKlllMB8GA1UdIwQYMBaAFKYZlQzKZGSHq5vUSkH39sm0CbPX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEVFQi9GNDkxMTQ4MDJC
QzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJZXJtOVJLUWZmMnliUUpz
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEVFQi9GNDkxMTQ4MDJCQzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJ
ZXJtOVJLUWZmMnliUUpzOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUEChoW6OalXFxaVMLDh1ONsTTQGuvdLCAcsa+a8clBU3rRyrSi3XxDT/579p
nFb6mP0sqHb7DvsxnOwgY4n/v1QUYM/dbN0JgV+FOPOEE9REx+yUpUssMaepshK6
v/v7iNW11dS9VU4k57JJ2UQdGtY5yafIuLG2gZDKhG+ObWpp+wywl1CV5XKUKgfE
Ra4sNe3lAofT/S9OjYjtRlv/a/6zuX1gc6WRM9EkJvo4uwsLJvyGtoH+Bu8vro8O
NBcx4cOQ2Yu7DFQyaxrHlxks28J2O/WbA5PZXmJBjicnAodLymtzCcPlzoKZBKtS
P47hiPmzG4eHPx8fImpQAKrCjg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:03 2026 by rpki-client