$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json) Hash identifier: 8SaV1ZC9Ol6ceJBnRitNWlsQ/d+t159u5J1e8pziIH8= Subject key identifier: D3:6D:27:DB:13:EB:06:B9:9C:E2:2F:24:94:82:BE:6D:1F:59:DA:E7 Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft Manifest number: 0151 Signing time: Fri 27 Mar 2026 04:36:17 +0000 Manifest this update: Fri 27 Mar 2026 04:36:17 +0000 Manifest next update: Fri 03 Apr 2026 04:36:17 +0000 Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: 0aqKHvJw7cGQJqwPXYHt6X1hJhBnzqCNvwKHcVOEeNs=) 2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: 5zSKSO1TFv0mTwgoY0ZOhZuFyBmGCxVoUvH/4Rl0pPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Validity Not Before: Mar 27 04:36:17 2026 GMT Not After : Apr 3 04:36:17 2026 GMT Subject: CN=69c60941-27b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:2a:fb:48:11:3c:bb:e1:31:33:f2:44:14: 8d:b0:2a:60:74:de:71:e6:c1:ba:2a:87:57:14:6a: 5d:ca:7a:c9:cd:81:2e:fe:9b:1f:08:a8:9f:de:e4: 67:83:9d:39:8b:cb:a9:ab:d8:22:ba:be:be:ee:c4: e1:3a:c2:d6:e7:fd:1f:b0:f4:65:f4:23:97:76:90: ad:f7:f2:19:e2:83:56:40:a3:40:a2:af:0c:5e:3a: 2e:61:cf:55:fd:85:43:02:9c:87:2c:24:35:c5:71: ea:8c:32:1b:c5:f9:f7:38:91:0f:59:b1:48:d2:b4: 19:9e:3f:97:0e:be:3f:78:f8:3b:0b:bd:d9:59:92: 9a:f6:9e:d5:f2:69:f7:57:5b:37:b1:6e:e2:8f:11: 8a:ca:13:f2:d6:2e:c0:5f:19:f1:cf:1e:ee:23:c0: 45:c0:05:e5:bf:17:e9:70:c4:f3:b0:74:cb:48:8b: d7:05:9b:0a:a7:f9:8e:72:75:61:9b:f1:fb:e2:44: 74:d0:04:0e:3e:b2:81:47:7c:0e:3b:35:0d:cc:68: e8:c8:c8:e0:5d:29:da:96:c5:85:96:5f:36:0b:48: f3:b4:c3:1b:5c:fa:e5:37:b2:71:e2:e7:27:e7:de: 00:7a:ea:39:16:eb:96:eb:88:89:87:26:dd:67:4d: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:27:DB:13:EB:06:B9:9C:E2:2F:24:94:82:BE:6D:1F:59:DA:E7 X509v3 Authority Key Identifier: keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:8d:b4:43:23:e8:00:cf:7a:86:87:8b:98:55:f2:0b:cf:dd: 5e:06:0a:6d:8c:71:47:ea:60:6f:3e:95:27:b7:b5:d8:70:c6: 65:89:05:91:17:c2:c2:5b:5c:a2:a0:9c:3d:fd:e3:3f:4b:cb: 02:f3:ef:93:9d:f7:fa:ce:08:7c:54:e8:a8:d3:94:10:28:11: f5:e3:ae:dd:28:c8:fa:64:dd:34:e1:72:d1:59:4f:3a:67:b1: 00:9b:d0:21:9a:03:05:d3:8f:7b:33:3b:40:3e:2b:31:01:24: b7:22:d5:e4:d0:e9:4c:9f:61:42:5e:4c:ed:3a:10:47:cc:2f: b3:6e:41:33:94:44:e5:d3:17:96:91:9f:16:ca:1b:66:d6:9e: 8e:f1:9e:87:5d:58:11:ef:a1:22:6e:4b:b0:35:6e:ab:e9:ed: 8b:8e:ef:9d:13:a3:20:82:c7:8b:b6:69:3e:eb:bc:0c:af:de: 33:b2:0e:97:d4:af:e6:82:24:7a:b7:40:9e:18:2c:f7:78:26: fa:8d:29:2a:6c:de:20:6b:c2:c8:12:0f:a4:58:12:24:6f:17: b7:38:1b:a4:78:ad:e3:8e:27:a3:c0:ed:d7:b4:69:9e:a3:dc: 6c:07:6c:2f:7a:fc:66:28:dd:e1:fa:be:d5:a1:5a:d3:86:8f: 0d:94:42:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFRUIxMTAvBgNVBAUTKEE2MTk5NTBDQ0E2NDY0ODdBQjlCRDQ0QTQxRjdGNkM5 QjQwOUIzRDcwHhcNMjYwMzI3MDQzNjE3WhcNMjYwNDAzMDQzNjE3WjAYMRYwFAYD VQQDEw02OWM2MDk0MS0yN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpsq+0gRPLvhMTPyRBSNsCpgdN5x5sG6KodXFGpdynrJzYEu/psfCKif3uRn g505i8upq9giur6+7sThOsLW5/0fsPRl9COXdpCt9/IZ4oNWQKNAoq8MXjouYc9V /YVDApyHLCQ1xXHqjDIbxfn3OJEPWbFI0rQZnj+XDr4/ePg7C73ZWZKa9p7V8mn3 V1s3sW7ijxGKyhPy1i7AXxnxzx7uI8BFwAXlvxfpcMTzsHTLSIvXBZsKp/mOcnVh m/H74kR00AQOPrKBR3wOOzUNzGjoyMjgXSnalsWFll82C0jztMMbXPrlN7Jx4ucn 594Aeuo5FuuW64iJhybdZ00uSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNtJ9sT 6wa5nOIvJJSCvm0fWdrnMB8GA1UdIwQYMBaAFKYZlQzKZGSHq5vUSkH39sm0CbPX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEVFQi9GNDkxMTQ4MDJC QzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJZXJtOVJLUWZmMnliUUpz OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEVFQi9GNDkxMTQ4MDJCQzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJ ZXJtOVJLUWZmMnliUUpzOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvI20QyPoAM96hoeLmFXyC8/dXgYKbYxxR+pgbz6VJ7e12HDGZYkFkRfCwltc oqCcPf3jP0vLAvPvk533+s4IfFToqNOUECgR9eOu3SjI+mTdNOFy0VlPOmexAJvQ IZoDBdOPezM7QD4rMQEktyLV5NDpTJ9hQl5M7ToQR8wvs25BM5RE5dMXlpGfFsob ZtaejvGeh11YEe+hIm5LsDVuq+nti47vnROjIILHi7ZpPuu8DK/eM7IOl9Sv5oIk erdAnhgs93gm+o0pKmzeIGvCyBIPpFgSJG8XtzgbpHit444no8Dt17RpnqPcbAds L3r8Zijd4fq+1aFa04aPDZRCFQ== -----END CERTIFICATE-----Generated at Sat Mar 28 08:42:19 2026 by rpki-client