
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier: /bQg1SWVPR67LtVRj75ebieGqVkO6UWx/TI7rUHRBMQ=
Subject key identifier: F9:DA:BA:B9:C6:D4:9B:4A:66:BF:D4:4A:17:CF:FB:E9:1A:24:74:0F
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number: 01AE
Signing time: Wed 23 Sep 2026 03:54:53 +0000
Manifest this update: Wed 23 Sep 2026 03:54:53 +0000
Manifest next update: Wed 30 Sep 2026 03:54:53 +0000
Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: dwdostzgzd+SAfJuzIb88Wxxvbq1UHFGrfqn4lSfvP4=)
2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: aiPj5qLmPxh3oQRYi1d6G2G9c+URYkn5SsXHLLb5NHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Validity
Not Before: Sep 23 03:54:53 2026 GMT
Not After : Sep 30 03:54:53 2026 GMT
Subject: CN=6ab34d8d-b93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:1a:18:2e:93:86:92:b2:7e:e7:8b:e2:e6:
6c:7d:ec:18:23:6f:df:63:7c:7e:d2:68:91:ab:48:
09:d1:51:bb:2e:34:73:7e:a1:46:a1:fe:05:5b:2e:
0c:7a:9b:33:68:4b:78:e4:22:6c:db:c8:f1:81:95:
99:50:95:ba:4b:0d:91:27:e4:63:54:09:30:b2:1d:
11:a5:dc:5b:b5:f2:07:58:c1:46:8f:fd:98:e6:f6:
a3:97:82:73:9d:d0:b7:90:84:91:f9:61:00:73:d7:
1e:05:90:15:b6:42:a0:2c:60:eb:39:c1:37:5b:ec:
5b:71:82:78:2a:fe:ee:54:17:50:60:ba:a2:58:2a:
fb:9d:b7:ac:9e:af:fb:ea:b5:9b:6d:b1:b4:51:7a:
cb:6a:57:8a:b6:5d:85:f6:86:78:ea:ce:ce:90:d0:
a2:09:18:9b:d6:8f:96:18:5f:6e:60:6c:9a:51:97:
2d:67:83:0a:bf:34:a7:6f:32:57:85:7c:63:cf:55:
cb:b5:78:b3:e1:f8:6b:2c:09:a8:a6:97:20:01:b7:
c1:6f:e2:01:ee:f5:b9:ee:14:5f:fd:aa:f2:2a:bc:
d2:b9:52:84:61:d9:91:74:61:9f:96:11:a7:c6:b9:
dc:ae:40:b2:03:1e:d8:4c:87:a7:03:b1:6c:4f:b0:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:BA:B9:C6:D4:9B:4A:66:BF:D4:4A:17:CF:FB:E9:1A:24:74:0F
X509v3 Authority Key Identifier:
keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:17:bd:6a:31:36:bf:b1:c6:27:ed:a8:a7:ca:02:f6:b5:
37:65:9d:94:d9:ca:ce:33:82:ab:8a:5a:63:49:ae:be:95:59:
7f:1b:bf:ac:d9:4e:e3:d7:f3:52:cd:34:1b:44:c0:f2:0a:8c:
c4:93:44:05:9a:e6:24:76:02:de:8d:8a:f2:35:3f:74:39:9f:
f9:7e:57:d2:3c:4c:f8:60:b4:d1:fb:a2:1d:74:c9:ff:63:44:
f0:19:5d:d6:8e:fa:38:bf:b8:5e:75:ae:a6:e1:68:58:20:fa:
2f:c0:40:f3:8a:6a:7d:b6:47:83:03:c1:09:a9:08:c3:43:1c:
80:cd:b0:6e:22:ac:6a:11:6e:2a:3d:e6:c5:b2:92:43:3e:10:
19:cc:68:61:58:61:c9:09:1b:1f:a2:d1:b9:72:c7:83:d8:5b:
9f:91:57:76:6f:eb:e2:2e:44:2a:0a:8f:34:7e:bb:8a:51:86:
6e:50:0b:1d:79:e5:dd:ba:81:92:bc:19:a3:ac:3a:70:55:e3:
2f:9a:81:77:6a:c5:df:c7:28:e0:24:b3:7a:b5:2e:b1:17:b7:
8b:ed:2b:d8:2c:7e:9d:c6:c4:0e:73:e1:ed:55:c9:47:68:b6:
d1:9c:71:08:8c:5e:1b:34:92:73:f5:99:7e:99:12:87:a4:28:
78:24:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:36:20 2026 by rpki-client