
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier: 8SwYMz1GPAcT8Bl5DQ4yLVwYzmJgxnzlnSHDI3Zf8Sk=
Subject key identifier: E9:8F:01:E0:23:FF:D7:1F:9A:A7:49:15:B4:08:05:33:30:7C:E4:E7
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number: 0533
Signing time: Thu 23 Jul 2026 00:19:33 +0000
Manifest this update: Thu 23 Jul 2026 00:19:33 +0000
Manifest next update: Thu 30 Jul 2026 00:19:33 +0000
Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: s8glfEXKnHKCcpwjPftmiJqqYRLGri7CNr7hxCjf5tE=)
2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: 9qp1lem8CW69t4ERqtAKFfiD84cfJ8z0cZZ7sr2Va70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Validity
Not Before: Jul 23 00:19:33 2026 GMT
Not After : Jul 30 00:19:33 2026 GMT
Subject: CN=6a615e15-37b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:22:09:1b:dd:fa:87:83:23:cb:40:d9:4a:
5e:24:2a:91:56:aa:4e:6b:f4:ca:71:70:77:b5:1b:
b1:85:53:39:52:70:ea:cd:64:28:f8:1a:d3:b3:7c:
9c:44:f7:0b:42:7d:f2:db:52:a4:b4:57:bb:52:42:
a8:ec:a0:90:b6:9b:2a:c3:c9:92:26:9e:0a:1f:fd:
d3:ce:21:9f:36:ae:9f:a2:e3:14:7a:c9:dc:4b:4d:
83:60:54:02:8c:95:f3:11:32:c3:80:d8:1c:52:74:
34:ad:7e:22:db:7f:87:76:d7:83:2c:b9:e6:57:33:
f1:12:98:e5:08:c4:3f:ba:80:68:ee:9c:78:77:97:
4c:87:a4:f5:33:c0:ee:32:70:a0:1e:d0:36:82:ab:
77:c5:52:f2:14:6c:ce:48:52:68:8e:9b:f6:d0:9e:
fa:ed:60:48:da:17:50:58:71:8f:26:39:5a:c3:89:
dd:f6:0e:ae:03:db:50:19:58:91:7f:ec:90:12:fe:
e1:ac:5d:a8:18:40:0f:1a:e0:4f:8f:9b:5e:6c:f6:
d1:be:24:1a:36:16:a8:7f:3b:16:26:db:b3:5f:ce:
da:9e:9e:f8:8e:14:f0:0f:11:c0:81:19:12:aa:b4:
14:47:71:cf:b4:1f:72:2b:7e:01:b9:b4:78:22:e7:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:01:E0:23:FF:D7:1F:9A:A7:49:15:B4:08:05:33:30:7C:E4:E7
X509v3 Authority Key Identifier:
keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:27:a0:b5:50:a2:bb:0e:48:a5:90:e3:8a:98:99:3a:36:e6:
f1:33:d5:8f:06:0e:d2:b8:c9:b8:a7:fa:96:bf:fe:09:17:09:
5f:5d:b1:3c:bc:b2:8b:87:13:ed:44:b9:b9:4e:79:80:2b:6b:
d3:0f:e4:5f:9b:22:23:c2:5e:ce:25:c9:f8:f5:ca:88:fd:30:
ad:eb:23:a4:82:59:b1:eb:58:fb:35:7f:d6:bf:48:e3:7d:ff:
93:e2:aa:74:fc:b5:cb:33:75:2d:3c:60:85:79:b8:d2:15:62:
05:1c:1d:0f:b9:c4:ea:c6:38:9f:ce:f7:d7:37:d4:ca:81:40:
3c:c9:c3:f7:1a:5c:31:5c:77:32:5d:d7:00:a8:e2:6f:ca:46:
62:ab:4c:78:3f:5f:a7:b2:5d:63:e2:a2:59:37:e6:6b:e7:e6:
68:71:e7:b9:ee:61:e4:4a:a6:92:d5:f4:56:a9:0f:0b:38:82:
49:ca:c6:ba:48:a0:d9:0f:15:0f:bc:e3:52:bc:4c:2d:66:e3:
31:79:45:40:c0:65:f3:f5:2b:c7:bf:3a:f9:15:61:be:f6:68:
65:d3:4b:c8:dd:76:f3:3e:7c:d3:19:3d:f5:b9:5a:25:6c:9a:
ab:6c:67:97:cf:e6:4a:fc:c6:a6:9e:19:61:7b:ed:42:c5:92:
44:3b:d3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:46 2026 by rpki-client