
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier: f7JBIVBlixqBCssbrwuz7WTee4LGJ9nB+RnauTSTvL8=
Subject key identifier: 69:8C:FE:EE:39:30:28:A3:6E:44:CA:2B:AF:77:13:C5:12:FA:EF:D1
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial: 04FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number: 04F6
Signing time: Tue 24 Mar 2026 23:23:50 +0000
Manifest this update: Tue 24 Mar 2026 23:23:50 +0000
Manifest next update: Tue 31 Mar 2026 23:23:50 +0000
Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: UroSG8q4YdSO+nA6jWcRN+SCIOLrKRQwXdadooTWJhQ=)
2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: 9qp1lem8CW69t4ERqtAKFfiD84cfJ8z0cZZ7sr2Va70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Validity
Not Before: Mar 24 23:23:50 2026 GMT
Not After : Mar 31 23:23:50 2026 GMT
Subject: CN=69c31d06-1bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:d7:0a:66:d5:ff:3f:aa:cc:99:c2:1c:12:
14:16:8b:59:9d:0d:9b:43:ac:94:42:b1:15:01:44:
ac:4d:4e:ab:a0:79:06:4d:7a:5c:ba:84:c6:d7:f2:
6a:56:69:fc:36:49:b9:82:3c:f3:29:0c:41:3b:bb:
76:15:92:04:65:74:ee:1b:ab:c1:39:f3:0c:43:1e:
75:57:aa:17:d1:4e:51:19:b5:5f:17:99:fc:5b:51:
62:3a:9b:a8:1b:ec:e5:84:a4:a9:f2:26:51:17:78:
86:98:39:45:b8:12:d5:79:79:06:e5:bd:40:a3:bc:
7b:24:08:56:fd:03:e1:06:45:a9:53:9f:b2:46:40:
ee:dd:a7:e6:52:2c:df:bf:37:c5:7c:42:e6:63:40:
d2:44:08:03:36:0c:a0:69:01:1b:9e:22:e1:e7:81:
a8:ba:dd:9f:76:be:81:67:e4:54:db:e3:db:53:f7:
aa:b3:50:e9:00:51:dd:36:34:9d:b2:d2:6d:35:cf:
4c:1a:68:67:93:2b:0c:20:86:d9:f3:2c:d6:04:51:
16:77:f3:09:5d:37:21:a2:37:36:9f:c4:4b:a7:46:
02:35:20:d6:0e:55:b2:50:9a:b2:c2:36:b3:c3:46:
9e:94:ad:49:b7:ea:6e:52:95:78:2c:5e:b8:c3:9e:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:FE:EE:39:30:28:A3:6E:44:CA:2B:AF:77:13:C5:12:FA:EF:D1
X509v3 Authority Key Identifier:
keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d9:37:7f:00:03:57:59:4c:ea:f0:66:38:6a:35:9c:b1:56:
22:f6:57:32:a7:31:ec:0e:52:ab:4c:21:b2:2e:c2:e5:ce:46:
bb:ab:dd:b6:35:cc:c4:19:5a:cf:c6:e4:59:d6:72:23:4e:42:
20:93:43:9d:65:3d:56:10:1b:ef:7d:3e:d0:42:d5:40:f2:33:
d5:e9:28:50:b4:4d:6a:4b:85:72:07:e3:14:b2:d7:e6:26:5d:
82:cc:63:a6:0e:11:4d:73:10:a0:d7:cc:03:cc:24:b3:a0:f1:
c7:dc:3c:17:84:27:7a:db:b6:79:ba:af:b9:1e:b9:e0:a4:aa:
df:ed:e0:d0:1b:90:d2:dd:b0:09:7a:b0:ea:b2:c6:2c:e3:04:
c7:4f:c1:6a:8c:ec:3b:01:7e:1b:af:a7:9b:92:e5:f1:f6:3e:
bc:2f:7d:2f:37:cb:21:fb:57:c6:f5:6f:8f:83:a9:e9:bd:65:
97:b6:54:94:e4:cd:ff:77:f9:8a:d3:24:ff:8a:e5:c9:7e:e5:
9d:3a:58:2f:f8:62:80:7c:47:cc:4b:f3:3b:3c:8c:68:4e:9a:
25:cc:e9:6c:1e:ce:f9:2b:5d:76:ea:df:3a:43:96:33:a2:69:
34:32:9d:d0:01:76:4f:a0:f6:92:3d:89:06:74:45:94:47:6b:
8c:c5:1e:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC
NjNBMzhBMUUwHhcNMjYwMzI0MjMyMzUwWhcNMjYwMzMxMjMyMzUwWjAYMRYwFAYD
VQQDEw02OWMzMWQwNi0xYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMzXCmbV/z+qzJnCHBIUFotZnQ2bQ6yUQrEVAUSsTU6roHkGTXpcuoTG1/Jq
Vmn8Nkm5gjzzKQxBO7t2FZIEZXTuG6vBOfMMQx51V6oX0U5RGbVfF5n8W1FiOpuo
G+zlhKSp8iZRF3iGmDlFuBLVeXkG5b1Ao7x7JAhW/QPhBkWpU5+yRkDu3afmUizf
vzfFfELmY0DSRAgDNgygaQEbniLh54Gout2fdr6BZ+RU2+PbU/eqs1DpAFHdNjSd
stJtNc9MGmhnkysMIIbZ8yzWBFEWd/MJXTchojc2n8RLp0YCNSDWDlWyUJqywjaz
w0aelK1Jt+puUpV4LF64w55O+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmM/u45
MCijbkTKK693E8US+u/RMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy
MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB
Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyNk3fwADV1lM6vBmOGo1nLFWIvZXMqcx7A5Sq0whsi7C5c5Gu6vdtjXMxBla
z8bkWdZyI05CIJNDnWU9VhAb730+0ELVQPIz1ekoULRNakuFcgfjFLLX5iZdgsxj
pg4RTXMQoNfMA8wks6Dxx9w8F4Qnetu2ebqvuR654KSq3+3g0BuQ0t2wCXqw6rLG
LOMEx0/BaozsOwF+G6+nm5Ll8fY+vC99LzfLIftXxvVvj4Op6b1ll7ZUlOTN/3f5
itMk/4rlyX7lnTpYL/higHxHzEvzOzyMaE6aJczpbB7O+StddurfOkOWM6JpNDKd
0AF2T6D2kj2JBnRFlEdrjMUeUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:46 2026 by rpki-client