
$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json)
Hash identifier: UOgoXowsiIHb4jjUwub4VY8Sk86MHLfQxZSkUsr09Jg=
Subject key identifier: A0:60:34:15:E0:60:8C:55:E2:0A:A1:85:88:B7:38:B5:CD:D9:E5:FA
Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
Manifest number: 0101
Signing time: Wed 25 Mar 2026 05:29:26 +0000
Manifest this update: Wed 25 Mar 2026 05:29:25 +0000
Manifest next update: Wed 01 Apr 2026 05:29:25 +0000
Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: ipfdoLEXc2/+r5+C+acfnAxW8Z5SqbcbI7+w/ymxHKM=)
2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: ma5n+VgMOHF8r7XS1ZfkMv4ZgmFMIOVQuS8WnKvthzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl
rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Validity
Not Before: Mar 25 05:29:25 2026 GMT
Not After : Apr 1 05:29:25 2026 GMT
Subject: CN=69c372b6-71db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:ef:4b:eb:7b:61:a0:e0:6a:74:9e:4d:df:
fd:d8:56:af:ee:65:48:cb:13:91:a4:96:38:6d:8c:
12:80:75:28:83:ca:a3:b8:7c:e0:9c:09:c6:bf:2b:
32:5e:6c:54:32:63:34:a3:25:5c:b3:2e:46:96:98:
2d:60:22:6f:68:56:bc:59:e5:5e:d7:79:09:1e:0c:
4e:34:07:45:0d:0a:e0:0f:25:6c:7b:fc:51:a3:2e:
b9:81:09:f6:8d:6f:26:fd:93:25:4e:93:4f:75:09:
df:6b:27:4d:33:f5:05:74:d0:a1:c2:ef:aa:81:75:
84:6c:01:65:44:7d:62:4a:4b:94:71:fa:00:81:8f:
3f:57:a8:40:38:0e:4d:3e:78:8a:f4:d8:b7:f7:c5:
b1:fa:26:7d:a2:39:d2:86:17:2e:c5:33:3a:31:77:
84:bf:68:77:5e:41:cb:70:2b:5d:00:b5:44:af:3a:
48:c1:c5:7b:55:1a:d7:74:57:c0:b8:cb:53:7b:05:
55:19:2d:5c:30:d4:82:65:3e:86:95:b9:b1:05:b9:
4b:07:35:53:54:b8:72:04:5b:95:71:48:d9:a0:c4:
a8:01:95:d8:9b:8d:0a:51:b7:d1:0f:ca:cc:6c:a5:
e6:aa:95:f4:ae:a6:16:95:f7:78:10:f0:f7:05:02:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:34:15:E0:60:8C:55:E2:0A:A1:85:88:B7:38:B5:CD:D9:E5:FA
X509v3 Authority Key Identifier:
keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:2b:df:44:87:b0:d1:c3:20:fc:e7:96:6f:81:36:e2:f4:15:
33:86:45:9a:2d:3a:33:66:ac:ec:85:6c:83:b4:45:1d:4f:9b:
4f:a6:42:17:6b:08:b4:33:11:b9:37:21:59:a7:2f:db:ec:b7:
83:68:b1:e6:b9:77:5f:0f:86:23:13:99:15:1c:fb:1a:16:80:
e5:05:fb:48:52:85:45:42:88:0d:da:0f:5c:76:c5:f1:2c:3a:
a5:fc:01:26:76:70:a1:ce:3c:cf:67:e8:b7:9c:c0:36:ca:37:
06:10:17:1c:2e:32:6b:16:c3:2a:f3:55:82:85:28:2c:f1:36:
7b:7e:c7:07:3a:53:0b:86:f1:3c:c6:41:dc:37:71:a4:9d:b3:
b5:f2:65:b8:b1:ef:25:46:b2:3e:9f:57:42:5c:e8:49:44:06:
9b:ce:3d:c8:55:04:70:9d:49:b1:d2:10:38:a3:3e:99:f8:03:
36:db:52:33:a5:c1:61:2b:4a:91:9b:26:d8:89:04:f8:6c:8b:
f2:d3:81:94:d0:50:cd:4a:85:5b:20:16:0e:a7:bf:39:4d:b1:
13:97:92:4f:ca:5b:79:6c:12:2c:13:16:c7:d9:36:2c:d1:b4:
04:f3:47:d8:d8:e2:b7:e9:88:6d:7f:1f:d2:af:b6:2b:fb:96:
34:e3:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:50 2026 by rpki-client