
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier: +HvcPwaKUwFs7B3M1x7L+VVPuK5fZDCkH+hF4NiRcII=
Subject key identifier: 1C:81:B7:65:BA:95:2A:92:E4:3E:48:3A:4D:E3:83:5D:AD:57:73:1C
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number: 0248
Signing time: Thu 23 Jul 2026 03:40:45 +0000
Manifest this update: Thu 23 Jul 2026 03:40:44 +0000
Manifest next update: Thu 30 Jul 2026 03:40:44 +0000
Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: QODRG6BGqgbMoeOye6zr2SCicuBTaxo+B4GeKYfqZ3U=)
2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: ZFhHCFeUOh6APH456On8FdyIkUmcfvvz5IW62S7F69c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Validity
Not Before: Jul 23 03:40:44 2026 GMT
Not After : Jul 30 03:40:44 2026 GMT
Subject: CN=6a618d3d-657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:60:f8:a7:9f:67:86:38:ae:b8:26:f7:2f:
9a:56:fc:86:ff:0d:71:9d:63:6e:0b:8c:bf:7e:e1:
97:4c:f9:9b:85:01:96:b2:9c:f5:e8:80:57:ef:fb:
a0:9e:36:14:05:36:3a:b5:f6:7b:e2:42:8d:2d:ee:
f1:c8:57:a7:fe:56:3c:e0:c6:04:36:7b:a6:a9:a7:
a7:ec:30:e6:19:f3:61:e5:4e:bc:a7:d6:83:78:60:
d7:1f:bd:7f:cb:d4:04:81:5b:80:2e:03:c5:1e:c6:
20:64:31:f1:4b:35:a4:a2:bf:7e:09:75:59:43:39:
d4:3f:45:13:f1:e0:04:6f:e8:dc:94:da:88:7b:17:
7f:35:a2:76:86:bc:bf:93:92:22:08:72:72:12:97:
a9:51:dc:fe:cc:15:80:12:99:5e:53:70:68:9e:23:
aa:60:94:75:a5:59:1b:e0:47:01:f9:39:2d:b3:06:
21:13:b7:5e:f1:6f:0b:03:5c:df:42:5c:c3:b9:97:
00:09:99:d8:9c:b0:42:99:c0:d2:0e:d2:ef:97:b6:
b9:37:3a:17:de:39:52:d4:de:0f:38:66:ed:92:9e:
b3:07:26:10:3e:e2:47:4f:99:0f:46:0b:a0:f8:54:
1c:5a:2a:f7:f9:b7:0a:89:bb:96:e8:37:b8:59:a8:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:81:B7:65:BA:95:2A:92:E4:3E:48:3A:4D:E3:83:5D:AD:57:73:1C
X509v3 Authority Key Identifier:
keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d9:24:3f:4b:58:25:9b:7b:e8:77:d5:5b:68:dc:e1:a4:84:
24:ed:26:e6:95:81:06:d6:ab:da:50:77:14:32:73:1c:08:0f:
bc:2c:bd:f1:8c:f7:2f:a8:a2:72:5b:9c:3d:75:2d:30:5c:8f:
32:6b:5f:a9:4a:20:fd:9b:c5:55:d4:61:d7:2b:bd:e5:2a:3a:
29:7d:e9:b2:d2:a5:f3:19:1e:7d:bf:fe:e4:b3:91:7e:e5:42:
f7:fa:88:5b:8e:f5:8d:e0:33:f3:cd:34:6f:b9:ad:76:dc:25:
d0:d4:39:c6:df:a6:b7:cb:6e:78:98:73:11:08:9b:77:70:83:
6b:a8:e4:7d:3b:d4:40:dd:ed:92:98:6f:37:52:d9:bc:b2:8a:
60:12:b2:30:32:e5:a1:20:3e:29:87:eb:97:22:5f:ac:e1:0b:
8f:51:e8:b6:78:f8:69:f8:5a:61:d8:9b:1a:51:d8:aa:85:3a:
b0:f8:98:ce:9d:30:78:f4:a8:27:e1:f9:53:3a:09:0b:69:cf:
29:f0:4d:3b:28:17:23:15:88:40:50:fd:3f:1e:b1:2b:f8:7c:
ea:0f:e9:f4:e6:8f:ee:c7:a0:20:ac:50:90:f3:b7:c9:8f:20:
82:b6:e2:ed:30:68:e8:15:16:a1:0b:e1:13:6d:91:9c:e0:d2:
5b:d1:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:11 2026 by rpki-client