
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json)
Hash identifier: O9fRF/VZPrQPunFbcTUdBqIGEPJ5k1oRMX1iXFdXC0Q=
Subject key identifier: 1A:5A:1D:80:D4:A2:DF:1B:14:19:7A:FD:58:52:81:FB:A1:5F:A3:6C
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
Manifest number: E2
Signing time: Fri 25 Sep 2026 06:45:39 +0000
Manifest this update: Fri 25 Sep 2026 06:45:39 +0000
Manifest next update: Fri 02 Oct 2026 06:45:39 +0000
Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: dyapZeIqNJpep1FmtjdIIn+NV/OFv/28rUdSsaDjDe4=)
2: FCD28A70629911F1B304DBAA9547A888.roa (hash: ToHkUPANxhil4tua2mZwYLRs1IHTvdoyrpN1GN7PO44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Validity
Not Before: Sep 25 06:45:39 2026 GMT
Not After : Oct 2 06:45:39 2026 GMT
Subject: CN=6ab61893-a10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:2a:1f:2f:60:d1:e0:0b:7e:ae:d3:ba:bb:
87:28:2c:2f:70:96:3d:59:e3:49:a4:f5:e5:49:36:
9d:cf:23:28:d0:53:7a:da:b1:cb:e0:1c:61:dd:86:
f0:5f:45:d1:b5:db:ab:6d:96:f4:e9:36:27:4f:1c:
ef:85:ac:6f:fb:68:81:5b:cf:d6:55:3d:cf:18:a3:
d5:08:e6:ec:49:f4:80:a7:e6:51:80:54:3e:67:ca:
da:ac:bc:09:6e:37:2c:c1:0e:58:62:53:df:0a:d7:
aa:87:61:cc:0e:d9:c6:07:13:c5:31:77:a9:38:a5:
fa:59:c2:c7:d3:8e:99:fe:55:81:80:c0:3f:2a:60:
cb:27:b0:9e:26:da:0a:7a:72:4d:66:9f:18:4d:7c:
85:94:45:45:74:fd:0e:f8:7c:3d:5a:47:64:d8:e5:
b1:2c:2c:b7:83:02:a9:5c:02:1f:10:d9:46:6e:03:
20:a5:05:01:2a:24:38:90:8e:ae:9e:53:f0:63:b7:
b5:c6:33:cd:ca:80:35:e6:0f:6b:fb:3a:7b:6b:8b:
70:90:6e:06:d6:e8:e4:98:9e:cf:f6:c0:ce:39:cc:
c3:e8:ab:b0:2b:ab:e9:9f:20:d3:fa:1c:6c:21:0e:
c3:63:b9:25:db:ce:52:5f:04:36:12:03:31:8a:48:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:1D:80:D4:A2:DF:1B:14:19:7A:FD:58:52:81:FB:A1:5F:A3:6C
X509v3 Authority Key Identifier:
keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bf:f2:c0:b6:c5:83:f2:cd:07:8e:ac:9f:90:43:b1:35:ed:
59:4d:7c:6e:74:60:9d:a0:99:74:6a:67:80:42:d4:90:ba:58:
d3:f2:b3:96:57:47:99:53:43:cd:54:56:96:4f:09:b5:5f:f5:
f4:5c:23:05:ce:95:a1:f3:b0:25:a3:8a:6c:6c:1d:06:d4:37:
f6:92:0a:02:8c:28:05:b8:03:7b:3f:8f:49:50:e7:62:50:5a:
7b:9f:dd:ca:ec:f3:e0:3a:59:ad:7d:78:77:72:0c:b3:ea:ac:
f5:ba:3f:91:09:ae:6d:9f:6d:96:8f:ed:6c:05:cb:66:98:19:
1c:d5:e7:56:6e:42:01:2d:42:32:20:2a:e2:0c:bc:d3:13:7b:
04:6e:d5:52:de:17:e5:33:8c:55:8b:53:73:0d:83:be:c7:7e:
03:a6:82:9f:b6:a3:d2:87:4d:fc:1d:51:2c:ee:e9:8e:8b:8d:
cd:db:64:d7:93:3a:4e:49:05:d7:07:66:f5:93:34:f7:ae:70:
7f:e8:2f:94:74:a7:b7:72:3e:77:6d:1c:6f:0c:d6:45:df:84:
41:e6:0d:3b:f4:d9:ec:71:e9:8c:79:2c:c8:79:84:0c:7c:bf:
04:a6:7f:e1:53:ad:e2:f2:14:17:40:0e:91:37:f7:e7:73:e3:
e9:49:18:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM1REUxMTAvBgNVBAUTKEE2MTM2RTUwRTk0OThFMDQ5RDBCNEQyRjE4NjdGQTFC
MTg5MUM0RUYwHhcNMjYwOTI1MDY0NTM5WhcNMjYxMDAyMDY0NTM5WjAYMRYwFAYD
VQQDEw02YWI2MTg5My1hMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvscqHy9g0eALfq7TuruHKCwvcJY9WeNJpPXlSTadzyMo0FN62rHL4Bxh3Ybw
X0XRtdurbZb06TYnTxzvhaxv+2iBW8/WVT3PGKPVCObsSfSAp+ZRgFQ+Z8rarLwJ
bjcswQ5YYlPfCteqh2HMDtnGBxPFMXepOKX6WcLH046Z/lWBgMA/KmDLJ7CeJtoK
enJNZp8YTXyFlEVFdP0O+Hw9Wkdk2OWxLCy3gwKpXAIfENlGbgMgpQUBKiQ4kI6u
nlPwY7e1xjPNyoA15g9r+zp7a4twkG4G1ujkmJ7P9sDOOczD6KuwK6vpnyDT+hxs
IQ7DY7kl285SXwQ2EgMxikh0KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpaHYDU
ot8bFBl6/VhSgfuhX6NsMB8GA1UdIwQYMBaAFKYTblDpSY4EnQtNLxhn+hsYkcTv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzVERS84NzYyQ0QxQTc0
MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpnU2RDMDB2R0dmNkd4aVJ4
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzVERS84NzYyQ0QxQTc0MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpn
U2RDMDB2R0dmNkd4aVJ4TzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqr/ywLbFg/LNB46sn5BDsTXtWU18bnRgnaCZdGpngELUkLpY0/KzlldHmVND
zVRWlk8JtV/19FwjBc6VofOwJaOKbGwdBtQ39pIKAowoBbgDez+PSVDnYlBae5/d
yuzz4DpZrX14d3IMs+qs9bo/kQmubZ9tlo/tbAXLZpgZHNXnVm5CAS1CMiAq4gy8
0xN7BG7VUt4X5TOMVYtTcw2Dvsd+A6aCn7aj0odN/B1RLO7pjouNzdtk15M6TkkF
1wdm9ZM0965wf+gvlHSnt3I+d20cbwzWRd+EQeYNO/TZ7HHpjHksyHmEDHy/BKZ/
4VOt4vIUF0AOkTf353Pj6UkYtw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:30:03 2026 by rpki-client