
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier: bihHkq/ldU4tFziYL6l33gUZaxeLULkum42iAsZhjNc=
Subject key identifier: 55:EA:AE:58:62:BE:79:AE:E7:3D:47:4B:B8:31:33:1E:E5:4C:47:F0
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number: 01B5
Signing time: Wed 07 Oct 2026 04:28:17 +0000
Manifest this update: Wed 07 Oct 2026 04:28:16 +0000
Manifest next update: Wed 14 Oct 2026 04:28:16 +0000
Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: Wl8+HWtOm3gjxQO4r8amUDW68BsvL1q0g9G8Fpr1uY8=)
2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: aiPj5qLmPxh3oQRYi1d6G2G9c+URYkn5SsXHLLb5NHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Validity
Not Before: Oct 7 04:28:16 2026 GMT
Not After : Oct 14 04:28:16 2026 GMT
Subject: CN=6ac5ca61-9670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:c7:fe:0f:1d:15:20:a7:fc:fa:97:f8:5e:
ae:46:4b:61:6b:80:8b:f7:d7:ee:86:57:62:12:95:
33:f9:a0:29:19:e5:83:cd:46:7f:17:c6:f4:f1:f4:
0a:0f:ae:d7:a3:15:80:fd:63:53:1f:a0:1f:3c:41:
60:84:5d:33:2b:d5:34:02:cd:8b:65:d3:f5:12:61:
3c:ae:55:b9:32:fb:e6:81:4a:da:3a:3d:7c:9b:8e:
be:22:4b:31:7c:58:e3:aa:f9:f6:72:c0:ca:c3:7b:
de:5f:17:1d:fc:8a:88:53:68:94:9f:43:05:b4:9d:
0b:0c:36:f7:d4:96:d8:d0:19:cf:f3:49:44:67:39:
68:a8:4e:61:32:90:21:98:5b:68:21:f3:4a:88:46:
d6:13:1c:75:e5:19:e0:96:c3:a1:30:32:23:e7:cc:
4c:0c:03:42:02:e0:b1:40:34:dc:02:91:9d:3e:3a:
5a:3a:e3:f1:eb:e1:3d:d7:50:3c:38:84:39:71:52:
69:dc:5d:03:bd:d0:fb:50:57:5e:79:b7:f7:b3:1c:
b3:9e:ad:a4:8f:1e:b3:f7:e3:04:f1:83:1e:d5:a3:
28:55:89:54:49:15:b7:f5:23:85:ff:38:93:5e:9e:
fe:69:7b:46:2b:3e:bd:c6:53:a8:70:0d:8a:2c:1c:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:AE:58:62:BE:79:AE:E7:3D:47:4B:B8:31:33:1E:E5:4C:47:F0
X509v3 Authority Key Identifier:
keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:41:b5:82:14:d1:22:0e:ed:0f:97:01:54:b8:22:77:c1:df:
84:31:8e:38:2c:8f:0b:c6:36:0d:0d:f4:7d:6f:27:80:56:a9:
3b:e1:1f:0e:be:fc:a5:18:d4:cb:59:4a:67:7a:21:aa:53:48:
9f:89:68:20:57:a0:ff:0b:3a:90:54:7f:67:ee:86:47:0e:f9:
0f:f7:f1:cf:85:09:2a:ca:8a:7e:bd:39:2d:43:68:88:4e:05:
95:f4:8c:dc:e4:91:95:5a:74:c8:11:e9:6f:cb:ae:a3:57:63:
1e:13:dd:fa:50:77:ef:c6:f9:f6:a6:95:4a:be:c5:0e:2d:58:
9d:cc:28:f6:2c:08:a8:7e:78:e8:c9:3b:55:1c:d8:2c:26:45:
5b:8d:c4:23:ae:cf:b9:5a:2d:6c:e4:5c:63:96:1c:79:9b:1c:
0c:ef:64:b8:a0:c9:7a:1b:b4:61:60:53:e5:db:74:eb:44:45:
25:d3:c6:01:d3:33:79:4c:1d:a6:2d:ec:bb:6f:45:48:22:d0:
78:5c:8f:d1:30:f5:38:c8:5c:c2:b5:ad:f8:80:6e:b3:5f:6c:
e2:b1:5f:61:3e:69:1f:9b:c7:dd:47:12:a1:bd:72:6a:b5:9f:
23:e1:90:d9:2b:86:de:3c:c0:1b:69:4a:cf:b3:8a:0a:c2:8e:
5b:b0:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:12:00 2026 by rpki-client