
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json)
Hash identifier: adt/QkhvVYmkkrLExVUK2fd3TH/qM2+cvdWK4F8J/wY=
Subject key identifier: C4:3E:AB:47:16:46:6E:A0:AE:4C:8C:32:24:43:EB:59:67:C4:BB:7A
Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58
Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
Manifest number: 028C
Signing time: Tue 23 Jun 2026 01:54:59 +0000
Manifest this update: Tue 23 Jun 2026 01:54:58 +0000
Manifest next update: Tue 30 Jun 2026 01:54:58 +0000
Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: ZZfau89ozAPColNO47D7eJWL+tW4oFGjKROenrB17wA=)
2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: mpFx+GVvx2W568CfIz+VjIPScWb9y6xnHlbKs64HIb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl
rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158
Validity
Not Before: Jun 23 01:54:58 2026 GMT
Not After : Jun 30 01:54:58 2026 GMT
Subject: CN=6a39e772-d815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:a0:28:61:34:fb:0a:d3:7e:41:55:67:f5:
53:93:7d:8d:c8:c5:5c:17:28:ba:70:59:8d:93:9b:
27:08:66:e4:82:3a:9a:57:de:77:d7:79:30:97:08:
c5:c2:2d:6d:a4:20:ce:78:8d:fa:e5:e9:e7:a4:64:
33:54:f2:f3:e0:95:67:65:cb:8e:19:5a:fd:be:1d:
10:30:3b:9d:ff:19:68:4e:40:64:02:b5:e2:2c:f6:
2a:bf:71:c3:cc:cd:54:ee:62:a4:2f:dc:18:22:1f:
27:a0:f2:8f:03:25:87:cc:6f:04:59:27:a3:47:76:
08:7b:60:39:8f:38:73:ee:11:3a:c8:94:7f:1a:32:
0c:d2:66:7e:57:aa:6d:a8:32:dd:b8:aa:62:ce:cd:
85:53:18:15:8b:61:a0:ee:75:3c:09:6c:2e:22:e2:
c4:1d:7f:a9:d3:e1:91:71:81:64:b1:92:da:0d:95:
50:e8:c9:57:67:cd:6f:39:7a:19:90:a7:01:58:8e:
61:c3:34:18:fd:20:4e:eb:0d:b0:eb:f5:a2:d4:fe:
89:ce:a7:2c:dd:a6:87:40:a7:c8:e2:b9:93:25:4b:
87:00:34:1e:b6:c4:63:70:c8:04:69:de:23:65:30:
98:d0:db:6b:8f:cc:61:b4:f6:26:01:bd:07:83:90:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:AB:47:16:46:6E:A0:AE:4C:8C:32:24:43:EB:59:67:C4:BB:7A
X509v3 Authority Key Identifier:
keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:ee:40:85:b4:f5:dd:2b:54:41:e4:71:bc:17:be:6a:ab:
35:a8:25:e5:9b:14:8f:70:ca:15:5d:9a:c3:98:8d:21:8f:dd:
3c:c1:50:d1:71:bd:c6:b5:1d:b9:72:79:15:e9:4c:8a:42:f1:
6f:a1:0d:40:03:b4:1c:c8:24:3d:eb:b3:4f:2c:be:3f:06:f1:
9d:6c:60:1a:e5:31:80:69:37:b2:65:54:87:4a:35:d6:c9:b3:
d2:18:b9:bd:ac:bb:dc:85:9d:98:a8:cf:4c:dc:1c:d9:35:41:
14:6f:aa:af:e2:ef:52:1d:44:7d:95:c2:a6:7a:2f:c1:94:d2:
45:42:f8:0d:37:b9:a8:16:38:fd:b7:9c:67:06:ef:33:33:ab:
db:ed:09:12:6b:4f:d9:4f:14:52:6d:5d:60:8a:d2:b1:cd:be:
5d:e3:8a:ca:ca:f7:e7:c1:f5:68:d3:37:ee:1c:7c:b9:32:74:
0f:6d:74:98:8c:3f:ec:3b:ed:61:c1:4d:29:e2:58:e9:53:d2:
33:91:11:bf:e1:24:ab:74:1f:29:ef:3d:7c:7b:59:43:70:fd:
47:0c:97:60:fc:d0:63:b1:c7:81:c3:90:24:97:ef:8e:97:66:
d9:a6:5a:44:f4:21:96:27:45:83:03:62:c2:04:e6:b6:0f:37:
aa:d8:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:49 2026 by rpki-client