
$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json)
Hash identifier: yPGoXpYj/cYnzPcqYUhjrcRJ5IGVxM3Hm3dvle8Rkik=
Subject key identifier: C2:4C:80:AA:5D:FF:4E:CF:15:FF:C6:A7:94:02:C3:9E:5E:36:7D:7F
Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
Manifest number: 01F5
Signing time: Sun 05 Apr 2026 02:51:21 +0000
Manifest this update: Sun 05 Apr 2026 02:51:20 +0000
Manifest next update: Sun 12 Apr 2026 02:51:20 +0000
Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: MuYiXHekfxkcyu9w7jI3gT7lYeSuZPriqb3cexMpnbM=)
2: F451A8D61D3411F188270AE1183D8C67.roa (hash: HhAPddYZebVgFTklVhrNnb9AwfNFYy5EHwSBa4LUjG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Validity
Not Before: Apr 5 02:51:20 2026 GMT
Not After : Apr 12 02:51:20 2026 GMT
Subject: CN=69d1ce29-0f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:c1:d7:db:5c:fe:bc:98:43:99:2e:d5:cc:
c5:03:ee:c5:65:57:50:c4:c3:e7:16:04:d6:13:f5:
cc:92:47:3c:42:f3:42:c2:55:c8:cf:7f:27:ef:37:
a1:22:31:20:9e:93:f5:21:f3:5c:05:16:57:8c:ae:
e3:e3:e6:e1:96:67:ba:ca:0b:70:47:2c:e9:88:5d:
5f:eb:65:dc:bb:2f:61:f6:79:93:99:5e:b5:fc:f7:
d8:e0:ad:b7:cd:88:c3:2d:86:20:0e:f6:04:68:1a:
eb:62:dc:8b:8d:e8:2d:c6:14:7b:57:eb:5d:3a:d4:
85:43:a6:3c:b4:e0:60:41:15:49:76:9b:26:4f:6a:
bd:22:b3:a2:87:1d:1f:51:ca:62:59:f8:11:b5:0f:
bb:10:c8:21:c0:9a:1d:7b:e7:46:69:a1:e6:81:54:
30:de:e3:6e:66:01:61:7f:21:d7:4b:ec:72:1b:7b:
3b:5d:23:e4:d0:37:dc:19:cc:2c:99:7c:c1:66:d7:
ba:27:f0:dc:b7:0f:6b:89:95:bb:64:5b:be:bf:d8:
2b:10:44:dd:e4:6a:04:8f:67:b0:6f:5a:f2:a9:c9:
47:b4:b7:c5:60:7b:21:86:5b:4c:6f:c2:f7:97:09:
ef:2d:36:76:09:c8:a9:f7:a6:6a:e7:8a:a5:ea:1e:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:80:AA:5D:FF:4E:CF:15:FF:C6:A7:94:02:C3:9E:5E:36:7D:7F
X509v3 Authority Key Identifier:
keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:17:38:b0:d6:6e:33:ee:40:15:9a:9f:23:07:18:de:73:ec:
73:fb:89:9b:d1:b4:2c:44:a8:03:b6:0e:05:af:0f:4d:05:55:
93:14:4d:f2:71:42:71:cd:1e:7e:b8:24:75:f7:40:16:0a:f0:
ce:3e:8d:29:e7:67:8e:7a:9d:61:98:8d:15:53:44:24:ec:cc:
5e:95:80:23:13:cb:22:19:2f:9b:e6:fa:09:7b:94:94:9a:f6:
21:97:26:2d:19:28:07:01:4a:2c:70:08:8c:2d:da:bd:af:cb:
8d:42:8c:9d:ad:23:97:1f:e7:72:2d:e1:ec:d1:42:83:8f:bf:
ca:03:77:06:8e:67:db:04:55:20:7a:b1:27:28:00:73:c4:40:
a7:8a:ae:a0:54:5a:4b:bc:c3:2e:ee:50:47:77:57:b7:7e:20:
6a:99:4b:15:9b:b8:65:b2:b4:0a:fd:f5:e3:3b:f6:72:65:56:
37:79:57:35:19:30:99:a6:9e:00:16:96:c8:ec:b7:a1:9c:ff:
be:36:3c:d3:65:af:29:96:1b:f6:b4:8b:3d:ec:16:b1:b2:40:
0e:a2:2c:0b:3a:51:21:a2:9b:ef:36:b9:3b:51:90:2e:94:30:
59:25:ca:40:91:5c:3d:a1:01:e4:61:42:6e:57:fc:5d:6f:96:
dc:b7:04:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG
MTkyQjhBRjkwHhcNMjYwNDA1MDI1MTIwWhcNMjYwNDEyMDI1MTIwWjAYMRYwFAYD
VQQDEw02OWQxY2UyOS0wZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaDB19tc/ryYQ5ku1czFA+7FZVdQxMPnFgTWE/XMkkc8QvNCwlXIz38n7zeh
IjEgnpP1IfNcBRZXjK7j4+bhlme6ygtwRyzpiF1f62Xcuy9h9nmTmV61/PfY4K23
zYjDLYYgDvYEaBrrYtyLjegtxhR7V+tdOtSFQ6Y8tOBgQRVJdpsmT2q9IrOihx0f
UcpiWfgRtQ+7EMghwJode+dGaaHmgVQw3uNuZgFhfyHXS+xyG3s7XSPk0DfcGcws
mXzBZte6J/Dctw9riZW7ZFu+v9grEETd5GoEj2ewb1ryqclHtLfFYHshhltMb8L3
lwnvLTZ2Ccip96Zq54ql6h61wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJMgKpd
/07PFf/Gp5QCw55eNn1/MB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2
M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3
Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxc4sNZuM+5AFZqfIwcY3nPsc/uJm9G0LESoA7YOBa8PTQVVkxRN8nFCcc0e
frgkdfdAFgrwzj6NKednjnqdYZiNFVNEJOzMXpWAIxPLIhkvm+b6CXuUlJr2IZcm
LRkoBwFKLHAIjC3ava/LjUKMna0jlx/nci3h7NFCg4+/ygN3Bo5n2wRVIHqxJygA
c8RAp4quoFRaS7zDLu5QR3dXt34gaplLFZu4ZbK0Cv314zv2cmVWN3lXNRkwmaae
ABaWyOy3oZz/vjY802WvKZYb9rSLPewWsbJADqIsCzpRIaKb7za5O1GQLpQwWSXK
QJFcPaEB5GFCblf8XW+W3LcEpA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:52 2026 by rpki-client