
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json)
Hash identifier: 8Dwy5JOA88dJpTK4drfsPCKgxPHGOsF7OXGZuLNZ2K4=
Subject key identifier: E2:71:64:36:96:2A:56:50:CC:50:B8:2E:D5:EF:4F:94:33:0C:8A:0B
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
Manifest number: 0672
Signing time: Tue 18 Aug 2026 22:55:37 +0000
Manifest this update: Tue 18 Aug 2026 22:55:36 +0000
Manifest next update: Tue 25 Aug 2026 22:55:36 +0000
Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: DEMyj4Qnrt8wtyrEpg4eoX7HWFynbYH9NRWXgW2lL0E=)
2: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: bttXyvGRSnxbc9IqusEl+T2G/n5JCfKaRYUIxoL6AJY=)
3: 872A7C2A73A111F0A653E239C4F9AE02.roa (hash: aLBbHZ0z6EwLjL4acWQAIzpbt7awrFZgLAhV/2XiXbY=)
4: 8FE569EC776B11F0B156EB5AC4F9AE02.roa (hash: otC5p4t4WNHAZP81Ee6/+NMcxus0F0HMPZEzDJb4uWg=)
5: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: QUVoJ0C8lubUZCclKk3XZfVvPiG8v8bHknP5RTeE8NY=)
6: E90DFC9CF00111EFB541185CC4F9AE02.roa (hash: knuxjOEXvdOrAk8iEeaDbt7P74nAo8ru+JQtPHY5I2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Validity
Not Before: Aug 18 22:55:36 2026 GMT
Not After : Aug 25 22:55:36 2026 GMT
Subject: CN=6a84e2e9-bc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:e6:87:27:72:43:55:85:55:10:79:d5:72:
b1:4d:81:dc:4a:64:a7:a5:53:cf:d0:61:a5:0c:b9:
ab:89:4a:e9:8e:57:4d:8b:f1:d0:99:49:2c:f1:0c:
79:07:71:73:09:70:e7:87:4c:0b:59:4b:3f:a3:c3:
5c:d3:ba:43:41:f2:50:e8:41:61:f8:73:31:32:18:
a1:d0:55:52:c1:de:ad:76:91:09:e7:e6:94:c9:cc:
0e:80:b2:db:f2:3c:ec:e0:c9:a9:1b:ff:d6:d0:34:
68:9f:08:55:c1:55:26:bc:cb:72:3f:b8:af:2a:28:
bc:70:be:19:84:12:c2:d2:0e:4b:55:4e:f0:e5:ce:
02:c3:c6:d5:68:8f:cb:9a:f6:5a:6a:0e:9f:6d:8f:
95:d7:c5:8b:be:e3:70:6c:ee:1e:63:db:d0:35:0b:
84:66:ec:a9:fd:2b:3e:b4:4c:bf:8d:bc:58:17:0f:
25:61:48:93:5a:9e:83:d5:2a:5d:07:48:e9:7b:5c:
75:5e:9a:82:b0:a8:73:81:42:52:c1:c3:9b:92:ff:
ca:8e:e2:8a:66:2e:a3:a2:08:be:24:e5:5f:e2:1a:
ca:44:84:d2:01:2f:47:91:f6:1b:d8:48:4a:ba:39:
fa:3f:cc:fa:96:89:37:7a:f8:9e:8d:4a:1d:89:dd:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:64:36:96:2A:56:50:CC:50:B8:2E:D5:EF:4F:94:33:0C:8A:0B
X509v3 Authority Key Identifier:
keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:bf:51:97:6d:3f:d9:66:1d:b8:e0:db:6f:99:6f:e7:7c:2b:
c5:7c:58:9c:15:97:8f:2c:8a:07:3e:4c:7b:be:79:c5:6e:64:
14:79:96:ef:f6:11:e0:ea:59:b6:5e:08:31:49:e5:56:f3:2d:
53:53:1d:c4:89:b1:e6:8b:d1:fe:8a:c6:04:76:80:35:9f:c6:
4c:bc:40:b5:28:7b:f9:a5:2d:e7:bd:de:a3:7b:ff:2b:39:67:
45:73:55:bf:18:1e:aa:9b:63:f2:03:82:57:95:fa:2c:86:90:
95:05:cb:72:4a:af:4f:d6:b3:a9:fc:d3:d6:04:ca:ce:17:e1:
bf:fa:b6:71:f8:ca:78:ad:c5:9c:da:2e:9e:d1:c5:fa:bd:d6:
96:3c:d3:6e:83:65:ef:b7:5d:cb:00:06:2d:48:76:30:a2:3c:
2c:ec:65:9e:c1:ab:22:94:eb:dc:cd:26:58:43:e6:d0:7f:4f:
95:aa:a2:64:02:b9:2b:0c:eb:74:09:48:a1:2a:a5:36:1f:14:
36:3e:a2:e5:a4:8b:03:c1:f8:4c:4f:e0:9b:d4:21:01:c1:3f:
92:c6:25:93:e4:06:cc:75:9e:78:b1:86:a5:23:66:8e:d6:b6:
9d:7a:41:df:37:56:d9:c0:99:19:ad:3b:da:a1:b8:48:7c:d8:
50:30:be:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw
QzhGQzQ1RTIwHhcNMjYwODE4MjI1NTM2WhcNMjYwODI1MjI1NTM2WjAYMRYwFAYD
VQQDEw02YTg0ZTJlOS1iYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCjmhydyQ1WFVRB51XKxTYHcSmSnpVPP0GGlDLmriUrpjldNi/HQmUks8Qx5
B3FzCXDnh0wLWUs/o8Nc07pDQfJQ6EFh+HMxMhih0FVSwd6tdpEJ5+aUycwOgLLb
8jzs4MmpG//W0DRonwhVwVUmvMtyP7ivKii8cL4ZhBLC0g5LVU7w5c4Cw8bVaI/L
mvZaag6fbY+V18WLvuNwbO4eY9vQNQuEZuyp/Ss+tEy/jbxYFw8lYUiTWp6D1Spd
B0jpe1x1XpqCsKhzgUJSwcObkv/KjuKKZi6jogi+JOVf4hrKRITSAS9HkfYb2EhK
ujn6P8z6lok3eviejUodid1SMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJxZDaW
KlZQzFC4LtXvT5QzDIoLMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5
NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G
YXRBaXpBa2lscDRNajhSZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhb9Rl20/2WYduODbb5lv53wrxXxYnBWXjyyKBz5Me755xW5kFHmW7/YR4OpZ
tl4IMUnlVvMtU1MdxImx5ovR/orGBHaANZ/GTLxAtSh7+aUt573eo3v/KzlnRXNV
vxgeqptj8gOCV5X6LIaQlQXLckqvT9azqfzT1gTKzhfhv/q2cfjKeK3FnNountHF
+r3WljzTboNl77ddywAGLUh2MKI8LOxlnsGrIpTr3M0mWEPm0H9PlaqiZAK5Kwzr
dAlIoSqlNh8UNj6i5aSLA8H4TE/gm9QhAcE/ksYlk+QGzHWeeLGGpSNmjta2nXpB
3zdW2cCZGa072qG4SHzYUDC+vA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:26 2026 by rpki-client