
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier: MkL6/zK60omKRFJVKOqoiPAQM0BHY6OZSFjzt1O7D+8=
Subject key identifier: 52:91:74:52:FA:0B:78:DC:50:EE:72:C0:92:D0:0C:F3:01:89:B5:4E
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number: 025F
Signing time: Sat 05 Sep 2026 02:05:43 +0000
Manifest this update: Sat 05 Sep 2026 02:05:43 +0000
Manifest next update: Sat 12 Sep 2026 02:05:43 +0000
Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: 1AZ2OCWl1JIY0INH0IJ+7eAtgdDET0enDvvJ8rLNz3E=)
2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: ZFhHCFeUOh6APH456On8FdyIkUmcfvvz5IW62S7F69c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Validity
Not Before: Sep 5 02:05:43 2026 GMT
Not After : Sep 12 02:05:43 2026 GMT
Subject: CN=6a9b78f7-0458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:db:59:ae:e6:a0:06:82:94:a5:00:35:9c:
58:6b:46:5a:59:f6:6f:15:26:b1:99:39:ef:32:b1:
09:34:b2:02:8d:50:7a:6e:69:ba:8e:e7:5b:9b:e3:
b8:5b:08:e1:b4:71:f4:a6:c0:31:3c:ba:5b:b9:27:
11:d6:e8:f9:b8:bd:1b:c2:ce:bd:04:1c:4e:1b:bd:
00:6a:d4:88:d0:a5:71:6d:b8:a9:ee:27:64:63:d7:
d0:6e:c6:ba:b2:43:9d:f3:11:1d:8b:91:3b:05:2b:
3a:3f:60:b3:9e:cc:d5:fa:33:6d:54:22:d2:ad:6e:
74:c0:31:ca:ef:89:79:9c:46:46:ae:f1:5f:6e:96:
3b:05:48:14:93:d6:b0:13:68:ee:31:3e:8f:3a:59:
4b:36:bb:04:1d:09:fb:f4:61:b4:cd:73:f9:bb:58:
e3:88:74:e8:b4:b3:0b:aa:4f:d2:0d:7b:53:1c:38:
21:22:3e:51:da:b7:ef:25:5e:60:6b:3b:43:ce:75:
a7:f9:e1:f7:93:b6:46:5b:0e:42:b3:c0:24:46:f0:
df:0f:fe:09:23:f6:0a:ef:67:f1:16:44:12:1f:ef:
85:f6:28:61:2b:2d:42:c0:de:c0:2f:3b:af:68:5d:
75:04:0c:97:79:b8:15:9b:93:19:78:66:63:8e:99:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:74:52:FA:0B:78:DC:50:EE:72:C0:92:D0:0C:F3:01:89:B5:4E
X509v3 Authority Key Identifier:
keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:b1:1b:fb:89:40:28:a9:6f:c5:11:02:7b:cd:9d:44:ee:
a2:6f:90:ff:e1:38:3d:f6:dc:6c:87:17:5b:d6:b6:3f:ac:9d:
2b:68:fc:f3:b3:4f:bd:fb:c6:51:ec:b5:d5:fa:38:82:e4:67:
89:d1:ea:a8:15:55:2a:21:53:18:d7:8f:14:74:4a:85:af:a6:
da:1a:7b:08:b5:38:0e:33:25:b7:9e:28:84:9a:d0:0a:75:73:
bc:a3:a2:59:1e:a1:fa:a4:f9:7a:25:f8:31:00:91:0a:a9:d9:
3b:71:ec:fa:58:47:fa:e2:6f:71:66:a3:f8:88:d1:a3:23:ee:
0f:44:4a:2b:e8:14:7e:3f:3e:73:ca:f6:bb:2b:69:2f:ea:ec:
7b:b1:72:90:b7:51:9f:18:b7:2b:f8:03:fd:25:0c:6d:c2:e4:
7f:3e:37:16:75:ca:16:61:d3:49:1a:95:96:97:69:a7:8a:34:
e2:a5:bc:cb:0d:2d:6f:36:c5:00:4e:5c:43:6c:56:ad:4d:bc:
60:8f:1d:88:4d:b0:64:3a:97:51:a1:f1:5f:ad:34:77:24:7e:
64:36:91:e6:a9:d0:20:4a:54:75:81:aa:1f:69:b7:1d:f8:33:
e0:00:c3:71:51:bb:3f:b8:f8:dc:c2:ca:49:75:83:a5:42:b4:
c7:91:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:22:43 2026 by rpki-client