
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File: P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier: ib2JO4Y8kVf8k4XD7vtkk6fdvWbXepRxp7Mgs0G2swc=
Subject key identifier: 0E:7B:67:74:0D:A6:4B:6D:90:18:04:35:C6:CC:C7:97:B7:82:19:0B
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer: /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number: 43
Signing time: Mon 27 Jul 2026 10:46:28 +0000
Manifest this update: Mon 27 Jul 2026 10:46:27 +0000
Manifest next update: Mon 03 Aug 2026 10:46:27 +0000
Files and hashes: 1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: XtgbiWuL5aQbJNvDVaMeJFUTYXx060r7QELb7G8kwEI=)
2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Validity
Not Before: Jul 27 10:46:27 2026 GMT
Not After : Aug 3 10:46:27 2026 GMT
Subject: CN=6a673704-8ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:50:6e:c8:84:fc:32:9e:39:3d:0e:63:01:
d6:2d:32:b5:05:b8:03:a1:34:e8:a4:a6:b6:c6:54:
7b:02:e1:8d:5a:9d:ec:98:f1:0d:df:b9:19:74:6d:
d2:ef:85:ff:f5:14:60:14:52:b5:03:c8:45:6d:4d:
f4:28:02:e0:7e:74:a0:8a:67:6d:82:aa:7a:c1:ce:
e5:4e:6e:cb:14:7a:e4:ff:3d:78:84:57:71:5c:e9:
c5:93:d9:86:32:c5:d1:b7:52:4c:b6:b7:5c:fb:5a:
46:5d:a6:f5:ea:a1:9a:f0:00:fa:5d:0a:d2:6e:f1:
fc:c5:cb:94:13:96:d8:1b:c6:89:cf:ab:e1:af:fc:
92:d9:50:4f:2b:b7:7f:94:e5:7b:3e:0a:42:f0:9d:
a1:0b:55:51:1a:6e:be:ec:80:e8:d9:b7:f7:18:72:
ee:69:8e:c9:ab:a3:bc:af:d7:67:aa:ef:27:80:c4:
99:ff:db:b4:1e:8d:c6:26:6c:65:9c:d2:82:e2:63:
97:15:d5:9a:3c:2e:81:d7:0b:30:55:48:1d:f5:6c:
a7:b9:06:fe:17:08:43:fa:c3:f3:96:4b:e3:07:63:
6f:f9:bd:c8:95:a1:3c:db:23:b1:a2:bd:d5:31:27:
fd:c8:e7:a3:8d:f8:66:70:5c:6f:0a:c2:bc:15:b0:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7B:67:74:0D:A6:4B:6D:90:18:04:35:C6:CC:C7:97:B7:82:19:0B
X509v3 Authority Key Identifier:
keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a8:90:36:ec:12:f7:af:d7:3c:17:2a:9d:1d:ab:c7:0b:05:
1d:c6:d4:d7:3f:b6:3e:58:07:87:c0:1a:2b:ac:ba:cb:72:4e:
27:81:24:95:18:81:e1:22:a1:d9:f4:03:c3:0f:bf:33:18:be:
e3:5e:60:61:e8:89:5f:d2:a6:fb:81:6d:32:4a:a1:10:4e:eb:
ff:c5:10:ae:8e:60:b3:9e:fd:82:60:ad:65:1d:81:e6:9d:75:
24:7b:02:ef:3d:d4:ca:b8:8a:0c:38:52:fa:b3:ac:7d:1a:8a:
2b:63:5b:ad:d6:98:7e:8e:a3:79:b5:94:53:81:15:dd:00:b8:
4a:5c:86:ea:d1:91:49:fb:21:1f:d5:79:e6:2b:94:ef:4e:52:
1a:b8:83:d7:1d:fb:7b:2d:07:80:b4:ac:1f:c6:18:ab:9f:41:
79:be:02:fc:40:05:01:59:43:bb:cd:68:b9:5e:45:22:30:46:
36:de:35:78:13:8d:3f:e2:15:39:c4:67:cc:d3:20:96:5d:65:
95:1c:11:d2:3a:a8:ee:15:8d:0a:b2:1f:6c:ba:d1:86:aa:ea:
4e:35:6a:a0:e6:98:7c:af:96:d2:6a:a8:78:8a:e3:28:3b:24:
2f:83:e5:12:65:c8:70:fc:77:92:b1:2d:52:73:6b:7a:61:f4:
ed:6f:eb:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjQyODExMC8GA1UEBRMoM0Y2RDI5QkIxRjc0NzkzQ0Y4OEM3ODM3Mjg1NjNCQkQ0
M0U4MEEzRTAeFw0yNjA3MjcxMDQ2MjdaFw0yNjA4MDMxMDQ2MjdaMBgxFjAUBgNV
BAMTDTZhNjczNzA0LThhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8+lBuyIT8Mp45PQ5jAdYtMrUFuAOhNOikprbGVHsC4Y1aneyY8Q3fuRl0bdLv
hf/1FGAUUrUDyEVtTfQoAuB+dKCKZ22CqnrBzuVObssUeuT/PXiEV3Fc6cWT2YYy
xdG3Uky2t1z7WkZdpvXqoZrwAPpdCtJu8fzFy5QTltgbxonPq+Gv/JLZUE8rt3+U
5Xs+CkLwnaELVVEabr7sgOjZt/cYcu5pjsmro7yv12eq7yeAxJn/27QejcYmbGWc
0oLiY5cV1Zo8LoHXCzBVSB31bKe5Bv4XCEP6w/OWS+MHY2/5vciVoTzbI7GivdUx
J/3I56ON+GZwXG8KwrwVsPu1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDntndA2m
S22QGAQ1xszHl7eCGQswHwYDVR0jBBgwFoAUP20pux90eTz4jHg3KFY7vUPoCj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NDI4L0VGNUMyN0I0MjQ2
MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6NGpIZzNLRlk3dlVQb0Nq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDIwcHV4OTBlVHo0akhnM0tGWTd2VVBvQ2o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
NDI4L0VGNUMyN0I0MjQ2MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6
NGpIZzNLRlk3dlVQb0NqNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAmqJA27BL3r9c8FyqdHavHCwUdxtTXP7Y+WAeHwBorrLrLck4ngSSVGIHhIqHZ
9APDD78zGL7jXmBh6Ilf0qb7gW0ySqEQTuv/xRCujmCznv2CYK1lHYHmnXUkewLv
PdTKuIoMOFL6s6x9GoorY1ut1ph+jqN5tZRTgRXdALhKXIbq0ZFJ+yEf1XnmK5Tv
TlIauIPXHft7LQeAtKwfxhirn0F5vgL8QAUBWUO7zWi5XkUiMEY23jV4E40/4hU5
xGfM0yCWXWWVHBHSOqjuFY0Ksh9sutGGqupONWqg5ph8r5bSaqh4iuMoOyQvg+US
Zchw/HeSsS1Sc2t6YfTtb+tf
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:44 2026 by rpki-client