
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: gwUeL0mRDf9ZQS6nLKQwSEGdbtjJtbbYVBlnKL1grGI=
Subject key identifier: DD:8E:C3:7E:3C:C8:12:92:0F:5A:48:F0:B5:55:C3:84:69:EF:98:07
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: 0198
Signing time: Fri 17 Apr 2026 04:05:02 +0000
Manifest this update: Fri 17 Apr 2026 04:05:02 +0000
Manifest next update: Fri 24 Apr 2026 04:05:02 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: TrL6t+QaDusLBkXnNCms6gK3z4FnuIY7EZ8e5tK9FIY=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: Hl7KpmuGRcPCF5t46SvY389AlxSI9ZtpOG8yltdH/G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Validity
Not Before: Apr 17 04:05:02 2026 GMT
Not After : Apr 24 04:05:02 2026 GMT
Subject: CN=69e1b16e-d6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:ea:5b:9d:03:5b:53:fb:3a:ec:3d:05:0e:
53:b5:20:87:d4:ac:03:ce:17:1d:da:85:bb:8e:10:
ba:e1:57:45:af:c8:9c:71:53:9e:55:0f:e2:54:6e:
f2:98:7e:03:9c:9d:aa:5c:b0:51:d7:3d:da:23:d8:
60:58:35:90:ff:c0:c5:06:ca:0e:98:c2:02:b7:d4:
cc:79:e8:b2:d4:42:78:1f:0c:e2:64:71:63:8b:50:
28:52:04:f4:a2:b1:39:77:ed:cc:55:61:96:e3:2d:
60:6b:07:76:8a:06:44:60:72:80:8d:80:ff:87:c1:
14:7d:21:7e:54:9f:15:b3:e0:af:b0:87:24:36:27:
05:7d:fc:19:d5:ff:ae:01:31:f4:4f:5b:df:0d:f9:
6d:b2:14:44:e0:ac:cd:34:ff:f7:05:9c:14:59:33:
7a:9f:7e:8a:d9:51:c5:18:d4:e3:2f:e3:97:1e:0f:
45:e3:29:fe:0a:ef:5f:5b:ae:25:2a:e3:f1:44:3e:
51:d1:53:58:07:45:01:dc:d0:a8:6e:3b:76:10:ff:
e9:df:32:6a:7e:f9:86:d9:92:7f:74:78:f8:9c:27:
29:09:c8:37:d0:aa:77:cc:2b:83:4f:49:e8:95:9f:
58:81:da:74:45:9a:2f:09:4f:f1:d2:b6:50:9e:00:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:C3:7E:3C:C8:12:92:0F:5A:48:F0:B5:55:C3:84:69:EF:98:07
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4e:df:c6:f3:59:83:54:2c:ac:9f:01:25:fc:a1:83:75:94:
e8:a8:b3:dc:3d:5b:67:9c:8a:29:dd:0f:4f:d3:34:c6:06:07:
2a:ab:5b:37:c2:81:29:f6:e2:c7:5d:86:7c:14:8c:e9:fa:fb:
2e:59:1e:02:32:d0:38:11:ab:1c:f4:61:84:9e:7c:00:72:d1:
e5:d8:d1:75:dc:da:01:59:1c:d2:fd:5c:3e:2f:3a:13:5c:27:
d9:98:7f:5c:41:fd:9c:81:e3:d9:5b:dc:25:56:24:f2:29:12:
f5:85:53:e9:d4:19:a3:05:06:69:0a:69:90:d4:67:1a:98:03:
30:79:f8:03:5c:c6:a8:10:96:85:29:fc:c6:ae:ba:28:49:78:
f3:77:e6:4c:26:dd:17:cc:e9:d7:cf:57:cd:bd:df:f2:80:9e:
76:28:3f:bd:38:9c:3f:e5:fa:19:21:fd:94:08:9b:94:29:14:
1e:54:19:bb:c8:1a:84:9c:07:6a:0b:c2:23:b0:29:ce:ed:e0:
43:7a:cd:ad:a3:e3:14:e0:8d:c2:f4:6e:81:ca:50:14:56:75:
55:0d:b3:cd:61:a0:7c:31:6b:6e:1c:58:5e:80:94:b6:1c:cd:
ef:91:b9:c8:83:6f:59:93:2b:ad:dc:9a:b9:7d:99:65:83:50:
5c:6e:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:18 2026 by rpki-client