
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json)
Hash identifier: VNiSfxlZSgIEbPAcnYFv69zz2Df7blQrk8jITuWU1mY=
Subject key identifier: A9:1B:7B:21:9B:3A:00:C3:31:FC:ED:48:C6:16:63:0C:54:74:97:DB
Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Certificate serial: 0AD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
Manifest number: 0ABC
Signing time: Fri 12 Jun 2026 19:31:32 +0000
Manifest this update: Fri 12 Jun 2026 19:31:32 +0000
Manifest next update: Fri 19 Jun 2026 19:31:32 +0000
Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: DY3F/q9Har9mNy33GhUE46sLnUjAYzwT78RKobb4fbE=)
2: 683CD6083EF511F1AB4378F7C3833773.roa (hash: 2AqUjb8b7TWsR15Or5pxjFuJpbFFS7iyKcRc0Dhq0k8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl
rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Validity
Not Before: Jun 12 19:31:32 2026 GMT
Not After : Jun 19 19:31:32 2026 GMT
Subject: CN=6a2c5e94-4332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:24:07:87:66:f9:18:9e:e4:b5:63:ae:d0:
11:1c:bf:3d:8d:20:31:4a:46:e6:ac:d3:a9:24:5c:
b9:6d:42:4e:ed:2e:32:d4:f7:21:5c:be:f9:23:07:
91:e3:7f:5c:f3:27:ea:f2:e4:1c:0c:c8:b0:df:e7:
51:7c:df:c9:64:cc:65:d1:08:1f:aa:cd:93:c8:7a:
8e:eb:61:6a:5a:d6:3b:10:e3:d6:c7:23:b9:a0:6f:
2c:88:26:50:1f:fa:76:60:9a:48:2d:56:d3:0e:17:
bb:73:eb:f7:1d:74:4c:50:64:c7:c5:23:75:9e:5e:
77:16:5b:29:29:6e:5d:bb:82:b9:60:c3:de:48:79:
fa:51:ae:cf:3e:ae:d8:fc:80:09:19:37:c7:dc:9b:
1a:0d:32:e0:31:a5:7f:fc:cd:0b:ca:59:b9:ac:17:
6a:13:ea:7d:36:0f:2c:b2:04:2f:d2:70:9f:08:76:
d8:58:d7:63:0a:ca:66:4e:d0:e1:d2:b6:13:94:a6:
dd:58:c5:ac:de:3c:fe:4a:25:d1:31:98:1c:b7:87:
f3:35:14:7e:70:86:80:86:94:ed:08:10:c0:a6:17:
fe:a8:5e:8f:50:c7:cb:7e:73:81:c6:51:7e:1f:7a:
35:a7:5c:22:13:52:6f:62:e9:64:34:fa:3d:01:1b:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:7B:21:9B:3A:00:C3:31:FC:ED:48:C6:16:63:0C:54:74:97:DB
X509v3 Authority Key Identifier:
keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b3:95:34:35:5a:78:c4:c1:88:a1:80:31:c8:33:68:47:5f:
41:ff:d4:68:4d:41:67:0b:3c:77:f8:b0:48:9f:9f:02:42:28:
1f:15:31:07:72:28:11:14:b5:44:f9:42:f8:ff:f7:b9:24:5b:
ee:de:f2:00:26:a1:1e:01:09:cb:22:ef:7d:96:bc:c5:1d:c5:
02:b6:d5:8f:64:03:15:13:4b:0b:f3:75:45:8c:46:fa:ed:4e:
1b:7e:fa:a5:dd:87:4a:70:70:62:86:09:f3:ed:8a:ae:81:d3:
69:4a:f7:38:68:b1:eb:4c:c6:fd:da:7e:40:f4:ae:39:7a:36:
70:19:b6:32:59:02:97:0c:34:c7:2e:7f:b3:2a:2a:ec:34:07:
5a:df:c4:cb:31:dd:ba:cd:43:ee:c1:23:8b:06:61:fb:58:44:
5d:ec:56:c0:39:ea:19:1c:32:f9:b7:ac:4c:5a:28:3f:99:01:
cb:d7:80:c8:1e:fd:e1:1e:b8:6d:4f:18:30:a2:47:fb:b1:a1:
32:4e:9f:52:65:a5:1f:8d:bf:e6:89:34:78:73:b8:4d:cb:1d:
96:06:88:f3:53:64:06:52:2b:f6:13:41:05:3b:7b:d4:93:c5:
54:db:b1:b0:f2:9a:28:61:d0:e7:5b:48:a1:17:20:f3:68:19:
af:53:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:20 2026 by rpki-client