
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier: bQdFULAPmQ79bOJwy0JmDPMlnkIiFYXSiXEQxpIrBto=
Subject key identifier: 4F:48:05:EA:C7:21:26:9D:7A:A3:3A:1B:63:02:4A:5B:5C:A8:2B:ED
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number: 01F6
Signing time: Fri 17 Apr 2026 03:03:19 +0000
Manifest this update: Fri 17 Apr 2026 03:03:19 +0000
Manifest next update: Fri 24 Apr 2026 03:03:19 +0000
Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: EbzGrTPX8WfpdTQDy63KOA39wKQhnhl0B6isX9V5eSU=)
2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: G97KXaER8oHFpVxJ9Nr+pWkbaSoOX+AJP+0tU8j2jBg=)
3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lY4zHcYM+OKzlDFbmIejzsChBG9D4T2+3+SOYmgyPIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Validity
Not Before: Apr 17 03:03:19 2026 GMT
Not After : Apr 24 03:03:19 2026 GMT
Subject: CN=69e1a2f7-9533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:c8:85:27:87:8b:64:31:f2:89:53:dd:f7:
b0:3b:0f:a3:7a:5c:8d:6d:3f:ab:a1:e4:59:49:17:
c5:c4:39:91:37:bd:d0:ae:87:c1:d5:b5:c1:da:87:
cc:b1:08:d9:22:89:85:8a:ac:05:8e:82:64:ab:b4:
5a:18:0d:4b:17:fe:0a:ea:1d:6c:21:06:85:7c:1a:
e0:c8:44:de:d8:16:bd:31:d4:a8:37:f4:01:49:84:
78:a1:bf:04:24:e5:33:e2:50:7d:bb:5e:a2:2e:d6:
ce:05:10:ab:05:18:a9:eb:bc:7f:62:78:e9:15:1a:
98:c6:67:58:70:fb:69:1a:4f:cc:33:e1:39:ec:93:
8b:be:a7:15:43:fa:4b:d8:e7:a3:5a:a7:70:e5:a2:
d3:00:f9:01:f7:d3:52:6c:ab:f9:cc:37:63:fc:96:
4f:89:7e:6a:8b:c2:34:d0:b0:b8:f5:67:d6:e1:78:
a6:9b:56:05:b4:74:6a:f6:ff:22:7b:99:88:63:99:
26:bf:66:38:69:2a:95:85:b1:91:e5:ac:bb:a8:66:
87:91:84:ec:23:0f:59:f9:5d:c9:c9:5f:25:f8:c0:
db:81:fa:65:14:8e:57:c0:bc:be:a4:16:a0:da:ec:
ec:3d:f0:00:21:66:35:7a:75:8e:3b:1c:b6:e3:60:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:05:EA:C7:21:26:9D:7A:A3:3A:1B:63:02:4A:5B:5C:A8:2B:ED
X509v3 Authority Key Identifier:
keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f7:4e:d9:dd:f5:86:0c:a3:ac:90:9b:0c:ac:29:a5:bc:c5:
87:e2:cf:53:bb:ec:4b:9f:5a:d7:79:29:44:da:a2:64:ad:2d:
e1:fc:c5:bb:cd:c4:9b:5a:c3:40:6e:2b:78:fd:2f:e6:15:50:
41:c4:2d:0d:f0:7f:48:69:62:94:08:ba:d1:ed:c2:9f:ed:ec:
17:cd:d9:e6:f1:71:4d:a0:87:ac:fd:32:74:6c:43:86:09:da:
62:55:3a:0a:78:f2:8c:2c:c0:52:52:1e:43:67:df:2e:fc:ec:
f4:fa:f1:a3:f8:03:8f:8d:78:c2:f3:09:46:70:fd:74:d1:30:
7a:2d:a2:f8:97:16:b9:fa:34:80:fb:46:f1:4d:61:3b:46:e8:
63:e0:fe:3b:af:14:ff:60:12:43:c6:fb:b6:3c:ac:f6:07:97:
c1:95:d2:59:16:86:03:37:80:40:1e:09:b2:88:74:96:15:82:
6d:cd:95:68:5f:d3:7d:b5:d1:9a:0f:0b:fa:91:37:d8:f1:36:
51:6d:07:2b:26:24:1a:e7:a9:06:e0:c0:a6:9b:b4:74:83:a2:
85:67:a8:ed:e5:72:56:61:48:cf:37:aa:b9:15:27:14:d6:a3:
57:9d:4f:0b:9a:9a:f0:c6:e5:c5:95:0c:d5:69:77:ed:ab:5d:
7d:1f:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:06 2026 by rpki-client