
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier: Lq5DpMuDwK7/Zyqh6mpSKpszAIgi1tQwrMvJ8XcGSDw=
Subject key identifier: 1C:A3:4A:AA:AE:B1:C9:C4:59:C0:A0:5D:E5:3D:D8:0A:52:90:61:66
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number: 0751
Signing time: Thu 16 Apr 2026 21:38:10 +0000
Manifest this update: Thu 16 Apr 2026 21:38:10 +0000
Manifest next update: Thu 23 Apr 2026 21:38:10 +0000
Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: 5lemDABIr6j+SlzZdp2jf+my6eKJtCwdfv1SnqMZey0=)
2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: jmaFcpaDeiXM/6W+3Dvlo06UYUE1H6LTzGNr5Pw/4po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Validity
Not Before: Apr 16 21:38:10 2026 GMT
Not After : Apr 23 21:38:10 2026 GMT
Subject: CN=69e156c2-fd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:3f:3d:e2:67:4f:28:d6:26:e6:3f:5b:44:
77:02:90:fa:98:05:66:d7:f8:1f:34:58:d1:ec:3d:
25:e6:e1:be:37:44:c5:a7:9c:7b:91:a9:a8:f4:2b:
66:f9:9c:7c:42:cb:7c:4c:02:e7:5b:fa:75:72:0a:
9b:fc:9c:d8:7a:0f:e1:ad:b9:1a:5c:34:0b:9a:53:
ee:dd:ce:dc:b1:1d:3c:8b:8c:d1:fc:e0:ea:0b:c9:
d0:e5:3e:21:33:4b:aa:6f:d8:5b:06:6c:75:c3:5b:
80:c0:a4:c3:5b:ff:3a:03:b1:a7:8f:79:8c:9a:88:
ec:42:cc:90:2b:5d:ff:28:b2:6c:71:b3:c5:0d:a7:
10:c0:b8:51:83:0b:20:61:eb:f4:71:fa:e7:08:4d:
98:2c:57:c9:5d:88:25:f3:90:f6:d0:06:0b:65:2c:
16:a2:c7:6f:ab:ee:51:bb:5a:2b:8a:b7:72:21:62:
4c:24:3a:a1:6c:d0:ef:bc:e8:b6:8f:b3:6e:a1:fb:
64:7b:b1:c0:90:e9:53:0c:8b:23:55:60:8f:b3:9e:
b8:fd:10:ee:e1:de:d8:d1:99:82:0a:a6:ce:53:c9:
cf:df:ef:7a:92:ae:b7:fb:79:4c:0b:40:69:ee:0d:
69:3d:e5:0a:6c:3e:5c:b3:32:b7:e0:ab:56:b3:51:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:4A:AA:AE:B1:C9:C4:59:C0:A0:5D:E5:3D:D8:0A:52:90:61:66
X509v3 Authority Key Identifier:
keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0a:85:43:87:c6:a7:33:23:c6:bc:03:77:35:27:e6:60:bc:
4c:c9:9e:9c:52:d8:fe:59:df:b6:48:c2:3a:84:7b:e3:92:51:
93:5b:6c:31:99:18:55:56:cb:b1:6a:e3:c4:22:ff:8e:a6:dc:
4e:67:d8:89:11:20:23:9d:9c:3b:3e:37:38:0f:b1:58:9c:c6:
29:f5:4f:24:2c:d9:ac:4d:6a:72:11:0e:6f:c1:92:d6:ef:50:
c7:b3:d1:fe:78:bf:92:85:e6:d6:44:7f:21:ec:d7:7a:1b:21:
d7:28:df:e6:c3:d9:86:f5:22:03:ec:38:61:90:a7:e8:51:b6:
30:9b:d1:12:dc:2d:25:08:a7:dd:b6:c9:b6:e1:ce:e4:c9:f2:
23:1a:22:96:10:b5:f0:b8:f6:5c:49:ff:2a:0c:8c:cb:ba:d1:
d4:d8:2d:a1:d1:7b:8e:b2:19:2b:eb:6c:04:a4:2f:06:71:60:
87:b3:c6:5c:74:f2:67:cc:61:8f:80:15:d0:62:27:bd:67:cb:
31:f9:a6:0d:00:35:c1:48:87:73:9a:64:95:61:56:e1:b1:37:
10:85:a9:cb:fe:2d:56:61:00:62:4e:96:57:12:6b:5d:ea:37:
2b:d5:1c:ea:64:fd:fa:48:a0:16:b9:a4:91:46:f8:0f:4c:39:
30:53:73:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw
NEQ0OTI1OEYwHhcNMjYwNDE2MjEzODEwWhcNMjYwNDIzMjEzODEwWjAYMRYwFAYD
VQQDEw02OWUxNTZjMi1mZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHU/PeJnTyjWJuY/W0R3ApD6mAVm1/gfNFjR7D0l5uG+N0TFp5x7kamo9Ctm
+Zx8Qst8TALnW/p1cgqb/JzYeg/hrbkaXDQLmlPu3c7csR08i4zR/ODqC8nQ5T4h
M0uqb9hbBmx1w1uAwKTDW/86A7Gnj3mMmojsQsyQK13/KLJscbPFDacQwLhRgwsg
Yev0cfrnCE2YLFfJXYgl85D20AYLZSwWosdvq+5Ru1orirdyIWJMJDqhbNDvvOi2
j7Nuoftke7HAkOlTDIsjVWCPs564/RDu4d7Y0ZmCCqbOU8nP3+96kq63+3lMC0Bp
7g1pPeUKbD5cszK34KtWs1H0QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByjSqqu
scnEWcCgXeU92ApSkGFmMB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2
OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK
WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1
ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwwqFQ4fGpzMjxrwDdzUn5mC8TMmenFLY/lnftkjCOoR745JRk1tsMZkYVVbL
sWrjxCL/jqbcTmfYiREgI52cOz43OA+xWJzGKfVPJCzZrE1qchEOb8GS1u9Qx7PR
/ni/koXm1kR/IezXehsh1yjf5sPZhvUiA+w4YZCn6FG2MJvREtwtJQin3bbJtuHO
5MnyIxoilhC18Lj2XEn/KgyMy7rR1NgtodF7jrIZK+tsBKQvBnFgh7PGXHTyZ8xh
j4AV0GInvWfLMfmmDQA1wUiHc5pklWFW4bE3EIWpy/4tVmEAYk6WVxJrXeo3K9Uc
6mT9+kigFrmkkUb4D0w5MFNzFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:48:50 2026 by rpki-client