
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json)
Hash identifier: co9Ame0XJt625KerrTk5lDMHUh3jat7MoaRpziQ71eA=
Subject key identifier: 4D:C8:F9:8E:93:55:FC:17:D2:45:70:96:00:20:D4:A2:2F:77:A5:34
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial: 0517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
Manifest number: 050F
Signing time: Sun 20 Sep 2026 23:27:36 +0000
Manifest this update: Sun 20 Sep 2026 23:27:35 +0000
Manifest next update: Sun 27 Sep 2026 23:27:35 +0000
Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: NChT3iJQsfZF1WBdD9A4YpLuqJzBZbwEaUWI3pxtg8w=)
2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: n0l/G3zz8221DJQZK1QZg+2i3DJbPsMPV1JZDdgqiFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1303 (0x517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Validity
Not Before: Sep 20 23:27:35 2026 GMT
Not After : Sep 27 23:27:35 2026 GMT
Subject: CN=6ab06be8-994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:47:69:7d:33:f8:87:69:5b:ae:8f:45:cb:
5f:52:bd:e8:74:e2:9d:fa:22:85:63:1c:6c:ca:5d:
88:3f:1a:82:c7:be:0d:a1:bd:5b:cf:74:89:de:60:
c1:e7:20:0a:44:fe:a3:4a:8d:34:b6:98:3f:6f:95:
b4:c7:fd:ed:cd:60:ca:45:db:1f:e4:16:19:1f:3d:
ee:27:e3:90:95:2d:5a:29:8a:9e:00:e9:c9:bf:1f:
4a:a4:db:3a:de:17:bf:25:9a:40:8f:d4:6a:6d:f0:
86:79:e3:b8:39:d1:06:57:8d:7a:3d:12:3c:d9:98:
e0:90:f7:cb:4a:f5:c0:8d:dc:86:2b:1a:2c:e1:ff:
fd:4a:36:f7:5f:13:6e:a0:2c:03:06:f5:09:3f:c6:
b6:4f:06:84:31:b2:2c:94:c7:3e:57:df:de:fa:f3:
82:3a:63:a8:fb:c7:c1:ab:99:fd:0e:2b:10:cc:db:
81:85:73:61:18:b0:cc:cc:ec:be:b6:73:87:c1:33:
66:5e:29:ee:d7:c6:12:ae:29:d1:0b:24:4e:a0:e9:
eb:af:e0:1a:b5:f6:10:8f:5d:02:05:f8:1d:e9:de:
c3:46:5e:98:2f:25:e8:d7:74:78:80:7b:bb:6a:6f:
f8:ee:a4:6a:c3:d1:d7:bf:05:66:45:f1:ad:0f:57:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:F9:8E:93:55:FC:17:D2:45:70:96:00:20:D4:A2:2F:77:A5:34
X509v3 Authority Key Identifier:
keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:03:68:43:be:d1:99:83:58:a7:83:7b:56:4c:d3:04:f6:
3c:f8:62:18:c2:f3:44:87:f7:a5:d7:8c:95:47:7c:2b:9d:4a:
41:1c:66:cc:d3:c2:ca:11:15:7a:da:f8:ee:13:ff:99:32:86:
14:88:e7:fb:02:27:27:78:d9:5e:3d:56:4d:8b:38:15:30:61:
a9:ff:0d:45:81:22:65:94:33:87:6e:cf:48:c6:2c:ab:a3:fd:
72:46:a9:2b:50:c2:47:b8:24:9d:a7:70:4b:65:23:16:1c:ae:
a3:60:aa:3f:a1:32:55:62:ca:a0:ec:91:76:6d:c7:c5:6d:5f:
1c:c7:54:80:fe:a6:5f:84:39:0e:c9:a9:ec:c9:2a:3b:66:06:
43:36:06:1e:15:bf:91:99:2b:6f:97:0c:58:4e:a8:c0:2b:d7:
0c:ff:73:e7:77:28:56:76:79:0e:46:e9:e8:ca:db:a6:87:3b:
4a:b3:10:92:d2:8a:25:50:13:c5:fb:18:0d:8e:81:ed:a4:42:
5e:82:9a:3e:f4:81:87:38:e1:93:e8:af:bd:4d:0d:78:17:8f:
27:96:b1:f0:b4:01:a8:e7:40:fe:cc:2e:ed:c5:5e:26:4e:aa:
e9:ac:1f:55:21:28:50:7e:92:31:f9:28:13:27:10:f1:36:c9:
40:d2:ca:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB
QTUwOUY0MjMwHhcNMjYwOTIwMjMyNzM1WhcNMjYwOTI3MjMyNzM1WjAYMRYwFAYD
VQQDEw02YWIwNmJlOC05OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA11NHaX0z+IdpW66PRctfUr3odOKd+iKFYxxsyl2IPxqCx74Nob1bz3SJ3mDB
5yAKRP6jSo00tpg/b5W0x/3tzWDKRdsf5BYZHz3uJ+OQlS1aKYqeAOnJvx9KpNs6
3he/JZpAj9RqbfCGeeO4OdEGV416PRI82ZjgkPfLSvXAjdyGKxos4f/9Sjb3XxNu
oCwDBvUJP8a2TwaEMbIslMc+V9/e+vOCOmOo+8fBq5n9DisQzNuBhXNhGLDMzOy+
tnOHwTNmXinu18YSrinRCyROoOnrr+AatfYQj10CBfgd6d7DRl6YLyXo13R4gHu7
am/47qRqw9HXvwVmRfGtD1ddYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3I+Y6T
VfwX0kVwlgAg1KIvd6U0MB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD
NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp
R1pUbHM5bmtic3FxVUo5Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbewDaEO+0ZmDWKeDe1ZM0wT2PPhiGMLzRIf3pdeMlUd8K51KQRxmzNPCyhEV
etr47hP/mTKGFIjn+wInJ3jZXj1WTYs4FTBhqf8NRYEiZZQzh27PSMYsq6P9ckap
K1DCR7gknadwS2UjFhyuo2CqP6EyVWLKoOyRdm3HxW1fHMdUgP6mX4Q5Dsmp7Mkq
O2YGQzYGHhW/kZkrb5cMWE6owCvXDP9z53coVnZ5Dkbp6Mrbpoc7SrMQktKKJVAT
xfsYDY6B7aRCXoKaPvSBhzjhk+ivvU0NeBePJ5ax8LQBqOdA/swu7cVeJk6q6awf
VSEoUH6SMfkoEycQ8TbJQNLKzA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:49 2026 by rpki-client