
$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier: 55vXw2UKTdOhRDpfef7ycwfgfYXO/LAAm/1e88ZYaCQ=
Subject key identifier: 1D:FD:6B:A1:92:F3:45:08:FD:E8:19:74:4E:9D:2A:C3:6C:FC:30:2A
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial: 04B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number: 0491
Signing time: Wed 13 May 2026 00:06:59 +0000
Manifest this update: Wed 13 May 2026 00:06:58 +0000
Manifest next update: Wed 20 May 2026 00:06:58 +0000
Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: LxMCVQXp8yy8oaSN/AxZggz7EXaZ95aJI2fWtUMrlpk=)
2: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=)
3: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=)
4: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1205 (0x4b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Validity
Not Before: May 13 00:06:58 2026 GMT
Not After : May 20 00:06:58 2026 GMT
Subject: CN=6a03c0a3-f4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:32:7e:32:36:2b:02:9f:dd:26:dc:0c:53:
71:c4:b7:83:e6:0e:58:ea:f6:48:97:3e:c1:42:0d:
e8:0e:f8:a4:d2:b7:c9:39:23:76:55:e5:89:1d:50:
16:2d:eb:5d:6f:ee:dd:11:47:bf:d4:f4:40:e5:25:
d9:ba:8e:75:4c:bd:35:f4:5d:3d:72:83:05:c0:ef:
cf:12:95:be:8f:34:ad:a2:f7:15:6d:df:c0:1c:56:
bb:50:95:17:5e:c5:a5:e7:9f:c0:b2:ba:75:18:29:
1c:08:97:fa:a7:12:fc:30:d8:57:3a:17:00:68:21:
a3:99:32:de:d8:78:89:2d:d0:1d:9a:55:51:84:2f:
e7:cb:a9:e4:7f:32:d5:a0:8a:6f:1e:4f:4e:09:05:
5c:18:80:52:79:b9:7d:08:66:01:cc:d2:ed:9e:f2:
9a:c3:10:32:ad:84:ce:ba:2f:72:83:5c:95:2a:5f:
c1:48:06:91:8e:02:65:af:4f:25:5b:e7:9d:96:7f:
92:71:a5:31:14:cd:3a:bd:37:ec:d9:7b:fd:a6:84:
73:be:b7:c7:a9:74:30:4b:0d:73:76:b4:fc:88:3c:
aa:53:a9:58:85:56:82:a1:1c:b9:9f:17:03:42:73:
38:d0:69:e0:7c:f2:64:e8:16:1a:4f:46:34:92:91:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FD:6B:A1:92:F3:45:08:FD:E8:19:74:4E:9D:2A:C3:6C:FC:30:2A
X509v3 Authority Key Identifier:
keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:15:3f:db:ff:8d:cd:67:72:93:f1:2c:92:5c:34:3f:07:30:
59:19:e5:5b:49:6c:42:3d:04:c5:4e:9d:3d:fc:5b:23:0d:56:
63:75:30:54:e1:76:91:ff:76:8c:99:c8:69:cf:67:84:75:e7:
1e:61:99:a0:6f:ba:7f:9e:d6:d7:b3:3d:aa:13:08:5f:cf:97:
3f:28:ae:62:34:53:a2:f4:33:03:9d:0d:e0:ed:67:b2:ab:c9:
c7:08:6b:b5:ce:fb:94:90:e6:e8:a8:68:f3:c4:b8:23:94:ac:
b9:5e:e8:ff:ad:41:26:63:44:a9:f9:85:e7:64:45:94:59:82:
15:76:89:50:ad:cd:c2:00:7c:f1:b5:5d:5a:23:d4:f8:7e:30:
60:31:45:7e:53:b4:1b:bf:8b:59:4a:e5:cd:62:da:d7:05:5d:
e9:61:bc:6e:36:53:08:43:7d:02:b0:57:3e:26:c1:92:89:1a:
ca:94:de:29:3c:e6:e1:43:26:40:46:2c:34:71:28:7d:97:51:
fb:9a:7f:bf:ad:0b:18:fe:3a:85:2b:88:34:d1:fd:35:ec:ec:
52:54:3c:bf:cd:15:24:e0:c8:9b:9b:41:17:20:d1:b6:74:1e:
30:44:9c:50:c5:cc:48:5c:65:4d:2e:ee:1a:7c:8e:bf:ab:cb:
5e:ba:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:14 2026 by rpki-client