
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json)
Hash identifier: 0eOzast8l+qhxt4Wxa3tN+AsqYb6vzCasUsgT7/mfrs=
Subject key identifier: 6E:CB:89:C1:0E:18:F1:4D:F5:45:C4:1B:D0:AC:38:AA:1F:13:97:F4
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial: 0C56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
Manifest number: 0C4E
Signing time: Tue 12 May 2026 18:46:27 +0000
Manifest this update: Tue 12 May 2026 18:46:27 +0000
Manifest next update: Tue 19 May 2026 18:46:27 +0000
Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: NLknw8/lak71eemOrFBVUZ62qmvWdb0C8xXTimQIIbs=)
2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: lKs57ar3B+Bk7HcoSnOmAncGxHshQS9IzWUKxOnfU4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Validity
Not Before: May 12 18:46:27 2026 GMT
Not After : May 19 18:46:27 2026 GMT
Subject: CN=6a037583-0ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:ef:d1:3f:b1:4b:b0:b5:e7:e7:a9:a0:dd:
07:e0:9f:af:63:ed:cf:c1:1b:fe:44:c3:25:39:6c:
ed:8e:9d:df:dd:3e:15:13:f3:55:f2:45:af:a1:9c:
cb:bb:8d:8c:8e:9e:c4:12:fe:b0:60:72:97:f9:c0:
a6:8f:e2:3d:4a:63:38:84:04:88:b3:e3:15:64:c6:
de:f2:32:2e:0b:32:08:7a:39:af:62:4e:21:37:c8:
54:09:a8:f6:cf:7b:c6:83:c7:56:09:b7:4b:2c:b4:
c5:84:84:ba:99:00:a0:dd:62:de:d6:07:08:a3:98:
eb:2c:3e:63:f2:6c:eb:7c:4e:79:9a:9d:e2:9b:cb:
28:f0:62:f8:8b:53:eb:ea:32:d5:7a:8e:f9:09:84:
84:fe:0c:37:d1:ab:71:46:d7:fb:56:9d:e0:f9:65:
d0:fe:dd:86:e3:99:8e:f8:e4:b2:eb:76:3b:1a:14:
0e:3b:d1:52:a4:51:f2:8b:4f:42:22:41:9b:38:c4:
b3:e8:78:d3:cf:0f:9b:52:17:87:b0:fb:cd:1b:ee:
e6:d4:b3:8f:6c:3d:a6:b6:a4:b2:cc:e0:d6:b3:4a:
73:11:c6:73:81:ec:a0:46:4e:57:02:b7:1f:f4:e5:
54:5f:fe:6e:a3:85:60:6a:47:56:96:23:93:b0:f9:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:89:C1:0E:18:F1:4D:F5:45:C4:1B:D0:AC:38:AA:1F:13:97:F4
X509v3 Authority Key Identifier:
keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:70:59:84:1b:bd:1c:17:5d:c3:91:ae:e2:be:8e:72:f0:60:
fd:78:ac:07:00:8f:bf:b7:f1:cf:f2:a1:7a:d3:de:7c:5b:cc:
9f:75:f3:2d:e9:d7:9d:80:76:f2:8b:70:02:0f:43:52:24:3e:
7e:92:59:67:37:b1:f4:32:1f:fd:df:8a:c1:32:88:09:a1:32:
e8:cc:42:9d:e0:a2:84:37:7c:ed:15:eb:c4:3d:d7:46:3e:57:
c9:cf:28:7a:a3:7f:fd:40:6d:ac:28:e7:ba:1d:98:07:71:34:
dc:f5:29:3d:0a:82:14:1b:8b:d5:3d:5f:93:02:a2:7e:a2:f9:
86:9c:c3:c8:55:d3:76:27:db:bc:5a:b4:6b:6c:4b:96:f3:4f:
91:49:20:eb:54:a7:da:53:07:ff:d9:12:a5:e4:be:ce:82:42:
ef:a6:4a:71:96:ec:af:99:09:92:ef:8f:38:fc:5c:56:8a:84:
84:3a:42:30:6b:1a:3d:3f:49:93:9d:af:85:90:93:ba:91:52:
99:a5:b6:73:28:ce:2c:42:7b:91:7d:a6:51:3e:0e:82:17:be:
4c:0f:7a:37:cd:8b:27:dd:44:43:d5:bd:a4:32:a0:f9:53:55:
45:0c:f5:1f:ef:48:a7:ad:bd:8f:81:77:13:af:aa:40:01:f7:
b4:5c:e1:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4
RTFGODMxRkYwHhcNMjYwNTEyMTg0NjI3WhcNMjYwNTE5MTg0NjI3WjAYMRYwFAYD
VQQDEw02YTAzNzU4My0wZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwPv0T+xS7C15+epoN0H4J+vY+3PwRv+RMMlOWztjp3f3T4VE/NV8kWvoZzL
u42Mjp7EEv6wYHKX+cCmj+I9SmM4hASIs+MVZMbe8jIuCzIIejmvYk4hN8hUCaj2
z3vGg8dWCbdLLLTFhIS6mQCg3WLe1gcIo5jrLD5j8mzrfE55mp3im8so8GL4i1Pr
6jLVeo75CYSE/gw30atxRtf7Vp3g+WXQ/t2G45mO+OSy63Y7GhQOO9FSpFHyi09C
IkGbOMSz6HjTzw+bUheHsPvNG+7m1LOPbD2mtqSyzODWs0pzEcZzgeygRk5XArcf
9OVUX/5uo4VgakdWliOTsPmR8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7LicEO
GPFN9UXEG9CsOKofE5f0MB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2
MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV
MDZIdHAtMG1RR1dPSDRNZjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp3BZhBu9HBddw5Gu4r6OcvBg/XisBwCPv7fxz/KhetPefFvMn3XzLenXnYB2
8otwAg9DUiQ+fpJZZzex9DIf/d+KwTKICaEy6MxCneCihDd87RXrxD3XRj5Xyc8o
eqN//UBtrCjnuh2YB3E03PUpPQqCFBuL1T1fkwKifqL5hpzDyFXTdifbvFq0a2xL
lvNPkUkg61Sn2lMH/9kSpeS+zoJC76ZKcZbsr5kJku+POPxcVoqEhDpCMGsaPT9J
k52vhZCTupFSmaW2cyjOLEJ7kX2mUT4Oghe+TA96N82LJ91EQ9W9pDKg+VNVRQz1
H+9Ip629j4F3E6+qQAH3tFzhGw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:11:50 2026 by rpki-client