
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File: P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier: nO1F++zhzcUFzNaE7HxMu3324gi65y8AOWwJkar4RFM=
Subject key identifier: EE:17:26:C9:93:77:BF:F4:0D:FA:7D:46:41:5B:71:FC:2D:11:D1:AC
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer: /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number: 41
Signing time: Thu 23 Jul 2026 10:29:01 +0000
Manifest this update: Thu 23 Jul 2026 10:29:00 +0000
Manifest next update: Thu 30 Jul 2026 10:29:00 +0000
Files and hashes: 1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: BzbMJIm8FvkwbF/lXKdBMY9aUFRF3aQDXMs4gnUB5+c=)
2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Validity
Not Before: Jul 23 10:29:00 2026 GMT
Not After : Jul 30 10:29:00 2026 GMT
Subject: CN=6a61eced-9dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:44:ef:8e:e2:f4:f5:ed:c9:c2:3f:bf:58:
32:f9:96:31:a1:fc:09:46:ca:d6:e2:1c:2c:89:2d:
1b:ff:dc:52:da:21:e9:65:26:44:a1:9b:cf:14:2c:
42:3b:4b:7f:78:58:ab:33:33:c9:5a:ad:87:63:9f:
a6:c0:1d:4a:ec:b9:04:18:d3:2d:59:9d:d3:97:e5:
51:06:30:f9:15:07:04:45:34:8b:2a:2c:b0:58:0e:
aa:b8:bf:fa:d3:8a:79:b9:86:91:b0:9b:6c:c1:3d:
d2:7c:61:97:aa:4b:ee:3d:92:da:02:7a:f3:d3:90:
96:02:c1:05:1c:f9:a2:75:83:0b:08:a1:8a:4d:b2:
13:d1:c1:66:fb:12:f0:f5:50:13:27:67:ff:ca:1c:
18:e2:7e:5e:a4:7f:11:31:ee:fc:f1:dc:2c:cc:b1:
b2:e3:4f:68:50:e7:f0:37:6f:fa:1e:9a:e3:0a:6b:
66:7d:c1:13:aa:00:90:6f:af:e4:93:47:1f:cf:1b:
24:9e:dc:45:db:6a:a5:32:d5:d2:6c:fc:27:7e:54:
ee:9d:67:1b:46:02:ba:3b:46:74:36:cc:73:c3:f3:
e9:f7:d6:60:b6:36:ab:21:52:b8:a3:2d:8d:ea:86:
49:d3:42:f6:b2:03:9a:8c:c0:9b:03:b7:76:d9:55:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:26:C9:93:77:BF:F4:0D:FA:7D:46:41:5B:71:FC:2D:11:D1:AC
X509v3 Authority Key Identifier:
keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:2b:3f:b7:2b:e0:fa:d4:0c:31:25:18:58:18:4e:6d:ec:bd:
76:97:08:2d:3c:6f:ec:dd:f0:c1:22:48:d4:31:e3:79:d2:31:
41:77:ca:46:ce:7c:ae:d8:ac:f1:1a:2f:53:b5:e9:48:3e:46:
41:2b:f5:c7:48:e7:0f:c0:14:6f:cd:ff:fc:4f:e6:50:3e:4a:
31:51:22:c2:24:81:3c:a5:25:44:39:08:5f:f4:98:38:62:26:
be:1c:98:3b:f0:e9:c1:88:a3:8e:88:a4:0e:3e:8b:36:3a:f9:
a6:06:19:43:69:07:f2:a7:4b:cc:da:e6:67:04:d4:ae:74:6d:
64:4d:93:7d:b0:ba:f8:7d:d3:23:6a:33:13:76:c6:a1:e4:45:
58:c3:cf:a7:5c:24:73:d7:c2:20:d8:a9:12:7c:78:52:f3:b4:
54:82:d3:ce:74:b7:01:10:bd:08:22:27:36:b3:b1:61:ce:bf:
ff:31:62:06:85:6c:25:13:55:c3:42:18:80:b9:8f:58:f5:8b:
3d:d7:63:c9:c2:3a:6f:e8:68:06:b6:ca:9a:bc:82:c9:a2:5f:
71:3d:b6:5e:44:10:0d:a7:f2:c6:08:60:5f:7f:5d:f0:ae:21:
b4:50:8e:51:bb:6f:f7:eb:38:e1:6e:21:61:6b:a3:60:78:a2:
d1:7d:4b:fb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjQyODExMC8GA1UEBRMoM0Y2RDI5QkIxRjc0NzkzQ0Y4OEM3ODM3Mjg1NjNCQkQ0
M0U4MEEzRTAeFw0yNjA3MjMxMDI5MDBaFw0yNjA3MzAxMDI5MDBaMBgxFjAUBgNV
BAMTDTZhNjFlY2VkLTlkZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUO0TvjuL09e3Jwj+/WDL5ljGh/AlGytbiHCyJLRv/3FLaIellJkShm88ULEI7
S394WKszM8larYdjn6bAHUrsuQQY0y1ZndOX5VEGMPkVBwRFNIsqLLBYDqq4v/rT
inm5hpGwm2zBPdJ8YZeqS+49ktoCevPTkJYCwQUc+aJ1gwsIoYpNshPRwWb7EvD1
UBMnZ//KHBjifl6kfxEx7vzx3CzMsbLjT2hQ5/A3b/oemuMKa2Z9wROqAJBvr+ST
Rx/PGySe3EXbaqUy1dJs/Cd+VO6dZxtGAro7RnQ2zHPD8+n31mC2NqshUrijLY3q
hknTQvayA5qMwJsDt3bZVfOtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7hcmyZN3
v/QN+n1GQVtx/C0R0awwHwYDVR0jBBgwFoAUP20pux90eTz4jHg3KFY7vUPoCj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NDI4L0VGNUMyN0I0MjQ2
MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6NGpIZzNLRlk3dlVQb0Nq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDIwcHV4OTBlVHo0akhnM0tGWTd2VVBvQ2o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
NDI4L0VGNUMyN0I0MjQ2MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6
NGpIZzNLRlk3dlVQb0NqNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBGKz+3K+D61AwxJRhYGE5t7L12lwgtPG/s3fDBIkjUMeN50jFBd8pGznyu2Kzx
Gi9TtelIPkZBK/XHSOcPwBRvzf/8T+ZQPkoxUSLCJIE8pSVEOQhf9Jg4Yia+HJg7
8OnBiKOOiKQOPos2OvmmBhlDaQfyp0vM2uZnBNSudG1kTZN9sLr4fdMjajMTdsah
5EVYw8+nXCRz18Ig2KkSfHhS87RUgtPOdLcBEL0IIic2s7Fhzr//MWIGhWwlE1XD
QhiAuY9Y9Ys912PJwjpv6GgGtsqavILJol9xPbZeRBANp/LGCGBff13wriG0UI5R
u2/36zjhbiFha6NgeKLRfUv7
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:30 2026 by rpki-client