
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File: P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier: EPlNMOUQYK087RziR2gUmjFDywIv/EJI8Cp4QhPgvX8=
Subject key identifier: B8:33:0D:4C:98:1A:BF:01:C6:AE:5E:9A:72:70:C4:93:C6:52:BE:7F
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer: /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number: 61
Signing time: Wed 23 Sep 2026 07:50:25 +0000
Manifest this update: Wed 23 Sep 2026 07:50:25 +0000
Manifest next update: Wed 30 Sep 2026 07:50:25 +0000
Files and hashes: 1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: +Ck0QdUROBkDMAirDTRZXIFdUOCvXZON3waEn0CCTCk=)
2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Validity
Not Before: Sep 23 07:50:25 2026 GMT
Not After : Sep 30 07:50:25 2026 GMT
Subject: CN=6ab384c1-2b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:3a:73:3d:96:0d:7d:57:de:9c:aa:5f:93:
86:85:e8:02:8e:88:98:a0:df:3f:ad:69:09:5a:1f:
00:b5:41:9f:7d:f3:d8:4f:b4:a5:1f:a5:a2:76:34:
56:5e:36:d5:31:3a:41:16:66:9b:b4:a7:4e:01:c6:
8d:7d:a6:fc:86:38:67:b3:b3:79:93:fa:b2:18:24:
fc:49:27:87:bb:a5:40:71:66:8a:b1:76:86:d1:c2:
12:e2:2e:cf:ac:c3:4a:0d:ce:0d:3e:3f:e0:40:40:
e2:68:45:3f:a0:9b:dc:b5:43:91:6a:57:85:71:33:
b2:30:72:40:60:e7:07:84:46:bb:c8:4a:21:51:b1:
24:47:67:44:a3:22:8b:0b:71:80:bc:1d:4f:4f:33:
61:cd:32:e6:d5:c2:ad:06:aa:79:a9:b0:5b:14:ee:
92:0b:a5:d0:1d:1a:8b:aa:f8:4c:79:b8:e3:38:1b:
19:8d:f5:28:2c:00:4d:57:75:b9:49:f8:ce:e6:1d:
b3:b4:b1:e3:06:44:a0:02:a4:bc:7a:7b:8d:2e:83:
86:dc:55:ac:d8:10:a4:b9:6b:70:1c:64:14:60:6f:
a3:f3:0a:7d:60:a0:31:e3:0d:ce:0c:bc:29:f9:41:
aa:2f:58:e7:dd:91:8b:7d:cc:99:c5:4c:97:80:72:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:0D:4C:98:1A:BF:01:C6:AE:5E:9A:72:70:C4:93:C6:52:BE:7F
X509v3 Authority Key Identifier:
keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:8e:aa:3b:7e:4e:52:d6:3a:50:ce:9d:32:40:92:d9:d7:
a4:ee:75:55:bf:f5:a2:79:ba:b1:26:d8:4c:f6:6c:59:ef:0f:
bd:9e:5c:3b:6a:a1:dc:05:82:ff:01:1d:8b:cb:0f:5d:0e:7a:
eb:80:47:e8:90:27:87:49:13:cc:0e:80:c0:90:0b:dc:8f:03:
ca:f0:2a:f3:95:ec:6b:c0:28:4c:f5:9b:b5:53:f7:98:e3:be:
18:b5:1b:c6:d0:37:09:35:60:7a:21:7c:0e:20:02:68:00:ce:
71:de:af:cf:f1:d2:0f:0a:8f:ba:5f:32:49:47:fe:d8:40:17:
c8:b4:50:fc:81:90:37:f2:9f:86:ff:59:d5:fb:d1:4e:67:ef:
c0:4c:f1:ff:3c:b9:6d:2c:0e:d9:05:86:75:23:97:94:97:bb:
47:f3:93:ae:a4:f7:38:2d:ce:66:29:fb:6d:a8:d4:bc:26:d6:
59:4f:5b:f3:e4:55:7d:24:ba:18:20:73:60:d4:b3:4a:56:63:
46:e1:35:5a:a0:98:f0:c2:1f:b0:fd:43:d3:71:e8:48:60:cb:
50:ab:5e:c5:6f:8a:bf:2a:77:58:85:2c:b4:84:ae:b8:c9:5f:
e8:5c:5e:d6:e4:df:bf:d0:51:d9:a8:51:d8:37:04:09:e2:52:
5a:34:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:37 2026 by rpki-client