
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier: MusoId/P86dLfGsr9GvY21C12nReIsRGBTYAVWUIIVQ=
Subject key identifier: 93:34:E9:7E:48:0A:01:E5:25:3E:03:FD:CF:98:CF:0A:DB:49:8A:9E
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number: 0168
Signing time: Thu 23 Jul 2026 06:25:38 +0000
Manifest this update: Thu 23 Jul 2026 06:25:37 +0000
Manifest next update: Thu 30 Jul 2026 06:25:37 +0000
Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: fv0qLckJn/DYW5VnObLfFMDBi4qdqV126VkRndsRIH0=)
2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: 8DprNqSctLRq9Um1DBwsXYIm/hC+xtUbZc0GLoio6ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Validity
Not Before: Jul 23 06:25:37 2026 GMT
Not After : Jul 30 06:25:37 2026 GMT
Subject: CN=6a61b3e2-d8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:f9:62:4c:f3:7b:f0:0c:75:11:1c:ae:43:
fd:12:b6:22:72:96:4f:33:ab:ad:af:66:ce:b0:e5:
eb:64:55:86:b2:c5:65:d0:85:dd:19:32:02:af:ef:
ec:0d:75:2b:a0:80:81:a5:95:c0:11:90:d9:df:85:
51:52:8f:26:0f:3e:1b:d5:40:05:e7:6a:da:2b:7a:
b8:87:e8:d0:4b:b7:3f:7b:06:81:92:be:21:62:7b:
d7:2c:d5:cf:e1:f8:9c:4e:08:68:cb:e8:5c:4f:66:
dc:34:37:13:3b:cc:f8:94:7a:14:f8:15:00:18:48:
97:64:16:12:86:2c:6e:cd:8e:32:a8:0e:40:ae:14:
a1:1d:a3:94:4a:b0:72:bc:1e:b2:44:fc:86:dc:1f:
59:fa:8e:61:1f:36:9f:f9:14:52:d5:24:f0:5e:30:
09:50:9b:a3:c0:4a:d5:0f:35:3e:a3:dc:28:ff:06:
de:94:e8:3f:ca:71:9f:f2:5a:cb:a0:d3:52:7f:19:
b8:e2:ec:40:8d:b5:c5:aa:84:2d:e2:ec:2d:64:c0:
7c:9c:d4:bd:01:d5:4f:38:26:42:b9:66:4e:31:b2:
fc:d0:74:0e:cf:a3:e9:31:38:d4:ed:25:e2:a7:3a:
11:90:8a:fa:3d:f5:50:68:7e:65:c5:69:93:fe:52:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:E9:7E:48:0A:01:E5:25:3E:03:FD:CF:98:CF:0A:DB:49:8A:9E
X509v3 Authority Key Identifier:
keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:2f:c9:9c:47:1a:6e:b4:19:37:0c:85:d3:15:bc:8c:6a:
0c:a9:e8:fc:5b:36:03:20:d3:a1:32:4c:33:d7:6a:3a:bb:57:
6b:64:92:57:7c:8d:43:3b:e7:25:66:74:ff:a2:7a:d9:63:45:
a9:6a:e5:f9:37:77:14:d5:eb:9b:ee:2c:1d:31:78:dc:97:1e:
23:ef:a8:71:e3:de:2b:2d:f6:b1:bb:a5:12:1c:c4:1a:61:0a:
65:ab:f9:56:59:19:ab:98:ed:d0:e4:14:2a:8c:b0:5b:5e:61:
b2:de:b4:4a:a3:22:5e:a4:cd:f8:80:bc:90:4a:db:60:4e:99:
0a:c6:85:54:d9:2e:a4:bc:14:8c:a7:a9:f9:0c:c2:50:bb:cb:
f0:b0:97:1e:a1:75:d6:75:3d:12:0c:28:98:c8:f1:63:13:8f:
ec:8c:dc:aa:80:cc:6f:37:82:68:00:08:b9:1d:1b:f2:ac:d7:
ec:04:31:6d:d7:41:f2:7c:cd:42:a4:19:ee:05:20:a4:29:05:
db:a4:fe:20:dd:28:8f:99:b9:c0:4b:60:b8:33:a1:20:91:15:
dc:07:4d:39:6c:92:bf:28:0c:81:ea:40:c6:30:aa:73:23:c1:
09:02:bb:21:56:d9:64:d9:f6:9b:8f:29:3a:1f:ee:b9:ce:0e:
64:66:d8:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCNDExMTAvBgNVBAUTKEE2RTlDQkE1MjlDMDVBOTYyNENBNjAzNTQ4QTNFMzE0
OTE3NThGMkIwHhcNMjYwNzIzMDYyNTM3WhcNMjYwNzMwMDYyNTM3WjAYMRYwFAYD
VQQDEw02YTYxYjNlMi1kOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbP5Ykzze/AMdREcrkP9ErYicpZPM6utr2bOsOXrZFWGssVl0IXdGTICr+/s
DXUroICBpZXAEZDZ34VRUo8mDz4b1UAF52raK3q4h+jQS7c/ewaBkr4hYnvXLNXP
4ficTghoy+hcT2bcNDcTO8z4lHoU+BUAGEiXZBYShixuzY4yqA5ArhShHaOUSrBy
vB6yRPyG3B9Z+o5hHzaf+RRS1STwXjAJUJujwErVDzU+o9wo/wbelOg/ynGf8lrL
oNNSfxm44uxAjbXFqoQt4uwtZMB8nNS9AdVPOCZCuWZOMbL80HQOz6PpMTjU7SXi
pzoRkIr6PfVQaH5lxWmT/lL9BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJM06X5I
CgHlJT4D/c+YzwrbSYqeMB8GA1UdIwQYMBaAFKbpy6UpwFqWJMpgNUij4xSRdY8r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS82OUI3Njk4RTYw
NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdwWWt5bUExU0tQakZKRjFq
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3B1bkxwU25BV3BZa3ltQTFTS1BqRkpGMWp5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUI0MS82OUI3Njk4RTYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdw
WWt5bUExU0tQakZKRjFqeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQFgvyZxHGm60GTcMhdMVvIxqDKno/Fs2AyDToTJMM9dqOrtXa2SSV3yNQzvn
JWZ0/6J62WNFqWrl+Td3FNXrm+4sHTF43JceI++ocePeKy32sbulEhzEGmEKZav5
VlkZq5jt0OQUKoywW15hst60SqMiXqTN+IC8kErbYE6ZCsaFVNkupLwUjKep+QzC
ULvL8LCXHqF11nU9EgwomMjxYxOP7IzcqoDMbzeCaAAIuR0b8qzX7AQxbddB8nzN
QqQZ7gUgpCkF26T+IN0oj5m5wEtguDOhIJEV3AdNOWySvygMgepAxjCqcyPBCQK7
IVbZZNn2m48pOh/uuc4OZGbY3A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:35 2026 by rpki-client