
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: 8UnihWLUjJo+pxxWR3hbGaMIa0ERa2ixbXoM8jCsMek=
Subject key identifier: 21:FC:62:DE:F2:B5:70:84:8E:C1:34:9B:E2:E5:E4:DC:03:CB:B8:FD
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: 018A
Signing time: Wed 25 Mar 2026 03:47:01 +0000
Manifest this update: Wed 25 Mar 2026 03:47:01 +0000
Manifest next update: Wed 01 Apr 2026 03:47:01 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: 5kN6RDGM2QtexaRlhDDSC0mpkqCYIuTqU5g3ICG7iW4=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: PDwtIQMH7CUi+ETshPcgYy3XMt2b+vkH5kQDyN2jN0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Validity
Not Before: Mar 25 03:47:01 2026 GMT
Not After : Apr 1 03:47:01 2026 GMT
Subject: CN=69c35ab5-7188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:de:e3:83:f7:46:e4:c7:a0:fb:b4:8d:1e:
75:66:7b:12:8c:da:74:d6:2b:a5:24:08:6f:c9:fd:
38:2b:99:c1:94:2a:56:ea:d7:c6:d5:18:1a:09:c2:
11:63:72:8c:6d:33:cf:61:76:d2:82:0e:05:0f:57:
88:ce:5c:9b:de:89:2d:35:38:bb:ad:80:ad:a2:9d:
ac:7d:3e:ce:17:8e:ef:f1:4c:14:26:83:7c:2c:da:
26:b9:d8:1a:e7:1f:c8:46:ef:88:2e:eb:4a:5a:d0:
9d:15:07:88:23:be:e6:50:97:39:3f:3e:3d:4b:f6:
2c:ce:d0:fe:8c:99:2d:dc:8f:33:75:61:eb:b7:8a:
f3:96:ad:92:f1:1f:83:95:35:f0:dc:bd:81:89:6e:
b7:b1:25:67:3e:59:ed:45:b1:fa:fb:4b:da:00:f0:
fd:2d:6d:33:e9:b2:90:1d:01:16:24:ab:ef:c2:c2:
0e:38:64:14:69:eb:50:f4:10:7c:73:74:b0:86:41:
ec:f6:e0:0e:c4:fb:d8:0f:ee:44:90:e7:ca:aa:3b:
a8:4d:5a:4f:7b:75:99:1b:96:57:17:8e:9b:f8:65:
f4:09:ae:00:d7:e5:79:c0:31:c7:fd:04:37:1a:3b:
6a:82:0e:f7:7c:9e:a2:51:54:e4:e2:60:4c:17:e1:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:62:DE:F2:B5:70:84:8E:C1:34:9B:E2:E5:E4:DC:03:CB:B8:FD
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e6:a1:86:ca:fc:cd:d3:0e:10:f4:e8:51:74:b7:be:a4:8c:
e5:bc:82:f1:9e:d4:dd:3f:48:84:f4:56:3f:85:2b:10:89:b3:
18:f7:06:5e:15:e8:73:51:cd:20:2a:90:b0:ae:ed:8b:d5:7b:
83:04:e9:8c:87:bd:53:3d:51:1e:a0:17:a4:c6:02:05:6d:a8:
0f:bc:cf:36:af:3a:d7:09:f7:8f:6e:f1:a9:8d:7f:b7:a6:b0:
7d:2f:98:32:44:64:94:cc:81:33:c6:f9:66:d8:b1:7f:e4:0c:
91:95:5a:cf:75:7f:9a:5c:29:bf:23:b6:4b:4e:93:70:bc:8e:
a0:fc:97:c3:6b:14:b5:7e:7f:2d:45:b4:3e:23:1e:46:dc:75:
9a:74:16:47:43:81:49:1a:04:7a:86:2b:31:cc:c7:63:a6:52:
99:75:49:00:f2:a1:09:d7:16:d6:dd:ee:39:ba:53:15:29:01:
4a:db:c6:01:7f:64:75:c6:86:bb:4a:51:63:53:9f:d9:f9:c1:
a3:e6:ee:23:07:22:c8:96:c7:7a:59:72:f1:60:3d:53:15:ec:
a7:0c:43:7b:e2:fb:38:ce:b9:8e:57:f5:7c:29:7a:68:24:f8:
8e:3c:d5:89:d0:26:01:c9:42:c2:09:20:5f:6c:c8:8a:5e:58:
26:98:ae:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE
QUQ5MUI0MDYwHhcNMjYwMzI1MDM0NzAxWhcNMjYwNDAxMDM0NzAxWjAYMRYwFAYD
VQQDEw02OWMzNWFiNS03MTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2mfe44P3RuTHoPu0jR51ZnsSjNp01iulJAhvyf04K5nBlCpW6tfG1RgaCcIR
Y3KMbTPPYXbSgg4FD1eIzlyb3oktNTi7rYCtop2sfT7OF47v8UwUJoN8LNomudga
5x/IRu+ILutKWtCdFQeII77mUJc5Pz49S/YsztD+jJkt3I8zdWHrt4rzlq2S8R+D
lTXw3L2BiW63sSVnPlntRbH6+0vaAPD9LW0z6bKQHQEWJKvvwsIOOGQUaetQ9BB8
c3SwhkHs9uAOxPvYD+5EkOfKqjuoTVpPe3WZG5ZXF46b+GX0Ca4A1+V5wDHH/QQ3
Gjtqgg73fJ6iUVTk4mBMF+EjtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH8Yt7y
tXCEjsE0m+Ll5NwDy7j9MB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0
ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow
NVk1ZFRCODduUkxhMlJ0QVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo+ahhsr8zdMOEPToUXS3vqSM5byC8Z7U3T9IhPRWP4UrEImzGPcGXhXoc1HN
ICqQsK7ti9V7gwTpjIe9Uz1RHqAXpMYCBW2oD7zPNq861wn3j27xqY1/t6awfS+Y
MkRklMyBM8b5Ztixf+QMkZVaz3V/mlwpvyO2S06TcLyOoPyXw2sUtX5/LUW0PiMe
Rtx1mnQWR0OBSRoEeoYrMczHY6ZSmXVJAPKhCdcW1t3uObpTFSkBStvGAX9kdcaG
u0pRY1Of2fnBo+buIwciyJbHelly8WA9UxXspwxDe+L7OM65jlf1fCl6aCT4jjzV
idAmAclCwgkgX2zIil5YJpiu3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:51 2026 by rpki-client