
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: clUt5fR3Gu88BwsWbVnrMoVxv2d3SZo/ct/57n9eDjI=
Subject key identifier: 0D:9B:1F:F6:64:48:B0:5D:74:17:B2:89:90:47:94:77:F8:CE:90:3B
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: 01EA
Signing time: Sun 27 Sep 2026 03:52:04 +0000
Manifest this update: Sun 27 Sep 2026 03:52:03 +0000
Manifest next update: Sun 04 Oct 2026 03:52:03 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: l/BmgKIfgBMFNqDgRWSVJookjNYfw5ZTbiYsmFIJiDY=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: Hl7KpmuGRcPCF5t46SvY389AlxSI9ZtpOG8yltdH/G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Validity
Not Before: Sep 27 03:52:03 2026 GMT
Not After : Oct 4 03:52:03 2026 GMT
Subject: CN=6ab892e4-7265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:b6:e1:75:08:ff:c9:3f:1e:90:90:88:18:
9a:09:68:40:85:59:42:84:0e:39:c5:aa:7e:17:4f:
91:d5:57:bc:72:41:bd:8f:16:aa:b7:09:60:7d:51:
1e:f7:12:54:39:b0:0e:06:7a:8b:a9:9a:6a:96:c1:
cf:9a:75:3e:3e:ef:87:cc:0b:bb:d7:a3:a0:57:f2:
15:da:97:34:d6:d2:b8:e4:4b:63:29:6e:59:3e:ad:
df:1d:ab:73:42:c9:7d:03:87:99:90:22:c9:fd:d6:
20:73:09:a2:40:35:7c:f1:7b:10:2d:c2:3f:41:5f:
51:47:a5:d9:25:ec:d4:e6:db:bd:58:83:49:00:9b:
73:5a:9f:7c:21:e2:94:49:c8:d4:48:0b:c2:ce:20:
e4:38:b5:b8:a7:f7:0a:dc:b9:ad:37:3f:7e:13:b9:
5c:ec:32:63:a0:db:d8:75:df:59:3d:04:e0:97:4e:
01:ac:c9:78:12:29:fc:ed:a0:96:13:c8:63:5f:d3:
2b:46:aa:10:d3:83:58:44:a1:cf:7d:07:e2:93:39:
51:37:26:2e:8d:74:5e:4e:85:66:50:22:68:6c:34:
4b:30:23:dd:82:44:50:50:87:50:54:6a:16:52:5c:
be:c1:6e:cc:e7:24:54:e1:e7:d1:93:74:04:79:7d:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:1F:F6:64:48:B0:5D:74:17:B2:89:90:47:94:77:F8:CE:90:3B
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:6e:96:11:c6:9e:21:15:34:0e:b3:51:ff:0f:cc:2e:6b:
44:ed:4e:1c:0e:15:5c:70:41:75:de:35:2d:60:6d:87:0a:f3:
02:db:40:c7:5d:83:98:4d:e8:7a:99:07:e1:d1:1d:09:89:80:
90:e9:07:c2:e6:2c:b0:e2:ce:b7:7a:eb:fb:f2:5f:fa:39:e2:
b6:c6:84:13:2e:b6:29:0f:28:65:91:15:98:26:da:c4:1a:50:
57:66:8d:27:98:d7:b2:59:1c:d3:0b:ee:91:12:8b:8e:b7:89:
c6:21:ff:8e:5c:51:3f:0a:4f:9c:9e:01:41:65:d6:60:b7:cc:
5c:d7:ed:c9:9c:ec:9d:3d:f4:5d:b8:62:65:b9:37:a2:1f:43:
06:57:80:19:45:5c:49:18:bf:2e:cb:24:c4:eb:0e:72:63:e7:
81:92:06:2d:72:32:29:90:46:d7:cf:44:62:04:d7:df:24:17:
6e:e5:6b:e3:50:c1:4c:72:d5:25:da:9b:e2:78:5b:40:5e:a9:
4a:cf:cb:e1:19:81:46:62:10:d3:a7:eb:56:7d:7f:e4:2c:6e:
5b:c8:79:ae:be:f3:25:06:49:10:58:36:39:cc:c0:df:84:2b:
b7:45:e4:05:84:13:b7:ac:09:04:13:23:b2:19:b5:8f:e1:8b:
a1:2c:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:56:16 2026 by rpki-client