
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier: gl04VFk0GmpQ2Ph9Ll/z3Spd5dMs3V9EUOXrrMR1ygo=
Subject key identifier: EA:22:BD:14:70:AF:4F:75:D8:A9:25:68:9C:EE:A2:86:FB:5F:09:3E
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number: 0203
Signing time: Wed 13 May 2026 03:15:26 +0000
Manifest this update: Wed 13 May 2026 03:15:26 +0000
Manifest next update: Wed 20 May 2026 03:15:26 +0000
Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: u8SttGdHL6n8gHoSzh97arZNcMMIzylxlHW3LbZCs3I=)
2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: G97KXaER8oHFpVxJ9Nr+pWkbaSoOX+AJP+0tU8j2jBg=)
3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lY4zHcYM+OKzlDFbmIejzsChBG9D4T2+3+SOYmgyPIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Validity
Not Before: May 13 03:15:26 2026 GMT
Not After : May 20 03:15:26 2026 GMT
Subject: CN=6a03ecce-a8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:f4:98:73:6a:40:53:6d:1f:74:a8:56:2d:
1f:2c:22:21:49:dc:38:d6:68:c9:23:92:f1:9d:a4:
3f:39:49:5d:dd:59:e4:31:59:a0:46:f0:80:ab:af:
64:65:1e:c0:22:9b:7b:fa:f6:10:d9:ef:d5:3a:01:
7e:eb:19:80:4e:d1:00:9c:85:8a:fc:ff:a6:1a:6e:
7c:26:d8:2e:90:e5:79:7a:04:b8:6d:82:7e:48:19:
70:70:15:61:58:14:6f:ef:a4:ce:66:24:f7:9c:91:
aa:4d:53:23:80:53:9a:ec:25:9b:1e:5b:89:18:c3:
71:3e:43:5e:56:e0:f3:cb:97:15:28:b6:bd:95:d7:
4f:06:75:1b:d9:33:84:f1:12:f9:8e:bd:0f:aa:9f:
37:9c:b6:82:ae:d6:ab:d8:65:80:d1:ad:8a:19:34:
47:cd:4c:eb:a1:6e:51:2d:a3:cb:3d:2b:25:1e:b0:
c8:83:27:4a:cf:7a:8d:8c:2c:fc:e7:c8:64:31:66:
0d:a5:86:f4:51:08:ce:ff:59:58:53:14:f0:4e:56:
66:55:56:bb:f2:44:50:7a:bc:e5:49:c6:86:36:f0:
27:a1:ae:d5:06:ba:9b:3a:ff:34:71:b6:a4:30:69:
ff:53:d7:2b:60:1e:ca:3c:bc:5c:f9:0b:0b:ea:24:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:BD:14:70:AF:4F:75:D8:A9:25:68:9C:EE:A2:86:FB:5F:09:3E
X509v3 Authority Key Identifier:
keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:20:a0:4c:b2:e5:26:5b:73:cf:c0:4c:5a:b5:9c:ba:3b:
86:8c:4a:ba:20:2c:9a:61:67:1e:60:a6:4c:8f:d1:67:bc:54:
cf:ca:d1:f6:9c:49:53:e8:d6:df:2a:f7:1b:99:8e:f9:10:0b:
7b:d0:32:84:f5:97:7c:8b:12:c9:e2:10:3f:9b:63:40:38:ad:
c8:6c:c1:69:23:b2:49:60:40:21:08:1f:7b:27:3c:ce:a2:ff:
1d:ed:6e:68:4e:07:4f:2d:a5:86:6e:9b:81:b6:39:f4:b4:bd:
af:4d:c1:20:78:aa:ae:d1:a1:6e:ec:52:12:b5:a6:6c:7a:23:
cf:8a:f2:0d:9f:a9:bf:f9:8f:63:0a:06:d7:80:1e:b6:55:46:
5d:19:82:1f:8b:db:3a:ea:aa:6c:08:c8:05:a1:4c:17:82:c4:
f1:e2:78:df:2d:86:a7:68:36:94:99:74:35:fa:c0:f3:de:20:
aa:f5:4f:84:43:18:8f:43:0a:f1:3c:2a:9d:3f:1a:8f:23:fb:
4c:d1:34:c2:af:2d:89:4a:4e:51:48:9c:bb:df:36:e1:79:09:
d6:1f:af:62:0b:1a:ad:de:d6:8d:7f:fe:4e:bb:ba:b2:72:fd:
65:30:a9:5f:d7:3b:c5:c6:41:9b:19:6d:e8:b4:36:c4:a6:0c:
38:fe:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:38 2026 by rpki-client