
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
File: puZHuaRPqqc-u4IEBQzGTMpFmOo.mft (raw, json)
Hash identifier: nON+UnM0sor9j1RF6Xv7FmUuiDM6Z/AooEbD4SLaH4A=
Subject key identifier: 0F:C1:8C:76:87:26:41:C0:D3:AF:95:59:DF:6C:AE:E3:B9:06:C5:67
Authority key identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA
Certificate issuer: /CN=A91C5319/serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
Manifest number: 0127
Signing time: Mon 11 May 2026 05:44:41 +0000
Manifest this update: Mon 11 May 2026 05:44:41 +0000
Manifest next update: Mon 18 May 2026 05:44:41 +0000
Files and hashes: 1: puZHuaRPqqc-u4IEBQzGTMpFmOo.crl (hash: vkycS2Q3XoYy8uvuJGVDdngz7ffyIDqDdY36Q7ck++E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl
rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5319, serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA
Validity
Not Before: May 11 05:44:41 2026 GMT
Not After : May 18 05:44:41 2026 GMT
Subject: CN=6a016cc9-2752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:b0:6e:8e:02:8f:53:19:d1:cd:c7:af:39:
72:ad:45:12:0a:eb:06:27:c3:d3:ee:62:38:27:5e:
66:d8:32:12:7f:3a:c3:ce:ae:08:c8:16:db:48:c3:
f6:4c:22:38:69:ad:9a:70:d6:02:c9:f0:4f:7c:26:
79:48:88:75:10:4b:8c:c3:40:5c:64:5b:d1:7e:34:
ed:94:3d:60:61:ef:d5:a9:09:24:bb:aa:fb:24:34:
29:d5:f7:8b:e3:ef:c0:d3:e3:29:c4:6d:58:69:ef:
2e:27:6a:c7:3e:11:51:a4:71:9d:48:81:7b:d3:7f:
5b:e6:31:e0:63:7e:db:1f:d5:d1:86:82:11:61:04:
a9:7f:0b:dc:30:3c:d3:af:f4:d8:47:64:ff:11:96:
29:79:5f:22:fe:d4:f9:00:16:bc:a1:95:2f:35:7b:
3e:dc:b4:ca:13:33:d7:25:f0:92:6f:77:89:ef:c1:
7e:90:c5:54:3e:79:81:10:50:e4:74:9c:04:54:aa:
15:ee:70:3d:82:19:56:cb:d1:26:27:ef:45:0e:b6:
f3:d0:6f:f1:44:bf:fb:6a:f7:2e:d2:ee:ee:fa:fe:
cb:90:73:49:a8:e3:ce:6d:eb:32:04:f9:99:a7:e2:
d9:f2:88:9c:f9:f2:51:49:a0:d3:62:63:b8:5e:b9:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:8C:76:87:26:41:C0:D3:AF:95:59:DF:6C:AE:E3:B9:06:C5:67
X509v3 Authority Key Identifier:
keyid:A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:98:ff:64:53:8c:45:db:c5:11:9c:4c:44:c8:64:b1:0a:
d8:74:b5:db:b1:25:fa:1c:f9:0a:03:d0:b4:ed:f9:ee:c9:f3:
55:ef:3d:40:97:b2:f2:5b:1b:89:09:1f:87:1a:26:f4:f1:b8:
16:67:ec:e5:94:28:b2:f2:ec:05:8f:26:e9:34:42:0a:3e:52:
c9:49:4e:24:da:54:30:f3:7c:ef:41:82:88:8e:04:11:b1:85:
4d:e4:ae:00:32:01:8a:d0:b4:b9:ff:e2:5d:05:b6:b7:83:8c:
d0:d2:d2:95:9b:f5:48:5e:9e:c4:7f:49:f4:e7:c7:ae:3a:94:
4f:5a:57:50:25:e9:ad:ba:7a:c1:a4:ad:b2:a5:eb:c5:62:24:
ad:73:48:f3:a4:aa:6a:db:aa:ff:25:9b:1a:8c:76:f7:2a:0e:
06:99:35:fd:aa:f7:ab:8f:a5:2f:ad:5f:ec:42:27:4e:91:2d:
07:5c:3b:5d:74:cf:bf:eb:f5:e6:fc:af:39:8e:64:c4:9d:28:
52:de:5d:16:77:52:5e:f3:ac:e9:83:03:59:e4:ff:9d:fa:74:
da:f2:ac:73:be:fa:7b:a4:4e:27:f3:43:36:1d:26:6b:4c:35:
da:84:db:2b:bb:87:20:d0:0a:be:67:53:3e:84:6b:ed:8e:a7:
64:82:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:02 2026 by rpki-client