
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier: fRoIH5yilqA5sNhxeC+s3VAPyF2swXWnsnvfw3KeW/s=
Subject key identifier: EA:AA:23:A1:21:89:7B:EF:D5:96:7A:4A:65:FA:28:FF:80:DF:06:DD
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial: 07AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number: 07A4
Signing time: Sat 26 Sep 2026 21:35:57 +0000
Manifest this update: Sat 26 Sep 2026 21:35:56 +0000
Manifest next update: Sat 03 Oct 2026 21:35:56 +0000
Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: To6A7LsYABUmsnm0iJ0XnPByFvKlZ8hknVJyoH0QvDw=)
2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: jmaFcpaDeiXM/6W+3Dvlo06UYUE1H6LTzGNr5Pw/4po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Validity
Not Before: Sep 26 21:35:56 2026 GMT
Not After : Oct 3 21:35:56 2026 GMT
Subject: CN=6ab83abd-2066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:ab:7d:6a:55:f0:97:af:7e:14:89:11:9a:
fc:1c:6a:29:b0:7f:b6:8f:40:0c:8d:cc:5a:e9:d1:
17:a7:68:bb:b8:9b:5b:2d:53:ea:71:e9:9f:f6:72:
f6:c2:0e:90:c2:56:a3:99:d8:a1:c4:7c:4c:1e:6f:
a2:d2:d6:30:13:10:db:27:55:fc:69:b6:1e:e0:08:
2f:3f:6a:21:40:60:d6:8b:e9:6e:57:53:95:bc:5e:
cb:d7:ba:06:db:c8:55:b0:0d:b0:ff:13:f2:9d:f5:
e6:e4:e5:e1:7f:c1:a9:bc:d4:2c:b7:9d:8e:33:f1:
b5:83:ee:6b:8a:e7:87:a9:5b:ad:d4:fb:fa:ae:40:
48:c7:d7:84:2b:1b:a7:95:92:03:3a:ae:ee:52:55:
c0:5f:f0:0f:5a:67:6f:4c:82:6f:77:67:10:7d:4d:
66:1e:08:89:69:10:6e:aa:3b:d1:5b:9a:42:ac:9e:
02:20:d3:c3:5b:a6:92:c9:c7:b3:7d:92:0e:af:bd:
83:6a:2e:03:6f:af:12:a8:da:5b:42:73:60:22:91:
5d:04:83:d7:f0:81:88:df:47:c6:b3:e8:3c:5a:a8:
2f:90:66:f1:3e:17:83:1b:64:b0:62:f1:49:f4:62:
cb:fc:be:5c:96:31:8a:ee:ae:95:49:ab:04:70:ec:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:23:A1:21:89:7B:EF:D5:96:7A:4A:65:FA:28:FF:80:DF:06:DD
X509v3 Authority Key Identifier:
keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ea:71:5b:a6:db:dc:be:03:4a:71:b8:42:69:b4:b5:6f:95:
03:b1:98:9a:55:57:01:51:90:3a:88:31:9b:ed:e6:2a:5d:c2:
85:a2:4e:99:9e:7b:51:1a:d7:33:4b:6f:b0:73:2e:0d:0f:2f:
4a:b5:91:c3:e5:4b:d0:f6:df:97:b8:bd:88:1c:a2:2e:1e:0d:
34:6a:01:0c:a4:ea:70:a8:a4:8f:b1:47:b7:ad:f0:41:26:0c:
5c:d6:88:6f:b8:63:2f:51:4e:00:fa:c5:b2:74:02:c5:5b:39:
94:15:68:6e:f5:fb:00:f3:04:20:dd:b1:8b:2d:e2:a7:62:36:
69:e0:4a:f7:4d:53:ba:7a:87:98:1f:d2:3d:ac:27:0d:68:e2:
ba:3a:b4:2c:ab:b5:e3:6a:e9:12:f7:f7:22:5a:ac:6f:53:02:
ed:e9:b1:19:b7:fe:1f:07:89:b3:5a:57:5c:12:d1:16:40:c0:
90:07:64:06:8b:be:ef:9d:26:69:f4:72:b5:f4:5d:0e:16:b6:
cf:2f:13:63:9d:1e:25:59:9d:c0:6d:26:81:9c:11:fa:08:22:
0d:c8:55:5e:6e:90:4d:e3:47:ce:02:7b:49:c7:0e:1c:fd:43:
a1:58:ab:19:4f:ea:ce:e9:e3:73:db:4a:88:da:4a:7c:ed:04:
2d:94:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:21 2026 by rpki-client