
$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier: W5WHiqT6kMUr1o99M9SJ5Of1HiR2s6ungq1WLFK/kaI=
Subject key identifier: 28:D2:7D:DB:C4:4B:D0:13:AE:1A:38:C9:94:56:E3:E6:50:6E:46:2D
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial: 04B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number: 048D
Signing time: Tue 05 May 2026 00:06:12 +0000
Manifest this update: Tue 05 May 2026 00:06:12 +0000
Manifest next update: Tue 12 May 2026 00:06:12 +0000
Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: oTBaDTOUr3IVJjtAGMOnKmUAqJubWfunMAoVMbxHJ9A=)
2: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=)
3: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=)
4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201 (0x4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Validity
Not Before: May 5 00:06:12 2026 GMT
Not After : May 12 00:06:12 2026 GMT
Subject: CN=69f93474-4040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:b1:db:76:e9:7b:3c:17:cc:a4:f7:d9:70:
e3:33:52:7f:b1:97:8e:d4:41:f8:cb:b2:43:6f:de:
24:55:64:9c:63:2e:ee:8e:8c:2c:32:cb:05:42:82:
56:78:6c:5d:7e:0c:2c:3e:dc:66:46:de:80:5b:7c:
b1:37:55:38:5f:6a:3c:72:9b:71:26:ae:26:47:a4:
41:29:c1:de:10:93:09:93:a8:53:94:1a:35:32:f7:
3a:55:e6:bd:65:45:b8:ec:41:81:6c:4f:8c:c1:e3:
7b:a8:e5:c6:0c:0b:df:8e:42:61:d2:61:54:35:70:
14:17:2b:49:a5:12:48:e2:b1:2c:c8:90:20:8a:82:
96:61:aa:ab:9d:83:5e:58:83:7d:cf:10:62:29:1c:
aa:d2:e6:c5:95:24:dc:8e:3d:ae:b8:95:43:ff:9d:
f5:59:ba:4d:7e:29:e6:77:3c:d9:b3:18:77:9d:f8:
ba:cf:6c:1e:78:5a:f9:44:8d:3b:b0:ac:50:f2:cd:
8f:df:a3:2e:c9:f2:a5:84:e3:af:ee:16:61:36:24:
5d:eb:2a:a7:89:1e:69:71:e2:80:51:94:ac:ba:34:
8d:7c:90:b4:1a:8a:6a:86:db:90:17:2f:38:c1:eb:
36:c6:72:b1:93:74:dd:74:20:c1:59:25:33:3a:d5:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:7D:DB:C4:4B:D0:13:AE:1A:38:C9:94:56:E3:E6:50:6E:46:2D
X509v3 Authority Key Identifier:
keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:58:65:75:3f:e4:7a:6c:36:72:e4:7d:69:ad:01:b2:df:
e1:fd:85:b2:bf:23:64:a1:21:4a:42:c8:39:cc:da:9f:74:31:
6f:fe:5f:c5:28:1f:ed:7e:3c:6b:ae:1b:1b:2d:d4:d7:0a:e8:
47:8e:2f:dc:e4:94:d0:fa:fb:03:ef:94:b3:bd:66:6f:7c:34:
dd:f6:c7:38:32:2a:d8:ab:d8:a2:77:76:b9:16:d1:03:37:c9:
3f:15:a1:ed:89:bf:f2:3c:29:f8:d7:9b:9c:bd:0d:69:04:b0:
6b:f4:13:9f:80:11:17:35:38:48:a2:8c:33:f1:ef:9e:6f:0e:
4e:27:c5:dc:f9:46:bc:0d:a6:50:10:d0:49:91:6d:77:f3:d0:
f8:8b:79:1e:2b:0f:ee:5d:d9:f5:4c:ea:59:70:ce:d9:ca:87:
2d:87:df:f7:83:de:08:d7:5b:9a:7a:35:97:fd:64:a4:a1:5c:
53:e8:cc:63:e6:c5:96:25:7e:b4:47:b4:0e:68:ed:ea:fa:16:
22:41:e4:2e:1a:07:ef:8f:f0:79:71:3f:a7:1a:3e:cb:f1:dd:
69:ce:cf:6d:36:6f:01:0b:2d:3f:17:8f:d0:a2:56:49:44:49:
10:09:16:06:fe:b6:fc:8a:94:db:2c:63:bc:89:b0:2c:e7:41:
4a:43:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 06:05:04 2026 by rpki-client