
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json)
Hash identifier: JYdbEp/TZFHka6Q4+PCG1wqzj0B5TMNqWkmeR8Is7So=
Subject key identifier: DD:31:90:3A:DD:7F:50:41:7B:3D:5E:83:10:75:06:7A:7A:00:87:A9
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial: 0C8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
Manifest number: 0C82
Signing time: Tue 18 Aug 2026 18:55:07 +0000
Manifest this update: Tue 18 Aug 2026 18:55:07 +0000
Manifest next update: Tue 25 Aug 2026 18:55:07 +0000
Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: oFAWztcCx3+5vnlC+a6m8XiL0hrHCHzrd8YjB8EjJro=)
2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: CeFP4sSrL7pQBbEDj/02tRNGfcmmqQfD2Lb6qkPSS2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Validity
Not Before: Aug 18 18:55:07 2026 GMT
Not After : Aug 25 18:55:07 2026 GMT
Subject: CN=6a84aa8b-d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:9c:d5:12:e5:0a:83:f5:9c:15:ea:e6:1b:
7b:4f:ec:79:d7:98:7c:41:b5:0e:15:72:c3:4a:1b:
de:09:c6:f7:9c:a3:4c:5f:95:7b:60:e8:1e:12:91:
4e:9c:ca:eb:f3:25:21:b5:55:1e:c2:11:c0:0c:b3:
26:36:5f:97:09:2f:38:13:89:65:64:ca:57:12:0c:
2d:a5:b4:76:d7:78:a0:a9:f6:9f:b8:8a:37:36:86:
3b:d7:1c:4e:5b:69:62:a7:a4:1e:c7:1c:89:0f:b7:
18:05:04:34:35:4d:36:4b:37:93:e3:7b:b2:a7:cb:
01:d4:ff:4a:32:c8:dc:3f:2e:d0:55:c3:02:12:6b:
2b:f7:7d:34:68:c6:1c:da:bd:34:4a:49:8b:2c:b7:
f1:50:62:9e:cf:c5:34:e2:3a:14:ff:08:20:c2:83:
f7:28:59:2e:f7:23:a4:bd:17:c1:01:9a:0b:07:96:
00:cc:99:ce:18:0f:3c:59:a7:f7:9b:da:15:b4:a3:
3a:49:77:9f:66:d8:fc:20:b2:1c:64:e3:24:84:3c:
cb:a5:60:cf:ab:f9:5e:bf:26:be:99:0e:c6:d3:90:
68:8d:f1:fd:6c:3f:51:a1:d1:7d:89:44:56:d7:90:
b0:d3:32:13:db:a8:f5:89:78:6f:30:11:e0:71:38:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:90:3A:DD:7F:50:41:7B:3D:5E:83:10:75:06:7A:7A:00:87:A9
X509v3 Authority Key Identifier:
keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:f0:2d:6c:b0:40:58:65:62:99:30:ba:b2:f5:7a:c9:3c:
a3:b5:3c:12:42:67:cb:15:c3:f7:c6:2f:14:fb:a0:9d:13:ae:
be:a4:c9:59:37:ab:33:be:5b:7c:4f:79:2a:b6:7b:6f:eb:73:
7a:07:6a:50:ca:e4:8d:80:c0:2e:64:01:62:f8:eb:93:39:f7:
6d:a1:4c:9c:47:c8:52:35:9f:84:51:e4:02:47:ac:a3:41:c7:
1b:fc:f4:8c:85:2e:d7:18:35:8b:cf:cc:d9:5a:b4:7e:19:0e:
0d:6f:56:ec:58:98:fa:97:08:e9:f1:e6:6e:bf:46:38:52:30:
d2:dd:4e:8f:95:af:e1:ac:eb:4b:15:a1:6b:31:ce:cc:e2:9e:
f7:a5:58:15:14:d3:61:f6:02:76:59:c7:a8:aa:84:8e:a7:5d:
53:a7:7e:83:9c:b8:ad:11:33:9a:02:7c:22:93:17:c2:c8:6f:
6d:5c:3a:42:93:0b:72:28:4e:51:dd:ab:a0:49:21:11:21:cd:
8b:c6:a6:7d:df:cd:e9:59:0c:dd:ab:ac:b1:13:4f:fb:bf:ff:
c0:a7:42:e2:87:c6:2b:64:72:20:0d:18:db:27:39:ac:ac:3d:
6b:e9:e1:4a:a4:0e:5f:e6:cf:03:c2:0c:4f:28:5c:95:b5:07:
95:d8:f4:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4
RTFGODMxRkYwHhcNMjYwODE4MTg1NTA3WhcNMjYwODI1MTg1NTA3WjAYMRYwFAYD
VQQDEw02YTg0YWE4Yi1kODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAps+c1RLlCoP1nBXq5ht7T+x515h8QbUOFXLDShveCcb3nKNMX5V7YOgeEpFO
nMrr8yUhtVUewhHADLMmNl+XCS84E4llZMpXEgwtpbR213igqfafuIo3NoY71xxO
W2lip6QexxyJD7cYBQQ0NU02SzeT43uyp8sB1P9KMsjcPy7QVcMCEmsr9300aMYc
2r00SkmLLLfxUGKez8U04joU/wggwoP3KFku9yOkvRfBAZoLB5YAzJnOGA88Waf3
m9oVtKM6SXefZtj8ILIcZOMkhDzLpWDPq/levya+mQ7G05BojfH9bD9RodF9iURW
15Cw0zIT26j1iXhvMBHgcTgrMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0xkDrd
f1BBez1egxB1Bnp6AIepMB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2
MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV
MDZIdHAtMG1RR1dPSDRNZjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADyjwLWywQFhlYpkwurL1esk8o7U8EkJnyxXD98YvFPugnROuvqTJWTerM75b
fE95KrZ7b+tzegdqUMrkjYDALmQBYvjrkzn3baFMnEfIUjWfhFHkAkeso0HHG/z0
jIUu1xg1i8/M2Vq0fhkODW9W7FiY+pcI6fHmbr9GOFIw0t1Oj5Wv4azrSxWhazHO
zOKe96VYFRTTYfYCdlnHqKqEjqddU6d+g5y4rREzmgJ8IpMXwshvbVw6QpMLcihO
Ud2roEkhESHNi8amfd/N6VkM3aussRNP+7//wKdC4ofGK2RyIA0Y2yc5rKw9a+nh
SqQOX+bPA8IMTyhclbUHldj0Mw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:43 2026 by rpki-client