
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json)
Hash identifier: 3wv9foB+sbzmdtFbowH2QORzO3HueDFj0FSjufKBoVg=
Subject key identifier: 80:37:42:1A:EA:E1:D0:72:1D:BA:2A:41:79:FA:D7:F2:A0:AF:0F:45
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial: 0C43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
Manifest number: 0C3B
Signing time: Sat 04 Apr 2026 18:35:17 +0000
Manifest this update: Sat 04 Apr 2026 18:35:17 +0000
Manifest next update: Sat 11 Apr 2026 18:35:17 +0000
Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: 9YdXfyrt1xK5aOWbAlJ/pr+vH/P/6m1sMxSEuysvYqI=)
2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: lKs57ar3B+Bk7HcoSnOmAncGxHshQS9IzWUKxOnfU4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Validity
Not Before: Apr 4 18:35:17 2026 GMT
Not After : Apr 11 18:35:17 2026 GMT
Subject: CN=69d159e5-79da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:7a:e4:e0:c2:47:3a:ae:98:f5:16:35:15:
d2:a4:72:89:96:b3:b8:0e:e6:1a:64:11:5a:9c:18:
4a:d5:cb:c4:bb:fc:11:ee:45:84:d8:92:d8:8d:ec:
d6:e6:c3:20:67:4e:2a:90:79:62:79:c9:8c:60:f5:
58:5f:31:b2:21:b5:03:81:96:59:a6:20:15:2a:16:
f4:f3:80:45:18:1d:b2:f5:d2:64:a9:69:4f:ef:29:
9f:e8:ec:a6:bb:70:a8:cc:f6:50:46:ab:e0:05:52:
53:2a:9e:7f:5c:70:f8:c7:b6:2e:d8:a8:28:ac:ad:
30:10:d1:71:3e:25:bf:76:cf:0c:83:57:d0:30:8e:
c4:a7:c3:84:3e:f8:0a:ef:cb:a2:be:a3:c5:55:70:
c7:c8:b5:e0:31:41:d0:56:47:b3:f1:64:3e:bd:15:
04:21:4b:9d:b1:4e:8e:43:e1:ff:21:dc:7a:68:16:
ac:15:56:62:71:f7:23:ee:93:74:47:6f:8b:92:c5:
01:9d:c5:2a:b8:90:73:47:d7:4d:3e:ae:cd:d0:39:
6d:b9:c1:7c:95:f3:e5:e4:7b:b4:08:83:03:12:54:
dc:29:de:08:d9:13:9c:24:da:56:c5:07:2b:0c:64:
42:05:ab:68:05:3d:7a:c3:59:d3:99:cb:8c:2f:a1:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:42:1A:EA:E1:D0:72:1D:BA:2A:41:79:FA:D7:F2:A0:AF:0F:45
X509v3 Authority Key Identifier:
keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:a5:f7:dd:61:50:97:4d:47:95:e0:ca:84:c9:a8:8f:72:2a:
79:a7:de:79:72:de:5b:b5:63:06:c1:c4:4c:07:b2:d4:e0:a2:
86:aa:c8:03:03:b7:89:0f:a6:34:9d:55:db:83:b0:bc:b9:5f:
a1:55:5c:d6:85:75:46:c9:bd:e8:6c:02:50:fa:a6:30:9e:bd:
f2:36:ef:91:e1:18:07:f3:87:04:d1:d7:80:5b:07:1a:84:f9:
cd:6c:0d:44:75:ee:eb:f4:2d:7f:bb:7d:92:e0:13:f6:5a:eb:
b8:72:93:e3:44:e8:8e:7d:2c:6f:4d:69:b8:77:b0:45:a4:b8:
d4:95:26:cc:9b:d4:cc:26:3d:ae:95:b2:3f:4a:27:ed:d6:21:
79:bb:62:09:fb:a9:93:d2:81:05:12:ca:a3:67:4a:43:a3:9e:
27:bb:f7:35:e3:35:f3:a6:2c:ba:b5:fd:b4:5e:89:2b:d4:ff:
ae:5d:c9:b9:11:40:0f:21:19:75:65:0d:1f:59:3b:b1:f4:26:
80:e8:67:74:fb:e9:3d:39:fa:4b:32:d3:19:6b:64:4c:bf:80:
ee:ba:df:ab:d6:7b:f3:b7:54:f7:18:4d:b8:08:0b:3c:8f:32:
54:5a:7c:de:0b:cf:7c:4e:9d:2f:c9:d6:b5:3a:c4:4b:78:1f:
8e:52:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:18 2026 by rpki-client