
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File: P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier: AbUKcGosmrLA/grUrJZbkecSR6VlmSw188+N/m7TjMc=
Subject key identifier: 3D:36:13:12:BE:14:99:E5:AA:02:82:8E:71:F3:8A:70:CA:E2:E9:C2
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer: /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number: 67
Signing time: Mon 05 Oct 2026 08:26:47 +0000
Manifest this update: Mon 05 Oct 2026 08:26:47 +0000
Manifest next update: Mon 12 Oct 2026 08:26:47 +0000
Files and hashes: 1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: JrnQu/lMZ6dIldnuxJolhVl6Ocdlhd4f5gm7afDZS6A=)
2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Validity
Not Before: Oct 5 08:26:47 2026 GMT
Not After : Oct 12 08:26:47 2026 GMT
Subject: CN=6ac35f47-0c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:2b:63:60:2f:37:32:65:38:9d:9c:fa:10:
38:cf:76:7c:ae:7a:4f:70:5e:2c:eb:86:ad:f3:d0:
0f:2c:e0:d5:08:dd:e0:cb:be:73:f0:48:70:38:fc:
57:d6:09:06:cf:24:f3:23:16:84:d9:99:62:08:80:
c9:cc:90:af:26:3b:ba:53:24:80:98:f9:28:6f:23:
4d:58:f0:92:d5:0f:51:23:5a:d3:60:6a:fd:fb:04:
77:bb:6c:c2:12:a8:58:75:ab:6e:4a:02:35:eb:37:
17:5f:a3:8e:36:80:4d:e5:10:31:6b:6c:7f:4f:e3:
0f:e6:25:fe:5f:d2:85:24:eb:ad:b0:a6:c6:a4:17:
e4:72:52:78:88:77:bf:78:cc:44:30:44:60:39:db:
72:59:59:22:e7:38:25:ae:af:e0:4a:dc:8c:8c:9d:
8a:47:0a:05:cf:7e:78:04:e7:3d:53:43:92:1d:46:
57:a2:58:66:65:fc:37:dd:4d:4b:f3:1a:ee:d3:bb:
bc:2e:d5:9c:4f:da:88:d4:97:1a:63:12:1f:ea:7f:
ba:4c:94:82:31:64:3d:9c:b0:d5:71:39:64:8b:60:
f7:43:9b:a9:fd:ec:4f:18:55:24:a3:7e:e1:be:34:
35:75:e5:77:a0:b5:73:d2:ba:e5:37:7c:a3:da:4b:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:13:12:BE:14:99:E5:AA:02:82:8E:71:F3:8A:70:CA:E2:E9:C2
X509v3 Authority Key Identifier:
keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:16:59:83:79:88:d8:af:24:dc:f2:04:31:c3:17:26:d9:29:
04:69:42:d8:19:de:39:05:95:82:63:a8:2b:1b:46:69:db:02:
3b:1a:4b:7a:10:bd:f9:46:d2:5e:30:76:b4:51:c4:c1:d7:96:
02:7c:0e:61:07:eb:a5:48:89:b6:8b:47:7a:96:b0:e7:56:76:
f0:05:be:3c:b8:1d:2d:c8:28:14:88:e0:19:26:7c:8f:47:ea:
89:44:4c:b7:9b:47:99:e9:db:f9:24:b5:5e:3e:39:75:be:42:
13:0c:e6:8e:ff:79:73:e0:94:3a:51:d5:4e:f8:00:85:41:e0:
d7:b2:4e:d8:7e:37:82:1d:6d:8a:bc:3c:b6:a8:b5:78:38:00:
3d:12:7c:a6:18:96:6c:1c:e9:d4:09:ae:cc:8a:ab:ae:f5:96:
e1:80:c5:db:04:1f:30:2a:ce:06:3c:30:69:27:ca:7f:0f:78:
5d:6e:69:2c:16:80:47:ad:64:e6:c8:6a:c7:5f:e9:c8:f2:11:
e9:58:77:45:44:64:c3:86:7d:50:c7:d6:b8:4b:51:69:e2:ae:
1a:1c:af:18:5c:64:e9:b5:74:49:8a:ca:73:11:1b:e7:74:cf:
35:33:8c:b4:7e:38:8b:17:d3:90:f7:6e:24:1b:d4:30:11:25:
bd:ab:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:41:18 2026 by rpki-client