
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File: P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier: cLoXOEjnM9ZvpZG8EuSvhW37C4jEaremsJW/wwkTKss=
Subject key identifier: 55:71:66:26:85:6F:6D:21:E8:6F:45:C5:49:E7:E6:F8:09:6D:E4:13
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer: /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number: 32
Signing time: Tue 23 Jun 2026 08:54:38 +0000
Manifest this update: Tue 23 Jun 2026 08:54:38 +0000
Manifest next update: Tue 30 Jun 2026 08:54:38 +0000
Files and hashes: 1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: 1+g2j3FhCbYxpJD/Smpy7oXS8UkQ/Mwloy6+Af8DBrc=)
2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Validity
Not Before: Jun 23 08:54:38 2026 GMT
Not After : Jun 30 08:54:38 2026 GMT
Subject: CN=6a3a49ce-0129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:b0:79:56:6a:d6:2c:49:99:0a:e9:49:a4:
b0:8c:97:77:92:76:c2:63:53:cc:df:46:50:03:d2:
4e:58:e2:2e:51:5d:ad:a6:66:7d:6f:5a:ee:b8:de:
25:0a:c8:ae:d1:69:97:4e:3a:e6:f1:5d:6b:34:e7:
db:dd:f6:2a:fc:0a:77:fc:43:37:88:f7:41:e4:28:
af:9b:1e:e0:b6:c9:12:47:6f:50:21:73:e8:5d:69:
f9:32:8b:fc:11:25:77:11:5c:e4:9f:52:d7:dc:97:
d2:29:ab:14:3d:41:68:dc:62:16:a1:df:a0:a5:84:
35:d7:f1:34:1c:cc:9e:6d:93:d7:59:b1:62:a0:1e:
2e:90:86:c8:cf:95:12:38:c5:83:76:95:d1:e0:f7:
bf:ef:a1:3e:a3:80:d2:3b:e5:a6:1e:a7:1f:06:83:
c8:cc:b8:05:00:16:33:4c:fc:74:70:2c:1e:7e:4e:
c9:f0:7c:14:8b:13:e2:6f:b0:9c:db:95:e9:04:90:
7e:47:d4:43:c2:a8:5c:ef:80:9c:1a:99:17:23:df:
6a:a1:34:ca:01:55:e5:18:83:f0:71:cf:65:55:8b:
b6:b7:3e:f2:08:2f:6d:8f:97:ad:1a:e8:4d:af:db:
d2:69:d9:aa:0e:00:1c:f3:35:e8:49:6e:eb:42:c5:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:71:66:26:85:6F:6D:21:E8:6F:45:C5:49:E7:E6:F8:09:6D:E4:13
X509v3 Authority Key Identifier:
keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:29:be:c0:b8:87:34:18:e7:c1:fc:ad:52:17:af:fa:b8:
f9:79:12:d7:c2:20:b0:8e:84:78:15:2f:10:e3:9d:19:41:73:
c1:bd:48:9c:99:3d:e8:a0:5c:58:b9:52:e2:be:a0:2b:ba:ed:
c6:14:4b:84:07:eb:54:5f:39:f3:6b:91:1e:05:53:46:ca:48:
12:ed:a4:77:3f:a7:a3:cb:d8:37:1f:6e:89:9b:f9:f6:8a:a6:
d5:f8:7c:a7:16:b5:35:7b:cc:ac:0e:0f:33:0c:56:63:1f:b4:
5c:1f:b1:0e:86:61:7c:e9:f1:cd:e3:fd:b2:b5:f3:ab:62:05:
49:1d:d4:43:63:cf:f9:d7:9e:67:7b:1c:e5:1b:14:c5:c9:b7:
43:74:9e:3e:eb:01:8b:02:f8:22:71:93:81:45:70:e2:17:09:
2e:65:c5:50:2f:dc:71:e8:b4:68:9e:e8:8f:07:58:f0:76:4a:
af:ca:a8:01:a4:2d:4d:3c:74:24:4a:f0:e0:37:1d:0c:39:01:
36:e8:6d:f6:01:24:88:a5:29:34:14:dc:02:b5:b1:79:19:44:
62:9f:27:0d:f8:e3:27:25:e9:72:2e:29:74:dd:49:1b:b3:7f:
4d:1c:3b:5e:80:c7:bc:ba:b0:ee:a6:d9:6f:4a:b6:af:55:a0:
06:11:98:fc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjQyODExMC8GA1UEBRMoM0Y2RDI5QkIxRjc0NzkzQ0Y4OEM3ODM3Mjg1NjNCQkQ0
M0U4MEEzRTAeFw0yNjA2MjMwODU0MzhaFw0yNjA2MzAwODU0MzhaMBgxFjAUBgNV
BAMTDTZhM2E0OWNlLTAxMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9WLB5VmrWLEmZCulJpLCMl3eSdsJjU8zfRlAD0k5Y4i5RXa2mZn1vWu643iUK
yK7RaZdOOubxXWs059vd9ir8Cnf8QzeI90HkKK+bHuC2yRJHb1Ahc+hdafkyi/wR
JXcRXOSfUtfcl9IpqxQ9QWjcYhah36ClhDXX8TQczJ5tk9dZsWKgHi6QhsjPlRI4
xYN2ldHg97/voT6jgNI75aYepx8Gg8jMuAUAFjNM/HRwLB5+TsnwfBSLE+JvsJzb
lekEkH5H1EPCqFzvgJwamRcj32qhNMoBVeUYg/Bxz2VVi7a3PvIIL22Pl60a6E2v
29Jp2aoOABzzNehJbutCxV+vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVXFmJoVv
bSHob0XFSefm+Alt5BMwHwYDVR0jBBgwFoAUP20pux90eTz4jHg3KFY7vUPoCj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NDI4L0VGNUMyN0I0MjQ2
MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6NGpIZzNLRlk3dlVQb0Nq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDIwcHV4OTBlVHo0akhnM0tGWTd2VVBvQ2o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
NDI4L0VGNUMyN0I0MjQ2MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6
NGpIZzNLRlk3dlVQb0NqNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB4qym+wLiHNBjnwfytUhev+rj5eRLXwiCwjoR4FS8Q450ZQXPBvUicmT3ooFxY
uVLivqAruu3GFEuEB+tUXznza5EeBVNGykgS7aR3P6ejy9g3H26Jm/n2iqbV+Hyn
FrU1e8ysDg8zDFZjH7RcH7EOhmF86fHN4/2ytfOrYgVJHdRDY8/5155nexzlGxTF
ybdDdJ4+6wGLAvgicZOBRXDiFwkuZcVQL9xx6LRonuiPB1jwdkqvyqgBpC1NPHQk
SvDgNx0MOQE26G32ASSIpSk0FNwCtbF5GURinycN+OMnJelyLil03Ukbs39NHDte
gMe8urDuptlvSravVaAGEZj8
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:49 2026 by rpki-client