
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier: IddGMETvmV+0RTEpIxKmNxp1Sh7uy5MkDPUWw8zDO0A=
Subject key identifier: 1E:C2:24:A0:C0:E6:AC:C5:87:1E:0E:E4:C3:3C:AE:C3:59:96:8D:16
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number: 014F
Signing time: Mon 01 Jun 2026 05:55:55 +0000
Manifest this update: Mon 01 Jun 2026 05:55:54 +0000
Manifest next update: Mon 08 Jun 2026 05:55:54 +0000
Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: Fq5UzRERmGaX1+TOM/9s8LBoNoRkqURhqtXdtRBmQso=)
2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: 8DprNqSctLRq9Um1DBwsXYIm/hC+xtUbZc0GLoio6ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Validity
Not Before: Jun 1 05:55:54 2026 GMT
Not After : Jun 8 05:55:54 2026 GMT
Subject: CN=6a1d1eeb-429e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:36:9f:17:2d:c7:f4:0c:30:47:ea:ec:f6:
0f:3a:b3:19:5a:ad:ce:58:04:cf:db:f6:45:16:c1:
1b:a9:33:f8:bd:51:ee:10:44:1c:3d:30:b4:f5:5d:
4a:82:91:99:8f:36:1e:2e:95:9b:f3:0e:ea:a5:97:
02:0b:19:4c:a0:c5:3d:44:0e:03:e6:49:7f:b3:45:
8a:da:80:85:89:e7:a6:c3:d2:04:dd:15:aa:c5:6d:
66:72:07:0e:ee:06:3b:ec:95:63:c3:a6:6f:7f:93:
64:cb:a9:e7:48:9f:22:76:e9:bb:32:17:d0:b9:c6:
48:ed:f2:dc:98:d3:76:52:cc:f7:17:46:33:23:f2:
04:bb:a5:4f:9b:a5:c2:6c:84:f0:51:ae:1b:26:c9:
28:c2:c3:2b:b8:d7:c0:60:a8:78:cc:1a:54:24:dc:
28:eb:7f:3a:bd:c9:aa:f0:83:fc:e0:4b:0f:82:a5:
58:96:3c:e1:31:58:a5:19:9d:47:8c:ca:56:74:4b:
88:1b:11:f1:65:b9:c9:53:32:5c:7b:b4:ac:8b:6b:
47:3f:c9:a6:cc:bd:7b:87:5e:dd:50:d9:2c:42:2e:
c8:bb:ec:45:b7:9e:a4:64:7b:48:6a:3c:18:9b:20:
ff:c9:6a:36:d3:6d:de:7a:e6:98:85:ea:46:f5:fe:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:24:A0:C0:E6:AC:C5:87:1E:0E:E4:C3:3C:AE:C3:59:96:8D:16
X509v3 Authority Key Identifier:
keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:0c:eb:c0:fb:a5:5e:e1:60:f8:6f:82:bb:69:bb:8f:b9:
5d:7b:c7:87:81:0c:77:7b:7b:6b:e0:95:11:0d:49:66:a4:82:
1d:af:7d:53:84:4d:3d:08:77:84:b5:66:ed:77:cc:ee:68:a2:
85:52:27:87:fe:f0:02:53:31:6f:9b:40:0a:15:c9:85:69:7b:
f6:eb:75:f9:cf:bc:c6:4e:60:3c:39:28:ab:19:a1:45:6a:2d:
47:22:dd:77:60:ca:13:64:32:c0:cb:6a:0c:49:7a:e6:56:34:
0a:5c:68:b1:13:c1:f0:2c:31:05:1f:7c:de:bb:73:e2:c5:2d:
5a:70:34:c9:3a:16:91:91:68:3d:51:0f:4c:46:98:57:eb:d4:
a1:29:db:e9:8c:7f:5c:11:04:41:68:b4:10:34:60:4c:73:01:
f9:da:02:de:62:67:ca:8b:be:4f:68:7a:e9:4c:05:6c:f1:99:
f2:d0:ed:60:93:c4:0e:1a:be:9b:a5:e0:cd:05:6e:3d:89:95:
af:51:ba:89:81:22:18:e0:0c:e8:1e:ac:f1:c5:2f:a3:48:c9:
fd:df:f8:aa:5f:55:f4:8b:fa:c0:48:60:60:29:3e:53:89:dd:
db:10:5a:05:15:23:a6:ca:02:29:72:da:0b:cd:6a:fb:48:ed:
84:b9:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:02 2026 by rpki-client