
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: /gs8Hm9Bu3gzGUBnZRmSpnZVtBrIU/7wpHZka11/0Sk=
Subject key identifier: 8C:3B:CB:E9:A7:30:21:E8:B6:8C:5E:E6:9F:8D:FA:12:0F:2E:DC:7C
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: 01DE
Signing time: Thu 03 Sep 2026 03:45:04 +0000
Manifest this update: Thu 03 Sep 2026 03:45:04 +0000
Manifest next update: Thu 10 Sep 2026 03:45:04 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: tyQ7z2KuvD+xZM79PPvxrrMZG3oql/2rkfcTdTTIPiU=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: Hl7KpmuGRcPCF5t46SvY389AlxSI9ZtpOG8yltdH/G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Validity
Not Before: Sep 3 03:45:04 2026 GMT
Not After : Sep 10 03:45:04 2026 GMT
Subject: CN=6a98ed40-2b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:0d:42:58:a4:56:57:a4:ab:bc:b5:4c:16:
9b:7b:8a:2e:22:8b:2b:7a:1b:ab:4c:99:4f:1d:f8:
e3:b7:6a:63:be:2d:b6:90:45:e8:3e:2e:10:b7:d0:
63:52:09:97:d9:b1:34:db:dc:65:12:9b:9a:a4:8f:
f5:58:fc:4d:0c:66:41:6a:06:5b:65:ce:b3:c7:dc:
e3:05:45:34:d9:a8:76:00:70:b0:84:be:51:09:94:
e7:14:e0:63:da:ec:d7:bc:a2:27:65:b9:30:4c:73:
fb:e9:a4:82:84:d4:66:93:f4:55:46:b2:61:c2:de:
53:5a:75:ab:f9:49:67:1d:b5:17:2e:1b:09:b2:ed:
da:8e:de:82:bd:86:c2:dc:75:48:1f:ed:3c:d3:eb:
56:5b:6d:6f:10:ae:94:ca:dc:0c:8f:41:60:28:7f:
5e:de:08:50:96:ce:ff:8f:58:f2:07:04:65:21:bf:
96:b3:fe:8f:42:4a:b7:6e:a2:f0:24:42:ae:ea:1a:
66:fc:6b:d4:bc:56:b1:52:36:7d:f3:09:c5:61:84:
e6:f4:57:fb:65:92:b2:96:cb:3f:49:b0:bd:55:50:
10:88:31:09:cc:ec:5d:6e:d0:89:f7:ad:18:f1:61:
6c:bd:af:5a:35:d7:6e:d5:f5:be:c1:25:1a:f8:bd:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:CB:E9:A7:30:21:E8:B6:8C:5E:E6:9F:8D:FA:12:0F:2E:DC:7C
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:84:32:82:47:f0:76:cc:6e:d0:a1:fa:bc:0a:fc:04:67:8f:
e9:17:6f:1b:5c:08:d3:17:6e:d3:28:6e:16:2b:aa:79:cf:a5:
1c:ca:c8:4e:24:64:d6:12:6b:ba:55:7e:7a:35:14:3e:9c:dd:
96:fc:2b:f7:d2:ec:51:87:84:6c:04:b1:59:61:1e:c7:0b:03:
61:91:c0:db:0a:7a:32:b6:f8:02:ff:1f:03:73:ab:c9:ce:29:
4c:20:54:af:64:47:62:70:19:59:44:59:b0:36:62:11:29:dc:
a8:d5:3b:06:db:ca:77:27:01:0b:ac:19:ea:cc:b4:a9:70:4e:
35:0a:6a:d6:72:59:87:cd:96:00:c1:91:02:94:d4:c6:7b:ff:
d6:f5:87:e4:04:b2:5e:69:ba:3e:e2:21:c5:8c:fb:15:7e:fc:
47:d4:95:d5:76:2a:66:55:63:1f:be:a7:f5:48:82:7c:99:b0:
32:95:d4:99:31:18:c8:b6:93:7a:d5:3f:dd:82:43:66:8a:1e:
4e:12:cd:4e:86:52:90:dd:d0:a8:62:2f:f1:8f:62:3c:57:b1:
98:39:80:3f:c8:c7:a2:28:1f:68:b7:81:ed:26:b5:b2:c0:da:
0b:17:7e:d9:a8:bc:e2:df:f0:0c:cb:8f:57:19:60:d6:87:4e:
86:94:2b:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE
QUQ5MUI0MDYwHhcNMjYwOTAzMDM0NTA0WhcNMjYwOTEwMDM0NTA0WjAYMRYwFAYD
VQQDEw02YTk4ZWQ0MC0yYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAphcNQlikVlekq7y1TBabe4ouIosrehurTJlPHfjjt2pjvi22kEXoPi4Qt9Bj
UgmX2bE029xlEpuapI/1WPxNDGZBagZbZc6zx9zjBUU02ah2AHCwhL5RCZTnFOBj
2uzXvKInZbkwTHP76aSChNRmk/RVRrJhwt5TWnWr+UlnHbUXLhsJsu3ajt6CvYbC
3HVIH+080+tWW21vEK6UytwMj0FgKH9e3ghQls7/j1jyBwRlIb+Ws/6PQkq3bqLw
JEKu6hpm/GvUvFaxUjZ98wnFYYTm9Ff7ZZKylss/SbC9VVAQiDEJzOxdbtCJ960Y
8WFsva9aNddu1fW+wSUa+L1juwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIw7y+mn
MCHotoxe5p+N+hIPLtx8MB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0
ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow
NVk1ZFRCODduUkxhMlJ0QVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF4Qygkfwdsxu0KH6vAr8BGeP6RdvG1wI0xdu0yhuFiuqec+lHMrITiRk1hJr
ulV+ejUUPpzdlvwr99LsUYeEbASxWWEexwsDYZHA2wp6Mrb4Av8fA3Oryc4pTCBU
r2RHYnAZWURZsDZiESncqNU7BtvKdycBC6wZ6sy0qXBONQpq1nJZh82WAMGRApTU
xnv/1vWH5ASyXmm6PuIhxYz7FX78R9SV1XYqZlVjH76n9UiCfJmwMpXUmTEYyLaT
etU/3YJDZooeThLNToZSkN3QqGIv8Y9iPFexmDmAP8jHoigfaLeB7Sa1ssDaCxd+
2ai84t/wDMuPVxlg1odOhpQrfA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:02:52 2026 by rpki-client