
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: EeCd7YWSa92Me+Of2kf4r4eWhmPyTxAllZ+oe941O08=
Subject key identifier: CD:36:BC:9C:6F:A6:D5:C0:5D:B1:C9:98:DC:ED:B0:DF:25:0A:94:26
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: 0181
Signing time: Sat 07 Mar 2026 03:53:56 +0000
Manifest this update: Sat 07 Mar 2026 03:53:56 +0000
Manifest next update: Sat 14 Mar 2026 03:53:56 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: GenIddiPbFt3WwT66zt5Q7MVn5Sih3jLPQ9/zUatv+E=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: PDwtIQMH7CUi+ETshPcgYy3XMt2b+vkH5kQDyN2jN0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 03:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Validity
Not Before: Mar 7 03:53:56 2026 GMT
Not After : Mar 14 03:53:56 2026 GMT
Subject: CN=69aba154-46ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:0f:f6:3f:d1:08:eb:6b:e9:8b:c0:07:1f:
ce:9c:68:ca:8f:65:d4:28:57:d2:58:90:b9:7b:85:
17:fc:33:22:22:66:3b:e8:30:63:12:8e:6d:b4:38:
e8:1b:9b:1e:2d:1f:ac:12:71:1c:c1:55:91:55:71:
a3:2d:8c:d8:b9:0a:55:c1:27:7d:b2:fc:fa:e0:8f:
f9:ec:ff:81:eb:f7:21:e9:56:22:2e:d4:20:a0:0a:
19:ca:de:7a:8b:68:cf:aa:44:da:1d:15:79:f1:5c:
49:0b:84:11:84:b9:ef:0d:fc:be:1b:ae:7c:59:9e:
90:6f:be:e9:8b:c3:19:23:ae:42:fe:ad:a8:86:8b:
d0:c4:1c:43:f7:63:0a:ab:60:d6:06:18:37:92:57:
f5:81:f6:24:39:14:df:94:b2:63:8f:9a:56:67:5b:
ac:5a:3c:e9:d0:e5:97:ec:0e:1e:99:eb:04:39:2b:
e4:b9:b2:e3:70:fc:e7:10:ac:a3:f0:80:cf:84:5d:
ad:42:ef:6f:b3:1d:ce:82:16:be:7f:36:d6:69:96:
2b:1c:ee:df:7b:56:5f:43:6d:13:bc:bb:e6:d6:f9:
8b:ce:e5:f7:e7:4d:6b:84:53:05:fc:e2:9e:8d:65:
3c:6d:82:2c:cf:ce:e6:4f:df:66:65:99:ab:45:4c:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:BC:9C:6F:A6:D5:C0:5D:B1:C9:98:DC:ED:B0:DF:25:0A:94:26
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:49:01:de:7f:b6:80:e7:0f:59:25:21:40:61:c4:8e:34:d2:
e4:b0:be:23:c2:ad:3d:74:31:39:57:97:d8:2b:01:cc:e1:97:
13:11:3a:27:be:12:dc:9e:20:a8:0f:d1:b6:e5:07:3d:00:ef:
f2:c6:1d:fe:5f:ac:b3:af:a8:06:6e:d9:23:fd:86:84:6f:fa:
0d:6e:71:a6:8e:dd:3b:ca:6f:c2:57:07:51:80:17:f5:fa:38:
f3:36:73:26:8a:3e:23:a5:b2:f8:39:08:20:75:d8:93:41:e6:
5a:ad:fa:92:25:86:05:50:d0:f1:88:a7:b6:c9:73:3b:5a:84:
8e:f1:b4:98:40:27:ac:b0:47:ab:67:4e:e9:0a:d5:33:9c:a6:
5d:07:1c:73:91:96:8f:0c:74:cf:c1:7d:18:41:ae:2b:a6:b0:
0b:e5:00:a7:f3:0b:18:5f:90:56:15:bb:5b:ec:ab:f4:9f:38:
c6:ea:bd:ba:71:d7:13:c5:21:4f:78:df:70:6c:01:bc:33:ff:
cc:1c:f3:d9:8b:73:06:dd:de:24:d5:01:e2:c9:fa:ff:6b:d7:
71:7e:4b:bb:a1:15:31:67:6c:18:e6:5c:bc:a1:55:69:d3:5a:
08:64:a9:af:e8:e3:cb:a1:3e:48:cc:71:fb:ec:de:fe:7e:31:
47:42:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:06:03 2026 by rpki-client