
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: FMLrzwavTmH4q8YT/3takG5z15tMn9axVjmqBryruJ4=
Subject key identifier: E2:4C:77:66:41:04:65:A6:E1:3C:0D:13:A9:62:F9:59:28:4A:C9:3D
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: 01C7
Signing time: Tue 21 Jul 2026 05:13:57 +0000
Manifest this update: Tue 21 Jul 2026 05:13:56 +0000
Manifest next update: Tue 28 Jul 2026 05:13:56 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: 2E4RSoj9kBZBkrujOMDDGvYdZg9Q0ytG6xTcWwAIFSA=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: Hl7KpmuGRcPCF5t46SvY389AlxSI9ZtpOG8yltdH/G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Validity
Not Before: Jul 21 05:13:56 2026 GMT
Not After : Jul 28 05:13:56 2026 GMT
Subject: CN=6a5f0015-dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:b9:44:d0:3d:61:5e:ec:bc:3d:21:be:dc:
0e:04:32:2b:36:1a:c5:86:1c:a3:33:69:86:80:76:
2f:51:bd:e3:06:9d:fb:f7:5a:2e:a6:42:7d:5b:52:
e1:60:d5:4f:17:b7:db:4a:c4:53:bc:03:40:a8:7c:
fd:1c:b8:34:ff:b6:97:b6:8d:57:a2:b7:f1:26:2f:
14:fa:be:ac:b1:01:4b:98:a0:d5:7f:6d:9b:00:14:
9c:c8:5b:5c:4c:61:52:a3:bc:31:40:af:13:26:17:
d1:39:c6:80:01:36:ba:69:57:f9:ec:ab:ac:57:7b:
a8:1b:cd:35:ea:a0:c8:8d:85:9b:96:86:ff:5c:b1:
cf:00:05:eb:a3:40:74:e5:47:1a:06:b9:65:11:35:
3e:ee:a9:1b:a0:b5:3d:53:27:71:90:8c:6b:7b:33:
51:2a:b6:46:4a:3b:ce:df:b3:0a:c9:c3:02:40:48:
9e:a3:df:68:9a:05:51:06:3a:6d:ad:94:d9:e9:87:
1d:c2:6f:45:62:eb:4d:2b:28:be:62:46:9f:bf:99:
5a:8d:59:8b:d7:50:28:71:ae:ec:8a:20:71:99:1c:
12:9d:41:c9:a5:bd:10:d4:92:78:de:f3:3d:ae:bf:
c8:d3:8d:4a:61:c8:8b:f7:a7:4d:16:9c:9d:58:e2:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:77:66:41:04:65:A6:E1:3C:0D:13:A9:62:F9:59:28:4A:C9:3D
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4d:c7:68:51:fa:e4:46:1f:6c:95:e1:59:03:f7:cc:46:83:
a6:7b:ea:67:21:5e:d1:48:0e:0c:82:ca:e2:7a:d1:ef:87:58:
83:93:33:82:8e:bf:c1:e9:7e:d2:46:b2:41:a3:49:0b:c6:a3:
20:f3:b1:65:38:86:8c:4f:d5:8e:cb:31:23:08:39:93:85:b0:
03:97:27:e2:86:b1:71:cb:6a:f3:dc:53:2a:e5:1f:a9:06:2f:
9c:1a:8f:55:00:6b:cb:2c:54:af:ed:92:9f:21:47:e5:cc:90:
c8:20:60:35:92:d9:2a:9f:72:56:75:39:a9:9f:6c:81:b6:54:
0b:d8:a4:d4:2e:66:bc:82:a2:e1:41:b7:81:f2:b8:bd:8b:a2:
23:bd:9a:5b:87:e3:9c:c7:53:f7:26:e2:31:03:2c:85:dd:b2:
c8:ca:38:f1:40:e7:d1:ae:b9:78:8a:39:fc:84:51:07:22:b7:
da:f5:41:e7:76:30:f4:6a:17:b4:56:3f:32:f9:eb:27:0b:f0:
be:91:83:50:3c:54:84:25:9f:a7:00:25:92:6d:81:d7:b1:5f:
12:09:83:c0:c4:47:89:1e:b7:2c:95:2f:64:56:f2:0b:8b:8d:
e0:52:5c:4a:ff:ac:f6:cf:4f:2d:80:68:ad:10:b8:8f:a0:59:
13:4b:98:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE
QUQ5MUI0MDYwHhcNMjYwNzIxMDUxMzU2WhcNMjYwNzI4MDUxMzU2WjAYMRYwFAYD
VQQDEw02YTVmMDAxNS1kZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV65RNA9YV7svD0hvtwOBDIrNhrFhhyjM2mGgHYvUb3jBp3791oupkJ9W1Lh
YNVPF7fbSsRTvANAqHz9HLg0/7aXto1XorfxJi8U+r6ssQFLmKDVf22bABScyFtc
TGFSo7wxQK8TJhfROcaAATa6aVf57KusV3uoG8016qDIjYWblob/XLHPAAXro0B0
5UcaBrllETU+7qkboLU9UydxkIxrezNRKrZGSjvO37MKycMCQEieo99omgVRBjpt
rZTZ6Ycdwm9FYutNKyi+Ykafv5lajVmL11Aoca7siiBxmRwSnUHJpb0Q1JJ43vM9
rr/I041KYciL96dNFpydWOLOHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJMd2ZB
BGWm4TwNE6li+VkoSsk9MB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0
ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow
NVk1ZFRCODduUkxhMlJ0QVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqE3HaFH65EYfbJXhWQP3zEaDpnvqZyFe0UgODILK4nrR74dYg5Mzgo6/wel+
0kayQaNJC8ajIPOxZTiGjE/VjssxIwg5k4WwA5cn4oaxcctq89xTKuUfqQYvnBqP
VQBryyxUr+2SnyFH5cyQyCBgNZLZKp9yVnU5qZ9sgbZUC9ik1C5mvIKi4UG3gfK4
vYuiI72aW4fjnMdT9ybiMQMshd2yyMo48UDn0a65eIo5/IRRByK32vVB53Yw9GoX
tFY/MvnrJwvwvpGDUDxUhCWfpwAlkm2B17FfEgmDwMRHiR63LJUvZFbyC4uN4FJc
Sv+s9s9PLYBorRC4j6BZE0uYZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:40 2026 by rpki-client