
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier: NPcTDyDtrkdA1bW5UgqJqtU0nwc+YM0SI7er+xi1xw0=
Subject key identifier: 91:F1:A5:FD:87:D6:8E:BB:FE:80:62:27:91:D2:80:A6:AC:E2:C8:B3
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial: 13ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number: 13E1
Signing time: Sat 28 Mar 2026 16:52:53 +0000
Manifest this update: Sat 28 Mar 2026 16:52:53 +0000
Manifest next update: Sat 04 Apr 2026 16:52:53 +0000
Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: ru5ju5sKAj2KwXDyvFWfQHobN19hvrf6vKvHWy0UhiI=)
2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: e/sxyJRteUlZkrdIehzRHhMrqCqj1svkbZ25KtJI2TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 16:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5101 (0x13ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Validity
Not Before: Mar 28 16:52:53 2026 GMT
Not After : Apr 4 16:52:53 2026 GMT
Subject: CN=69c80765-0ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:4a:1c:87:73:8d:29:aa:e3:0f:86:22:31:
92:78:88:aa:da:94:f0:61:53:54:f4:dc:27:b5:58:
87:04:85:d5:00:7d:10:4b:9d:0a:21:d9:7f:73:57:
c4:fa:6a:a5:2b:83:87:1c:04:06:d8:54:7f:25:d7:
d8:74:f3:58:68:28:3b:27:42:ef:37:87:64:94:c5:
ca:bd:40:58:dd:da:60:d6:38:2b:b7:40:54:88:8e:
3c:da:77:57:a0:23:e2:72:dd:eb:e9:f2:ca:6a:42:
52:e7:20:45:62:d2:52:c5:23:b7:af:10:09:3d:44:
04:b3:a7:ed:38:c5:6c:d9:f0:1e:02:55:a7:d9:ec:
a9:88:5b:1b:dd:92:e8:88:a0:47:38:a6:72:2f:d2:
d4:c5:34:7d:9f:cb:b8:10:28:73:c8:0d:e2:9b:a9:
84:89:74:40:c9:44:68:8f:9d:d1:fd:38:a2:3e:91:
01:25:00:35:9b:c5:e4:62:c2:d1:3c:9a:ce:4e:ce:
46:96:ca:d6:86:a2:d9:db:dd:0d:14:2a:ee:51:04:
f6:36:f5:55:bf:69:2c:bb:89:e9:2d:8d:7a:c6:d3:
f6:94:1c:e3:2b:e8:42:38:13:12:5b:6e:3c:c5:73:
56:ee:78:e9:60:2e:d5:ec:98:13:14:20:f1:fc:70:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F1:A5:FD:87:D6:8E:BB:FE:80:62:27:91:D2:80:A6:AC:E2:C8:B3
X509v3 Authority Key Identifier:
keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:68:3d:28:2b:f8:7b:18:fe:e2:bf:95:8e:32:71:a5:2d:
ba:05:a4:06:0a:2b:8f:c6:87:5b:c5:dd:28:c2:23:01:7a:4e:
63:0d:29:21:9f:96:b0:cc:0d:8a:56:01:6d:5a:14:a1:ff:d1:
b2:ae:4c:f1:5e:73:09:c6:84:e4:cc:35:90:36:02:ad:8f:d0:
2c:88:21:00:08:11:7a:96:a9:19:bd:e5:71:af:58:ce:24:4b:
42:fa:d6:75:73:97:ea:c2:27:5b:8f:17:3a:20:9b:9c:7d:3c:
05:9f:49:76:9a:cc:58:73:f9:70:b4:05:17:22:f7:a7:aa:16:
94:78:97:2b:f0:39:26:3c:fd:63:9b:d6:14:a6:9a:8c:3c:2c:
4e:48:58:af:97:53:19:94:b0:88:ec:99:f2:99:5b:b0:83:c7:
1b:ed:32:f1:a1:75:8d:ea:c2:6c:8c:c6:4c:9e:1f:57:9b:49:
df:fb:a7:0f:b7:1c:de:f8:39:55:91:80:36:aa:fd:36:e9:aa:
d5:37:53:52:31:a6:83:09:3f:7e:ff:c7:f2:03:3b:2a:94:d2:
2a:e2:dc:6c:4e:29:03:19:15:96:94:69:a2:90:38:8b:24:da:
81:27:cc:48:9f:79:4b:54:d3:23:3d:3d:04:3d:ac:16:de:27:
c9:24:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:51:19 2026 by rpki-client