
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier: /OojFQAH45CrdMz2/cPECTBJRf5BhaMDNXY5jiqU5VI=
Subject key identifier: CB:D1:84:9D:49:D9:4F:2C:A6:D9:89:C8:05:83:08:FD:78:3F:57:97
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial: 0739
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number: 0732
Signing time: Wed 18 Feb 2026 21:13:01 +0000
Manifest this update: Wed 18 Feb 2026 21:13:01 +0000
Manifest next update: Wed 25 Feb 2026 21:13:01 +0000
Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: +RdoReCEquYtiy8FFgALIXRiy8RJ4DQX4d+RWuqNoxw=)
2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: PSEZLzwnpVP0bMdPm9ss1klBUjjhwDdtS6Etm70E9UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Validity
Not Before: Feb 18 21:13:01 2026 GMT
Not After : Feb 25 21:13:01 2026 GMT
Subject: CN=69962b5d-c267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:04:25:83:e2:ab:bc:d2:34:a8:4d:67:ef:
e0:93:0e:01:6d:6f:d6:e6:32:63:78:a4:8c:20:84:
0f:06:c9:03:60:33:25:0a:f0:4c:9c:54:90:09:b1:
59:07:89:fd:26:e5:fc:b7:23:9b:f6:8d:53:5c:6b:
c8:3a:c4:cb:11:90:6c:99:3f:2d:3a:e7:9e:43:83:
54:a7:54:ab:f2:6c:e5:35:71:44:d6:a5:93:fb:66:
91:8d:2f:d9:36:4b:26:4c:71:b8:cd:2d:08:28:e2:
cd:c0:2c:fd:14:77:ab:a3:54:56:b2:e4:85:c1:4b:
4a:94:5b:0c:b7:78:a0:4d:32:0e:f0:07:2e:ef:7d:
af:93:01:2f:dc:c1:90:8b:3d:46:0f:ae:f1:f1:5a:
2a:fc:ec:36:31:66:a5:5f:e9:43:60:8a:ef:9e:9f:
45:24:24:14:3e:95:28:17:dd:62:33:a5:90:66:bf:
b2:11:20:89:18:d7:c7:9d:bd:a5:af:56:fd:86:f9:
97:bf:72:29:05:c7:e1:ab:dd:b1:f9:1a:83:ad:a7:
80:4e:bf:8e:5b:3d:73:e4:44:e8:f7:54:7b:60:1f:
5b:de:d8:6b:70:86:6c:42:b1:d4:81:a6:e4:ff:24:
1a:b1:02:34:a5:09:6c:cc:c0:57:38:4b:2a:47:97:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:84:9D:49:D9:4F:2C:A6:D9:89:C8:05:83:08:FD:78:3F:57:97
X509v3 Authority Key Identifier:
keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:40:1e:c0:b3:fe:7b:6b:56:3d:f7:86:64:7c:8f:7e:4b:bb:
48:f8:63:ec:7e:25:5f:0e:e6:ea:a6:d4:88:6c:bb:b3:09:dc:
43:c5:32:ed:5e:1d:82:01:bd:b8:9e:d8:ac:db:7a:25:5d:70:
b1:e6:ce:63:21:15:aa:a2:92:22:71:b3:36:7d:e0:75:23:51:
f0:29:8d:a7:06:10:c9:b7:a6:65:ed:f1:d7:40:de:9e:dc:0c:
db:0a:b4:09:e5:e4:cc:50:93:48:5b:96:ed:ae:f7:dd:97:29:
ef:52:07:06:f1:d2:36:59:52:bd:3f:38:a4:ef:8f:7f:d4:fc:
cc:33:67:9b:0a:56:db:ca:df:54:dc:2c:13:cc:dd:7c:5b:7d:
c0:07:1f:d3:03:16:82:17:8f:fc:6a:22:9d:ca:fb:3b:15:30:
b1:0f:56:da:eb:55:71:25:5c:96:3c:26:aa:7a:22:c3:fb:d6:
db:10:2d:4b:77:aa:61:f3:09:52:7a:24:eb:d7:a5:6e:ee:00:
ec:ce:6f:86:22:a7:49:84:c4:fa:38:64:33:3d:f1:c5:03:65:
6a:a6:88:e7:dc:42:b8:40:d3:1b:30:c9:e9:13:35:fd:55:5b:
2b:96:d9:87:48:84:1d:b9:22:0d:f3:5a:b5:1c:af:97:e8:da:
41:bc:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:56 2026 by rpki-client