
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier: h5qFXtCsCnsnhrUpJshBcgX+B+0LT3/YExBPqOmncG0=
Subject key identifier: F4:E6:55:81:83:0A:1E:BB:E8:A2:EB:86:29:91:C1:E0:A5:D7:13:B0
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number: 074B
Signing time: Sat 04 Apr 2026 21:31:57 +0000
Manifest this update: Sat 04 Apr 2026 21:31:57 +0000
Manifest next update: Sat 11 Apr 2026 21:31:57 +0000
Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: 5cNHpBs7d8TvGp1jiM1ROfGfOnvLuYNMvhBCki9TLY8=)
2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: jmaFcpaDeiXM/6W+3Dvlo06UYUE1H6LTzGNr5Pw/4po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Validity
Not Before: Apr 4 21:31:57 2026 GMT
Not After : Apr 11 21:31:57 2026 GMT
Subject: CN=69d1834d-4b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:73:98:6a:db:11:4c:37:e2:a9:d3:e4:55:
d1:5b:7b:ea:bc:89:06:e0:ff:fe:c7:75:a4:5d:b3:
27:64:f3:0f:80:35:ab:56:d4:68:93:05:86:f0:7f:
27:19:15:c6:f1:71:28:c1:07:ad:7a:a1:95:3f:6e:
93:75:8c:62:d8:8c:b0:87:f2:c8:d7:19:64:b5:12:
34:0c:4c:e6:97:e6:54:98:de:01:dc:95:a9:6e:12:
70:ff:d8:90:0c:56:3a:ac:00:4a:2b:47:15:43:22:
37:4d:a2:e5:42:5b:ba:21:5e:9b:ab:7f:dd:42:c3:
56:45:78:27:46:d8:47:5b:90:50:c1:61:b3:85:a5:
3c:35:8b:04:f2:af:6f:bb:97:66:41:cd:71:23:c1:
d3:99:45:ab:04:b7:4a:c4:1a:04:7c:b1:01:50:e8:
d2:0b:1c:ea:be:b7:80:4e:d7:86:f5:4a:0e:20:03:
3f:2c:6a:a5:20:b5:ab:f9:87:3e:86:2f:38:63:06:
a8:5e:e8:22:19:cb:fe:9e:74:50:bc:fe:c0:c5:1a:
c5:eb:cb:52:45:6c:4f:32:8e:a9:05:05:cd:cc:b4:
1b:82:ba:f3:f0:26:2a:2b:52:02:3f:34:28:11:27:
dd:e5:d6:eb:6f:25:d0:de:be:42:01:5a:46:f3:db:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E6:55:81:83:0A:1E:BB:E8:A2:EB:86:29:91:C1:E0:A5:D7:13:B0
X509v3 Authority Key Identifier:
keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:1e:88:5d:f9:ec:73:c2:19:9d:97:19:0e:bd:cd:91:33:
7d:d0:c8:1c:dc:48:e0:20:96:f7:68:22:ad:a9:22:d1:0d:3b:
22:ba:68:cf:33:31:41:dd:ce:4b:53:3e:4b:34:2f:29:89:f0:
c2:bc:b9:ef:be:62:2d:67:f1:fb:af:c4:79:f1:e1:9f:99:46:
23:2e:ea:5e:3b:fc:82:58:c3:a4:ac:80:61:22:ad:05:e3:96:
44:0e:1b:53:80:b0:5a:b9:6c:49:1c:ad:a2:cf:68:b7:b0:fe:
40:3b:2b:2f:94:b1:0a:81:41:7b:8f:59:e4:0a:83:3d:b8:83:
9e:49:91:2b:80:c6:28:ff:87:08:bc:9c:1b:a2:46:09:1a:eb:
56:9e:36:5d:f0:93:e7:c6:09:b4:43:29:d2:11:6b:97:f8:c5:
b8:0d:b7:72:ef:f9:04:89:1e:8b:37:32:05:b0:9b:3a:8a:4c:
87:ce:7e:ad:a1:2d:3b:99:dc:fb:c3:c7:6a:ef:0e:e3:4e:94:
65:60:8b:12:60:8f:5e:16:ff:20:2c:5f:5f:16:02:60:c6:f3:
6c:4a:47:0a:80:6e:99:65:61:5d:b6:c9:8d:33:d5:12:55:09:
07:51:8a:b8:32:91:68:2c:bc:6e:d2:fe:b9:3c:f6:23:04:56:
6e:e5:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:46 2026 by rpki-client