
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json)
Hash identifier: Oy3ALpq5dJZPmP+60KlIWUqWGm1phlOKr97iNwL/b44=
Subject key identifier: A5:68:25:FC:8A:19:80:A6:03:C3:1C:F2:FB:BC:70:04:36:FE:8D:75
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial: 0506
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
Manifest number: 04FE
Signing time: Wed 19 Aug 2026 00:03:16 +0000
Manifest this update: Wed 19 Aug 2026 00:03:16 +0000
Manifest next update: Wed 26 Aug 2026 00:03:16 +0000
Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: hjOObzA64nm5P9mh09xdgphv6l9AGeG0DUlHk+lxi8s=)
2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: n0l/G3zz8221DJQZK1QZg+2i3DJbPsMPV1JZDdgqiFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Validity
Not Before: Aug 19 00:03:16 2026 GMT
Not After : Aug 26 00:03:16 2026 GMT
Subject: CN=6a84f2c4-bed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:8a:c7:79:c5:6a:8c:9a:0f:15:d4:34:dc:
ac:7f:72:46:95:41:b4:2c:76:07:78:4b:3b:ea:da:
83:05:51:62:58:15:74:aa:e6:53:45:8f:c0:c3:18:
b9:c9:71:61:6b:21:26:5e:fd:e0:08:55:80:ac:1d:
18:4d:07:31:4f:8d:86:93:30:f2:79:3d:85:1d:0a:
f1:fe:24:ca:05:2c:20:ab:cf:a5:63:41:5f:9e:c3:
c3:04:8a:41:26:6e:72:0a:10:4c:12:a3:4a:b5:97:
15:d7:79:26:bf:bd:e9:df:b5:ab:87:f3:43:4c:37:
72:56:3a:bf:f1:7d:61:2b:f7:be:88:00:b8:a7:a6:
27:25:67:19:6c:a1:3c:68:df:da:46:72:d0:c0:96:
a3:e5:b7:14:23:d5:24:a0:ce:01:1f:fa:4b:34:95:
b8:01:46:65:d2:14:97:db:91:87:1d:5e:93:87:22:
c2:08:11:3e:57:c3:de:f5:3a:ed:1e:fb:19:86:10:
30:5f:a4:b7:92:c6:d7:10:bc:aa:80:b2:1e:a9:d5:
67:51:21:3f:13:b7:10:00:a0:8f:ff:60:3b:ca:9c:
01:5c:04:bb:91:82:e0:b6:32:8f:04:03:46:88:ee:
a6:09:b8:d2:ef:26:49:3f:42:c3:4d:5f:7f:7a:c1:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:25:FC:8A:19:80:A6:03:C3:1C:F2:FB:BC:70:04:36:FE:8D:75
X509v3 Authority Key Identifier:
keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:8b:d7:5d:f9:59:a5:c9:96:f9:0a:39:a6:46:20:a8:89:
64:67:29:20:58:78:6c:f2:80:d1:01:8d:88:35:fc:e6:98:5b:
fe:08:90:5c:4f:10:1c:8a:8e:00:94:82:20:b9:8c:b1:88:6d:
35:2a:56:ab:ba:02:40:b8:29:ea:42:ec:2c:be:12:7f:7b:4b:
c5:12:e7:48:78:d2:92:26:fb:a4:07:5e:f7:6e:74:42:be:a6:
e4:23:07:f3:53:44:59:3b:0e:87:66:d1:ea:b8:21:97:75:d7:
34:7b:a1:70:5e:0a:e5:09:39:42:fa:f1:7a:60:b8:e6:63:c2:
b3:c1:f7:d9:26:19:3d:a0:ea:f3:29:df:b2:88:88:f9:1a:7a:
92:bb:a6:f0:a4:ee:e2:95:0c:06:08:d2:96:4b:a0:49:81:67:
49:04:d8:7d:f6:40:4f:3b:ef:48:3a:13:f0:fb:1b:e4:a3:9d:
3d:6f:da:35:f0:35:cf:55:54:87:f3:8d:da:60:fc:8d:c8:9c:
46:6c:1d:1c:c0:02:23:24:77:da:49:4f:75:80:08:81:f8:8e:
bc:e7:6f:45:a1:6a:6d:53:58:e1:ed:6b:8c:de:30:f9:32:a9:
c8:a1:79:81:cf:22:4c:93:6a:6f:f3:a1:78:ce:50:05:49:75:
26:32:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:40 2026 by rpki-client