
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: onWYkUCBV7AW92dnv9K79rypNuj2Db580icUqIJsB0U=
Subject key identifier: 90:44:BF:A9:05:DA:DB:11:DD:7A:C1:4C:CE:20:F6:45:F7:CB:54:5A
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1970
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 18E3
Signing time: Tue 28 Jul 2026 16:35:15 +0000
Manifest this update: Tue 28 Jul 2026 16:35:14 +0000
Manifest next update: Tue 04 Aug 2026 16:35:14 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: istBC4CR6zsLhUpUSvyIQM/eqaIvH25LGqgZZKwixVo=)
2: 0807FA84550111F19A5F3769A6833773.roa (hash: 2pXYYutxLDL02ViP2qOATXoC55RjTW311T3Q3a+diJk=)
3: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
4: 2F903356A40311EFBD995535C4F9AE02.roa (hash: vZDKKCDJKzzY+IvjpGTDfApzWjMelqWzZG+nlgpQJBI=)
5: 2F268460A40311EFBD995535C4F9AE02.roa (hash: L464pw+mYw7C/cRnG6o+mzU5wDcXRM+2+hFNemRcdQM=)
6: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: 70+d1rfTRJf8w5VTyIQFaQNkyp+GkFzzhaOu6clyNSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6512 (0x1970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Jul 28 16:35:14 2026 GMT
Not After : Aug 4 16:35:14 2026 GMT
Subject: CN=6a68da43-55cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:f0:cf:34:22:13:9f:f5:a6:f5:fc:f5:44:
48:03:69:30:36:a1:53:c7:7b:ad:17:b7:28:f6:17:
2d:25:0d:2a:35:02:17:24:2d:48:f2:0d:11:c5:58:
fe:ec:a9:fb:aa:e5:d4:5a:68:a3:1f:41:83:0b:b6:
d9:48:1e:0c:66:1a:d4:36:ce:52:75:60:fb:3b:c1:
4d:63:83:00:e3:80:d3:4e:5d:e3:99:18:07:7b:d2:
41:4b:5c:fa:bc:a4:6a:53:f1:d2:8c:55:3f:78:93:
4d:65:f9:fc:b0:b5:bb:08:d6:23:ad:7a:db:65:a2:
f5:26:4e:a8:1c:03:bc:7c:25:bd:29:fd:e0:91:b9:
45:ab:51:3a:3b:9b:30:91:11:a0:50:72:20:33:2a:
02:80:56:c6:7e:b3:b2:ae:9f:a8:67:4a:78:b9:0f:
b7:ab:48:70:11:b8:83:7f:2f:8e:17:55:55:7c:2d:
e4:45:26:5e:a1:6f:b3:ae:24:36:aa:84:8f:6b:0d:
90:24:05:14:58:43:00:c5:69:e9:18:3c:8f:52:02:
c8:34:22:a6:b1:f6:ff:98:9d:c4:ca:da:af:82:94:
9b:be:e3:7d:ec:20:4d:b1:6a:f0:6c:4f:d6:69:d2:
b1:27:41:0a:d9:34:ea:09:68:d6:a0:f9:cc:61:31:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:BF:A9:05:DA:DB:11:DD:7A:C1:4C:CE:20:F6:45:F7:CB:54:5A
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:bb:d3:fa:07:d2:50:ae:48:81:d5:fb:cf:41:08:85:fa:88:
d5:d6:75:0d:76:32:30:5a:69:55:85:cd:fb:cf:b6:ad:df:5e:
6c:f2:53:57:76:da:2a:11:2d:7e:55:e5:b6:df:c9:9f:b0:34:
cf:2b:85:e6:ab:e5:c2:eb:b6:a9:5f:88:03:4e:1b:fe:cf:8a:
c7:b4:08:0f:3a:3d:cb:b5:54:d2:78:83:1e:53:1b:e8:7c:40:
c8:4c:51:af:55:6b:a9:5a:c2:b5:c0:d3:8c:17:13:56:0e:41:
43:8b:a6:f5:ae:91:98:6f:8c:37:64:e1:b4:b0:86:bb:f5:69:
fc:10:bd:76:ac:bd:fa:ab:ff:79:4a:e9:6d:5e:7e:9d:c9:22:
e1:ec:3f:69:e3:81:8a:4d:95:ab:08:f8:22:87:ff:0b:29:75:
08:42:8e:19:fd:22:6a:67:00:7d:fe:9e:8a:75:f3:a0:36:cd:
82:22:fa:99:2f:57:2b:f9:88:55:e9:62:76:b2:76:e8:45:fc:
17:5d:17:8a:0c:77:6f:d4:44:e4:7a:c3:b1:b7:16:81:13:14:
db:7e:42:ac:86:52:30:97:27:16:ee:d3:f6:1a:9e:40:a6:54:
a4:6f:b9:02:75:cb:21:66:76:3e:7e:38:a8:6f:1f:bc:3c:0c:
14:56:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:45 2026 by rpki-client