
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: dv1FVFNu8bEghXP/TFQI6CAJ3GSKA4S57j4PA7nkrLc=
Subject key identifier: F4:6F:C0:D7:8A:B2:D5:B6:DC:3A:95:A6:96:B0:65:C0:41:EE:E9:4A
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 1892
Signing time: Sat 28 Feb 2026 16:35:09 +0000
Manifest this update: Sat 28 Feb 2026 16:35:09 +0000
Manifest next update: Sat 07 Mar 2026 16:35:09 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: eSHaV1dYV54Ttqdb3JmHyJpF/G4bNA+gHYAzdlU75o0=)
2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: XGbHyz11eqTG2WuL4SXyVFxTf/eI0Dp5CrgU2dxjDKg=)
3: 2F903356A40311EFBD995535C4F9AE02.roa (hash: tD5AozlaeQw+UNfojmdcsNcKYDUWH8a6A9DhH8j0CAU=)
4: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: Ya5ufLQicRuV/f/WM4WS/y/x4rf3Kux6u1np8NLXvFE=)
5: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: urChWgG0j59t88O+6y1D/HJAH65UEfWDljIrKP4FmbE=)
6: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: EMHDZT7Yk2KCPdwabjwXK+owecgmggjP81UBPRku548=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6419 (0x1913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Feb 28 16:35:09 2026 GMT
Not After : Mar 7 16:35:09 2026 GMT
Subject: CN=69a3193d-aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:2e:99:49:57:c8:f4:06:d7:b4:73:96:b2:
24:49:63:5d:4c:1d:af:dd:ca:a4:39:25:71:b7:14:
8a:83:c7:81:30:2c:a5:6e:86:c9:c3:68:6c:d0:9b:
86:e5:da:18:15:e0:b1:9c:aa:a5:99:7e:7b:e8:a2:
06:f3:f0:a4:b6:a8:5a:80:97:ad:c2:c6:42:eb:0d:
2a:e1:56:e0:2a:3e:92:f9:14:2e:7e:9f:b6:ed:f8:
1c:67:2d:1c:17:fb:f0:47:87:d6:5a:fd:05:a0:46:
58:68:17:88:b0:e8:0d:72:4a:27:3d:a9:80:d1:2c:
f5:21:17:99:61:3e:98:f7:bf:53:57:64:94:98:12:
83:9a:59:92:59:bb:e8:8a:d3:64:7d:19:09:93:85:
09:05:16:14:0a:97:15:c9:9f:ad:82:6b:ed:8c:0b:
08:c2:5b:09:88:be:06:2d:d6:3c:52:fd:69:58:e7:
39:2e:ff:a8:c6:f5:3a:eb:a2:9f:3d:5f:f1:b4:e3:
a5:55:81:fa:6e:f0:a3:1d:89:e8:01:7b:0d:67:b9:
eb:fd:d8:48:29:fd:24:6f:ab:fa:14:c7:da:f8:bd:
6e:fc:41:72:71:2a:88:65:59:e4:49:33:3e:ce:74:
44:74:18:22:a8:ec:75:a6:15:1e:b0:5d:cf:92:1d:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6F:C0:D7:8A:B2:D5:B6:DC:3A:95:A6:96:B0:65:C0:41:EE:E9:4A
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:48:fa:47:12:aa:72:5e:dc:c2:3c:45:0f:bd:0d:24:57:
73:a6:a1:4a:d1:14:ce:c1:74:ba:36:a8:d2:aa:9d:5f:49:bb:
f9:5a:c1:99:9f:7b:c5:b6:ad:39:df:67:7a:c6:f5:be:3c:51:
78:0a:f7:2a:43:43:66:37:d2:42:ff:71:91:c2:88:ed:4a:3d:
6f:0c:8c:be:c2:84:c7:e3:25:c6:16:d3:6e:f1:2d:fb:95:a6:
4d:4e:98:2b:1b:89:a9:94:44:14:68:c0:41:c0:7a:2c:d5:31:
7a:3e:7b:d2:53:3d:0e:f8:78:1e:2a:b7:89:c0:46:8c:f8:33:
7b:e6:33:89:60:e6:6e:0e:eb:9a:10:62:ad:55:b8:37:c3:06:
2b:fe:5c:2b:86:48:d1:fe:1f:26:63:17:d1:c1:9b:1b:c5:84:
bd:20:e6:09:a0:31:e6:a6:d5:66:aa:6b:45:f2:74:2e:69:81:
7c:8d:59:76:05:62:d3:80:b3:64:b6:a2:6e:fa:fb:17:96:ee:
c5:5d:9c:59:f3:c0:6e:49:09:99:a1:92:b8:20:62:de:bc:17:
2c:12:8a:fc:da:bc:0e:40:23:56:f6:68:cf:ba:0c:0c:a4:e8:
b2:c6:03:ff:39:c4:3e:a3:4d:a3:00:8b:f5:90:10:3b:9e:63:
73:e1:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:52 2026 by rpki-client