
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: mnvu7rrFFE7nL2P0E48UHLXDrVtpLOE6vpfvqtRm/go=
Subject key identifier: AA:C1:D1:68:F5:9A:D0:29:4C:F1:3C:FB:7C:7D:88:B3:9D:7A:1A:BC
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 19A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 190A
Signing time: Fri 18 Sep 2026 16:27:48 +0000
Manifest this update: Fri 18 Sep 2026 16:27:48 +0000
Manifest next update: Fri 25 Sep 2026 16:27:48 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: 9BmXn1JYYiwEJkCS5FiMEfRzLMNrfe57nOkFvkUHbDg=)
2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: +XoYDgz3ejR6r+6v8J3OWR8DEicSb5qc500Lrj9x1Vc=)
3: L-yMJWSGPiDauRfeA67r9-LFcKw.asa (hash: qaEfy5dF6enxBgOtX4PT20SsOAqPubGflqrr0ZHfG1I=)
4: F4172284A8FC11F1B11D96EB3311F970.roa (hash: xS/AUdU7s3/cOYOR6PaAdH4MjhHz0uuGiFonymaoImE=)
5: 791BFABCA8F411F1BFE927BD7111F970.roa (hash: nmYpRuM2vsoInXP04gpMuX3xvwv6wOzSMunPM3Q6JJ8=)
6: QnkbmIgKoU5mpJQGIygufs_W5t8.asa (hash: BuRHbohILnNsWceIPv3O7mCNKMmErfU0geFyysoAjw0=)
7: 2F903356A40311EFBD995535C4F9AE02.roa (hash: g4JMPRy0kEc89B4ILuNbcB/nyYsd7Dgv1xSeLjixiqE=)
8: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6562 (0x19a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Sep 18 16:27:48 2026 GMT
Not After : Sep 25 16:27:48 2026 GMT
Subject: CN=6aad6684-e888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:f9:8d:14:44:db:3a:72:0a:88:30:8c:0c:
24:9f:c0:be:35:6b:88:7f:43:c4:1d:d5:84:00:8b:
97:23:42:7b:42:83:b6:1e:1a:d9:96:a2:33:b1:9e:
35:58:86:71:0f:37:9a:9d:8a:b0:c6:ee:14:0f:cf:
29:3f:7a:2d:d5:56:13:a7:11:38:1e:65:7d:f6:19:
3c:41:a9:e9:6f:db:ea:ef:14:c9:a4:f7:23:97:13:
6b:d2:c5:5b:84:7f:92:29:b1:c2:fe:07:45:52:cb:
56:c5:60:66:27:b7:3e:81:31:d6:ad:7a:d4:58:42:
23:53:51:25:0a:d0:a0:32:d3:ad:40:87:0e:1e:5b:
6e:65:6a:19:cf:a4:41:01:fd:dc:7d:39:4c:7b:b5:
a3:84:bb:4d:04:90:d4:06:91:b0:e7:ee:be:55:eb:
12:39:78:ef:a1:8e:ff:94:8f:b0:bb:ab:b4:95:db:
9d:99:4d:45:fc:02:6c:fe:ad:51:8b:49:1f:3f:30:
86:f3:e9:f3:e9:b2:54:68:d9:05:be:bf:b7:4d:81:
b1:c9:f4:9b:91:82:80:47:03:b9:2b:a4:2b:80:07:
bc:da:cc:67:bc:c5:39:47:c1:0e:ce:a0:66:4b:8d:
92:46:16:bf:25:94:7b:14:c2:4d:4b:a6:83:fe:96:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:D1:68:F5:9A:D0:29:4C:F1:3C:FB:7C:7D:88:B3:9D:7A:1A:BC
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:8d:6c:5a:cb:05:3d:5b:5f:55:d6:6c:12:77:e4:47:5e:33:
7c:f1:6b:9f:6c:1b:93:1f:eb:dd:6d:02:ef:71:d4:42:42:43:
c6:71:79:63:e3:3f:c7:6e:19:dc:99:eb:b2:c2:f7:e3:d0:4f:
0c:26:df:20:99:9e:53:42:ec:29:39:40:23:6a:60:fd:f5:a0:
ac:3e:18:70:88:98:d1:c4:84:db:02:bb:95:f4:97:83:ba:d1:
a5:a5:b8:2e:f8:15:91:e4:f2:db:6a:ed:35:6c:06:7f:f3:f4:
98:38:11:5f:8f:f4:22:c6:16:dd:f0:0f:3f:c9:b2:5f:63:19:
42:93:92:76:b4:86:a1:a2:f7:95:7c:de:70:5b:74:31:69:59:
6f:19:ac:7c:27:7b:80:f6:43:0a:55:9c:ea:0a:cb:51:ca:65:
82:18:19:06:12:36:24:d3:0d:87:ea:b9:36:0e:0b:39:c7:9a:
4c:ed:9e:a4:3a:6c:72:a2:ca:dc:8d:c4:48:43:5f:b5:46:f2:
32:0b:de:91:38:d5:d3:2b:4d:25:1c:f4:22:44:f1:b6:c6:51:
f2:8a:e4:e8:75:f5:8d:73:ff:41:ca:84:08:8f:2f:70:1d:2e:
59:17:f5:59:d6:d0:7e:f0:24:92:6a:1a:88:ec:fe:3d:46:b7:
d1:ff:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:40:56 2026 by rpki-client