
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: V6z+uoZdGFjwed4XPnlcWkzJ0RkhuHJFnsPPYUyrNbo=
Subject key identifier: E8:4A:0E:F2:3F:37:22:E6:0C:57:34:86:D2:B4:B2:12:DD:0F:63:04
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 19C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 1925
Signing time: Wed 04 Nov 2026 16:32:51 +0000
Manifest this update: Wed 04 Nov 2026 16:32:50 +0000
Manifest next update: Wed 11 Nov 2026 16:32:50 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: zNb+6MTOJbzkrHzImTUV4xh21ugTDYm+i3b4ZOceRDk=)
2: 2F903356A40311EFBD995535C4F9AE02.roa (hash: g4JMPRy0kEc89B4ILuNbcB/nyYsd7Dgv1xSeLjixiqE=)
3: 2F268460A40311EFBD995535C4F9AE02.roa (hash: +XoYDgz3ejR6r+6v8J3OWR8DEicSb5qc500Lrj9x1Vc=)
4: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
5: F72199D4C23111F1AADE648B5A11F970.roa (hash: AiEjjG8pw2r8DAOtvGL+9ko0yxwM+202DD+kZXh9KDo=)
6: QnkbmIgKoU5mpJQGIygufs_W5t8.asa (hash: BuRHbohILnNsWceIPv3O7mCNKMmErfU0geFyysoAjw0=)
7: L-yMJWSGPiDauRfeA67r9-LFcKw.asa (hash: qaEfy5dF6enxBgOtX4PT20SsOAqPubGflqrr0ZHfG1I=)
8: A8E45442C7C611F180B4F3865111F970.roa (hash: HGib+78aA6MzU0aF/Tbc4+Jfp5dunSDdToHIRQtXJMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 16:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6592 (0x19c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Nov 4 16:32:50 2026 GMT
Not After : Nov 11 16:32:50 2026 GMT
Subject: CN=6aeb5e33-7cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:e9:1b:6c:0a:cc:ce:9b:06:1a:51:f3:41:
51:62:e0:c6:12:ea:51:77:5a:cd:bd:3d:b9:27:b5:
44:d4:80:a9:67:bb:59:e4:b3:c7:6c:8a:37:1d:f5:
96:dc:52:82:d6:15:68:c9:e1:e3:e3:59:d3:7d:c8:
bc:1a:7f:a4:bb:f0:f1:4b:86:21:d5:90:43:db:10:
d8:f1:3c:f5:e0:56:a2:80:31:0a:ab:97:2b:97:8d:
6b:88:7a:08:ef:e9:a5:90:4d:fb:ae:86:62:46:3a:
5d:72:18:31:95:8b:7c:32:99:eb:fc:4b:53:6b:cb:
a7:20:03:ae:33:45:c2:96:5d:78:18:f4:ac:2f:ac:
3d:a9:c1:5f:57:fc:ec:49:fa:4b:f2:e2:b8:cd:b6:
18:fc:8b:35:f9:5b:ad:c8:e6:5d:5a:14:3f:b9:56:
64:98:64:d4:32:48:8a:aa:b4:5d:dd:12:4f:6c:85:
37:78:b1:7e:e4:c8:bd:fd:fa:e9:69:ac:6b:b3:79:
e5:f0:2b:61:b1:04:69:e7:c9:44:b7:a4:07:20:fb:
20:e0:1a:dd:d2:1d:5f:81:e8:65:b5:63:dc:ec:ee:
70:fd:ab:8b:7f:bf:38:69:78:cf:2b:b3:de:56:47:
b0:70:90:ef:71:b8:60:b4:15:2e:93:fd:d6:39:7e:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:0E:F2:3F:37:22:E6:0C:57:34:86:D2:B4:B2:12:DD:0F:63:04
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:ca:a0:67:07:33:34:e5:c9:36:74:30:05:2e:92:24:33:
a1:61:c1:ad:c8:db:d3:23:c5:95:ec:d4:15:39:9b:07:dd:21:
c1:8a:b2:33:24:11:d0:aa:29:51:0b:bc:8c:dd:f5:6f:84:46:
13:89:ae:c0:72:94:c2:96:ae:c6:9b:d0:d3:26:af:4a:ec:f0:
5f:4c:28:ea:a1:36:7c:01:db:27:0f:2c:23:2b:53:e1:0c:f1:
95:46:63:f5:15:83:1e:8e:b7:61:13:9c:d9:56:a1:42:8a:f9:
12:39:c6:b3:0d:94:e8:ed:14:20:8f:31:82:3e:fa:42:9d:5c:
b0:55:72:f3:2d:af:48:f2:aa:ea:b5:fa:e1:8f:14:a9:ee:47:
c5:19:b7:40:08:b5:99:fd:32:31:e6:4d:d2:97:a8:a7:0f:31:
0c:34:bb:d1:37:d8:2a:95:ec:3c:82:1a:82:d8:71:03:2e:f0:
f6:74:bd:19:21:1f:6c:25:ae:7d:1c:80:96:8a:c1:61:60:0e:
3f:d0:b6:a7:9e:a9:29:92:c7:cf:26:ad:0d:f9:c4:be:4e:ae:
65:c8:c2:48:8c:07:0a:33:61:ce:43:98:21:dd:55:85:36:ce:
85:3a:25:bf:77:bc:eb:34:fa:cb:78:76:6a:64:5c:54:19:5d:
d2:56:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:12:16 2026 by rpki-client