
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier: M7a8zqKJi6zJ4m3R+amYy0+Ytd2uvB62hqVzA++mS/U=
Subject key identifier: CF:A5:A7:5E:D7:27:BB:51:F7:71:13:29:93:20:D6:40:B8:A3:A3:6A
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 137F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number: 1355
Signing time: Thu 16 Apr 2026 16:56:24 +0000
Manifest this update: Thu 16 Apr 2026 16:56:23 +0000
Manifest next update: Thu 23 Apr 2026 16:56:23 +0000
Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: Fiqd2eVW7O0a9djBC05i4VfbTMN8PauuUZ7/Aik3F/k=)
2: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: VSOMGpR0/e2J9EQLKTIhVqJ/wQMqC0LOmUgq8KK0Szk=)
3: 403398AA233111EEAF768F66C4F9AE02.roa (hash: Y52+tRvMTfL460RUNVYk3L8TtXM2/GdPu6P2ErCDVWQ=)
4: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: XY8B3tTzPyJBZMYoI9Ehi8tJlU71I3ce0cvFxvp+s6U=)
5: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: azHcEZz2GBJVjDyR8Vdr2A5zsoqu99TMJIuTeQ/WvfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4991 (0x137f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: Apr 16 16:56:23 2026 GMT
Not After : Apr 23 16:56:23 2026 GMT
Subject: CN=69e114b8-81ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:bf:e7:f4:3c:6d:e0:82:2a:49:bb:7b:ae:
6b:0d:da:f7:40:1c:52:7a:d4:8a:8a:71:0d:78:0d:
4c:1c:28:bb:50:e4:cf:6f:b7:d4:1d:e8:22:51:2c:
dd:d1:51:0d:f9:83:01:40:b4:92:54:6c:3b:25:93:
82:3c:40:13:31:2e:a8:20:04:8e:92:f5:f3:cc:91:
0b:79:df:d0:2d:ab:e5:56:4b:67:50:88:f4:55:80:
65:e7:14:5f:0d:03:b9:7b:22:4c:0b:4b:4c:5f:00:
71:71:e6:a7:e8:e6:b2:91:15:45:ae:21:7b:42:c9:
c8:aa:eb:79:7b:91:61:44:2b:55:f6:aa:70:40:f6:
f0:df:62:36:04:75:17:05:85:33:9c:42:c3:ef:37:
35:47:90:d6:bb:e2:e0:ef:22:cb:0d:45:69:d2:07:
0e:39:72:59:4a:e1:ea:0e:a9:96:42:d5:42:a3:6f:
bc:ee:45:30:5e:37:03:27:2a:92:5d:8a:22:3f:29:
0c:70:0c:40:7e:d7:94:ae:d9:53:74:c3:ba:63:f5:
f6:88:5b:66:33:b3:ca:c8:70:52:e8:7b:e2:ba:cb:
e6:20:18:05:02:08:e3:e8:4d:20:7b:db:12:8c:3b:
4d:22:00:59:f1:b1:73:70:09:52:b5:5f:06:36:5f:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A5:A7:5E:D7:27:BB:51:F7:71:13:29:93:20:D6:40:B8:A3:A3:6A
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7d:51:66:e2:f5:1f:a7:c0:ab:c6:45:0c:8c:61:c8:d3:72:
29:89:9f:52:b2:d3:3c:25:4f:6a:f4:f7:45:62:a3:9a:5c:0d:
a6:33:11:c1:27:57:34:de:d6:52:be:4a:c0:9f:cb:f6:0b:2a:
e3:04:80:21:0e:80:75:17:db:ae:00:84:34:a9:20:33:82:14:
cd:ea:c1:6c:63:90:fa:37:ae:3b:a5:a6:e6:70:2a:be:15:9b:
e3:d7:b6:00:7d:0f:f1:5a:87:5e:fa:22:20:61:8e:89:7c:6f:
0a:5e:6e:50:f1:4f:1d:79:f6:33:64:fa:88:97:c5:c5:8c:9c:
59:94:e0:13:ba:18:3f:fb:60:83:eb:39:88:e4:dd:54:75:85:
e6:8a:95:03:4b:d2:a7:86:2b:59:2d:4a:6f:5c:be:70:05:5d:
cd:ec:fe:be:c7:f3:56:b8:6c:fc:45:03:5d:91:fd:8d:5c:a0:
6f:45:dd:d6:d6:c2:bf:10:dd:21:47:f1:a5:2a:d3:25:57:ee:
94:cf:28:8f:8e:ce:93:af:61:e2:1b:14:25:9a:a1:c5:a0:31:
8f:7d:a2:6c:c2:01:e7:05:a3:9c:32:93:a3:d1:14:8e:24:ce:
ff:e6:e1:05:46:a7:b2:cd:f7:3f:b7:57:5f:2b:31:ac:5f:4d:
e7:d0:5b:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF
QzhGOUQzNjcwHhcNMjYwNDE2MTY1NjIzWhcNMjYwNDIzMTY1NjIzWjAYMRYwFAYD
VQQDEw02OWUxMTRiOC04MWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvy/5/Q8beCCKkm7e65rDdr3QBxSetSKinENeA1MHCi7UOTPb7fUHegiUSzd
0VEN+YMBQLSSVGw7JZOCPEATMS6oIASOkvXzzJELed/QLavlVktnUIj0VYBl5xRf
DQO5eyJMC0tMXwBxcean6OaykRVFriF7QsnIqut5e5FhRCtV9qpwQPbw32I2BHUX
BYUznELD7zc1R5DWu+Lg7yLLDUVp0gcOOXJZSuHqDqmWQtVCo2+87kUwXjcDJyqS
XYoiPykMcAxAfteUrtlTdMO6Y/X2iFtmM7PKyHBS6HviusvmIBgFAgjj6E0ge9sS
jDtNIgBZ8bFzcAlStV8GNl/WNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+lp17X
J7tR93ETKZMg1kC4o6NqMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15
YlhGV2d2c0VFMUhzajUwMmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnH1RZuL1H6fAq8ZFDIxhyNNyKYmfUrLTPCVPavT3RWKjmlwNpjMRwSdXNN7W
Ur5KwJ/L9gsq4wSAIQ6AdRfbrgCENKkgM4IUzerBbGOQ+jeuO6Wm5nAqvhWb49e2
AH0P8VqHXvoiIGGOiXxvCl5uUPFPHXn2M2T6iJfFxYycWZTgE7oYP/tgg+s5iOTd
VHWF5oqVA0vSp4YrWS1Kb1y+cAVdzez+vsfzVrhs/EUDXZH9jVygb0Xd1tbCvxDd
IUfxpSrTJVfulM8oj47Ok69h4hsUJZqhxaAxj32ibMIB5wWjnDKTo9EUjiTO/+bh
BUanss33P7dXXysxrF9N59BbUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:58 2026 by rpki-client