
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier: pG4wI4RV5eD02CH9raeh1hnnK/ZSpthAhVnbHgsjCy8=
Subject key identifier: EF:17:EF:58:07:9F:80:7F:3B:E7:1F:CA:BE:DA:5D:E7:1F:1D:2E:4C
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 13AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number: 1385
Signing time: Mon 20 Jul 2026 17:07:08 +0000
Manifest this update: Mon 20 Jul 2026 17:07:08 +0000
Manifest next update: Mon 27 Jul 2026 17:07:08 +0000
Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: 89GNkxhW3vtENfjjSZGHITBv8t1TOdse5Q1fLsmpWiA=)
2: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: XY8B3tTzPyJBZMYoI9Ehi8tJlU71I3ce0cvFxvp+s6U=)
3: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: VSOMGpR0/e2J9EQLKTIhVqJ/wQMqC0LOmUgq8KK0Szk=)
4: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: azHcEZz2GBJVjDyR8Vdr2A5zsoqu99TMJIuTeQ/WvfY=)
5: 403398AA233111EEAF768F66C4F9AE02.roa (hash: Y52+tRvMTfL460RUNVYk3L8TtXM2/GdPu6P2ErCDVWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5039 (0x13af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: Jul 20 17:07:08 2026 GMT
Not After : Jul 27 17:07:08 2026 GMT
Subject: CN=6a5e55bc-b9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:20:47:e6:c2:ab:04:8b:8b:97:e4:e1:1f:
17:4f:6d:57:d3:0f:4f:47:8b:cf:cb:39:9a:1e:a8:
3a:9e:47:f3:ce:d3:fd:21:ae:dd:1b:e5:04:4e:47:
c0:9d:a1:1a:4f:0a:ba:ec:d4:b1:8f:d6:83:75:29:
41:09:9c:96:9a:c5:c3:c9:26:72:58:0a:b3:44:d8:
ea:c5:a4:4f:e0:26:17:a1:05:0e:d9:55:bb:51:cf:
08:48:5b:4e:45:80:08:28:15:4f:93:81:e6:94:70:
2d:22:ec:a8:41:f9:d8:20:8d:fc:b6:aa:89:7b:8b:
71:96:ea:6b:7f:6e:77:4d:f0:38:c8:3e:ad:5d:40:
61:da:f8:a1:c0:5f:3c:7a:47:0e:36:1f:13:71:88:
ff:bb:79:e9:05:c0:f9:d2:cb:d3:ab:57:72:87:ad:
34:71:54:05:5f:da:f4:dc:4a:6b:92:bb:82:40:52:
69:95:18:a3:4b:9b:92:a4:3d:f1:b2:93:95:7f:f2:
e6:72:21:12:09:69:42:16:52:c9:83:81:d1:80:d5:
04:54:1a:9d:5b:a0:24:e3:c9:fc:17:13:79:df:b8:
61:5a:b0:0c:8a:17:8a:eb:58:04:92:e1:9d:7f:37:
cb:9f:75:78:0e:93:32:28:39:f8:df:91:db:9c:5d:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:17:EF:58:07:9F:80:7F:3B:E7:1F:CA:BE:DA:5D:E7:1F:1D:2E:4C
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:92:07:20:7d:d6:79:8d:e9:a0:db:e5:13:2c:0f:96:f2:ce:
d6:b3:99:29:bd:5c:8f:0c:33:38:c5:b6:15:11:e3:bd:0d:ae:
94:7b:62:cb:fd:ea:68:92:e7:19:f2:5d:d1:5e:3f:82:ad:80:
2f:d3:af:03:5b:5c:f1:a2:69:1e:cc:a0:c2:de:4e:6b:49:8c:
03:cd:4b:0f:f2:b8:dd:8e:f1:7d:eb:27:a8:7c:2c:21:52:b6:
80:94:a0:85:19:c3:46:fb:9d:06:f8:6e:16:92:36:2d:fe:45:
9c:30:09:87:f9:8a:c2:09:c2:57:3b:03:b4:55:87:97:d6:92:
f0:ff:5f:2e:ab:fb:4d:69:d5:0b:f2:5d:13:1e:42:44:52:67:
5d:c5:67:33:cc:fb:69:2e:eb:cb:9d:05:4e:09:a9:3d:bf:67:
11:58:b3:14:d8:1f:63:56:50:50:04:f0:16:1e:d7:99:93:05:
4b:0d:a9:db:41:81:24:60:2e:5f:f8:12:91:2c:99:58:ba:a8:
54:9d:52:32:93:a4:35:7e:6e:5e:0a:e2:12:c3:98:56:8c:34:
46:f9:47:39:e5:5c:d7:9c:91:89:2f:b5:63:17:19:d0:24:43:
3b:ba:51:30:3a:48:d6:d7:77:05:aa:27:83:d0:e4:1d:ef:a1:
37:83:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:45:48 2026 by rpki-client