
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: XbGJQhKsAtjLwkaTULVooTBPVIYBLSd1UcNmBTTUKxk=
Subject key identifier: AC:9A:DF:D8:6B:2F:61:77:1F:1A:BE:E8:D0:9C:12:9E:C2:D3:32:00
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 199E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 1906
Signing time: Thu 10 Sep 2026 16:27:43 +0000
Manifest this update: Thu 10 Sep 2026 16:27:43 +0000
Manifest next update: Thu 17 Sep 2026 16:27:43 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: KvHCJXtpUETvl0rZOhaqLBu4PE9CJN4BBJ3YMPDY1xY=)
2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: +XoYDgz3ejR6r+6v8J3OWR8DEicSb5qc500Lrj9x1Vc=)
3: F4172284A8FC11F1B11D96EB3311F970.roa (hash: xS/AUdU7s3/cOYOR6PaAdH4MjhHz0uuGiFonymaoImE=)
4: L-yMJWSGPiDauRfeA67r9-LFcKw.asa (hash: qaEfy5dF6enxBgOtX4PT20SsOAqPubGflqrr0ZHfG1I=)
5: QnkbmIgKoU5mpJQGIygufs_W5t8.asa (hash: BuRHbohILnNsWceIPv3O7mCNKMmErfU0geFyysoAjw0=)
6: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
7: 2F903356A40311EFBD995535C4F9AE02.roa (hash: g4JMPRy0kEc89B4ILuNbcB/nyYsd7Dgv1xSeLjixiqE=)
8: 791BFABCA8F411F1BFE927BD7111F970.roa (hash: nmYpRuM2vsoInXP04gpMuX3xvwv6wOzSMunPM3Q6JJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6558 (0x199e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Sep 10 16:27:43 2026 GMT
Not After : Sep 17 16:27:43 2026 GMT
Subject: CN=6aa2da7f-352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:c5:f8:67:a0:39:7d:cf:3b:71:69:b3:0f:
a0:03:80:56:d4:d3:27:f0:71:f3:ef:a1:d3:44:35:
fb:69:1c:7b:64:f9:f0:fe:15:e6:3d:cc:69:da:f2:
06:89:03:20:ae:8c:69:a5:cc:bb:cd:c4:36:cc:0e:
32:74:0e:d0:6b:a3:67:a1:75:88:f6:6c:d2:0d:75:
ee:fc:22:89:2a:35:68:df:72:61:46:f5:30:e0:a5:
7b:97:16:24:50:01:48:5c:58:46:c6:f5:0c:f7:da:
cf:df:e2:2e:58:12:58:40:3b:e1:b7:97:d3:c2:96:
f2:bd:85:04:09:07:f9:07:e1:1a:cb:66:1c:8a:ec:
e0:9d:92:c0:09:12:43:47:ff:66:99:be:7f:20:e4:
0c:4c:9a:dc:e4:08:8e:83:3f:c8:03:8d:eb:95:f9:
2e:fa:9e:7f:c8:db:9e:44:f7:ce:ad:0e:60:81:b5:
a0:0c:10:4c:2d:e7:4e:01:5e:f6:d5:e5:0a:61:9d:
40:83:cd:5d:6a:f4:ed:a5:28:be:23:14:66:05:0d:
e9:d1:e0:3f:75:09:da:82:f1:d3:bd:8c:d1:ed:2b:
fa:41:44:f1:59:3e:01:65:9b:c4:29:05:9c:62:f5:
ca:b9:d5:06:79:07:10:93:c4:5b:1c:60:6d:8e:e9:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:DF:D8:6B:2F:61:77:1F:1A:BE:E8:D0:9C:12:9E:C2:D3:32:00
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6d:37:e3:a3:e7:d5:00:d9:ec:e5:ab:5d:de:3d:95:c4:da:
7c:56:c3:7c:28:c9:b3:a3:d0:9b:dd:a4:8a:d4:58:f8:3a:04:
58:f3:00:77:38:8c:2c:19:0f:30:28:92:51:42:09:27:e5:72:
ad:a1:ff:cc:14:1b:44:0a:b7:c5:81:e1:80:e1:33:38:7b:11:
bf:18:18:05:3d:29:1c:7b:19:6f:28:98:c0:9a:a7:52:69:8d:
1e:45:5a:71:a7:39:d9:9d:e7:3a:ae:6a:0b:46:e1:41:fb:5c:
4e:4c:4e:4d:68:84:c7:01:db:e0:e1:31:d0:f1:66:23:d8:bd:
a9:79:77:34:3a:c4:b7:d1:fc:2f:de:c6:0d:d6:21:cb:40:00:
cf:d1:29:11:5f:62:16:d3:ed:58:d8:9d:e2:e8:1f:d0:0c:75:
20:6b:4c:17:52:51:f4:62:4b:97:ec:65:ff:3c:21:55:e0:5a:
74:eb:52:ab:7a:08:80:07:f2:26:1a:e5:c3:18:f9:40:0c:72:
d1:1d:58:39:ef:df:6b:07:3f:01:34:28:b2:e4:84:2e:6c:eb:
1c:68:58:23:3d:0b:49:c4:99:38:9b:a9:b7:08:84:ac:f7:54:
55:81:bf:19:64:bc:ea:cd:d7:26:05:1d:d5:72:54:d0:91:e2:
3f:58:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:58:54 2026 by rpki-client