
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: 3mR6sbgL9iRw/V77yV7ygbiMVFdh1udNDx2w5qoa9Bk=
Subject key identifier: FB:99:EC:1A:C1:CA:E5:CE:44:DA:30:9D:95:C7:B5:8A:84:9E:35:EB
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 193C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 18B1
Signing time: Sun 26 Apr 2026 16:25:43 +0000
Manifest this update: Sun 26 Apr 2026 16:25:42 +0000
Manifest next update: Sun 03 May 2026 16:25:42 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: ZXztfAi1DCgvPK8ucTUMN5pdMRl6IdTgwLr7GuUEJI8=)
2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: L464pw+mYw7C/cRnG6o+mzU5wDcXRM+2+hFNemRcdQM=)
3: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
4: 2F903356A40311EFBD995535C4F9AE02.roa (hash: vZDKKCDJKzzY+IvjpGTDfApzWjMelqWzZG+nlgpQJBI=)
5: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: 70+d1rfTRJf8w5VTyIQFaQNkyp+GkFzzhaOu6clyNSg=)
6: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: uQMa0Zw9eRpMdwrco7LAgAmTH9PaQbmYxKvMpopPRSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 16:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6460 (0x193c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Apr 26 16:25:42 2026 GMT
Not After : May 3 16:25:42 2026 GMT
Subject: CN=69ee3c86-20b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:ae:f7:46:33:71:db:29:cd:ab:ee:28:02:
0c:e0:0c:c2:32:d7:3a:60:a5:1e:f6:d8:3b:b5:22:
de:58:48:de:25:70:ef:0c:31:ed:76:16:f9:1a:ba:
2e:1d:36:99:4e:b5:e7:01:5e:26:3c:14:00:7b:14:
13:b5:35:3a:0a:d2:5a:17:c4:e0:66:61:f1:38:53:
8d:5e:36:b2:94:a7:62:fe:13:4c:bf:e2:ad:3c:d0:
af:3c:46:e2:92:45:a9:41:df:c9:f2:f5:8b:83:9c:
49:2e:86:2c:86:34:65:e4:e4:d9:7a:c9:ed:44:11:
3d:89:f1:de:c3:20:ba:7a:e8:a1:8b:d6:9b:f5:69:
26:8a:9a:b6:c8:75:77:a8:1b:27:81:b5:ff:22:8d:
02:ff:10:a8:5f:aa:a9:73:7a:47:e6:f5:a2:17:2f:
60:bb:ce:0b:be:7e:49:b0:80:1b:91:9f:d0:a7:c4:
f1:b9:0d:79:82:7c:da:64:29:be:5b:e5:10:dc:30:
5e:13:81:1a:1a:e0:ad:da:55:f6:d0:fc:59:a5:08:
40:9d:3e:7e:50:e0:b1:16:c5:6b:e4:e4:49:10:84:
e4:fb:67:e8:a1:c2:ce:c5:b6:b1:59:3d:72:2f:99:
30:bd:bf:b0:c1:3c:8e:07:63:57:16:16:da:18:ba:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:EC:1A:C1:CA:E5:CE:44:DA:30:9D:95:C7:B5:8A:84:9E:35:EB
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:21:d3:77:34:d6:25:5d:46:e4:88:09:10:14:2f:ee:1b:
d6:bd:ad:4d:c7:97:c9:41:0e:c2:d1:34:55:c5:55:4d:54:43:
c2:c2:5d:45:1a:82:69:38:dd:5e:99:fc:8d:31:b2:d9:8c:08:
11:b4:8b:3d:b1:f9:17:83:cc:3b:e2:5e:88:ad:b5:86:84:6d:
32:e2:be:93:3b:c2:67:ed:09:02:3c:f7:12:08:63:a3:84:8d:
5f:b2:c1:f2:ca:de:25:97:24:f9:6b:84:58:e1:bc:52:23:a2:
00:f5:f2:11:4c:d7:93:27:f2:5f:9b:a2:3f:00:48:e6:11:54:
49:f1:c9:45:2f:db:c7:d9:f0:4f:88:7c:5d:43:a9:37:0a:1d:
c3:b7:bc:db:4d:f1:71:fa:55:34:b6:1d:16:1b:25:e6:f9:ea:
1d:be:c2:25:96:f5:38:55:70:bb:66:09:f8:34:03:47:3f:bc:
59:54:4f:e0:1f:cc:00:ea:d7:3f:fc:7b:1f:f0:3f:d0:97:5a:
b8:54:29:b4:e1:98:9c:0b:51:55:2a:77:f5:b9:f8:2b:48:f8:
8b:d8:0d:10:95:fa:f9:65:68:a9:92:31:03:a3:f0:41:24:fb:
6b:b6:bf:ac:2e:c2:d3:fd:32:f5:57:03:5b:55:ac:60:8f:dc:
e0:0f:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:39:16 2026 by rpki-client