
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: /zbbYs3ZZk99l0AFpQn/AFuDlubaZokc3oldW/7IXMc=
Subject key identifier: 05:35:8B:F4:1C:FE:20:01:F1:FC:60:4C:F9:71:50:4A:9A:F9:6E:93
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1925
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 189A
Signing time: Thu 12 Mar 2026 16:24:03 +0000
Manifest this update: Thu 12 Mar 2026 16:24:02 +0000
Manifest next update: Thu 19 Mar 2026 16:24:02 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: w68WB+4vEaLWdMz7uYiemoFrTgh0zh9evOOYkOBh+ws=)
2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: L464pw+mYw7C/cRnG6o+mzU5wDcXRM+2+hFNemRcdQM=)
3: 2F903356A40311EFBD995535C4F9AE02.roa (hash: vZDKKCDJKzzY+IvjpGTDfApzWjMelqWzZG+nlgpQJBI=)
4: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: 70+d1rfTRJf8w5VTyIQFaQNkyp+GkFzzhaOu6clyNSg=)
5: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
6: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: uQMa0Zw9eRpMdwrco7LAgAmTH9PaQbmYxKvMpopPRSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6437 (0x1925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Mar 12 16:24:02 2026 GMT
Not After : Mar 19 16:24:02 2026 GMT
Subject: CN=69b2e8a3-0f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:6c:6d:a2:14:ce:49:ce:5c:03:d9:1b:4d:
db:c2:87:88:f7:45:c3:16:f3:13:8b:d4:ca:12:17:
7d:ab:11:5e:c6:6e:9b:c2:16:8e:72:c6:0d:70:46:
5e:58:ab:ce:3d:51:74:39:c4:c1:b0:e0:2c:04:1a:
d6:9c:5a:bb:19:71:c7:be:cf:b2:33:e0:d1:c7:ac:
23:05:bb:28:34:6f:8e:5b:19:5d:43:c3:b5:f4:9a:
25:78:42:60:de:a5:af:28:11:5d:f5:df:9d:2b:49:
1c:54:17:45:24:86:f9:1d:85:99:7d:03:da:a5:32:
2d:b1:ce:6f:8e:75:c9:06:c3:57:58:c5:c2:2a:e4:
1a:54:60:31:5b:1f:2c:1d:c3:ed:df:cc:f7:0c:ba:
fe:d3:28:36:1e:ed:c6:ec:5b:2c:eb:bf:4c:58:1d:
30:c1:f8:f6:90:30:e0:e9:20:e5:08:1b:52:44:c7:
a9:26:c8:cc:32:38:67:01:0d:17:f7:17:cf:ef:ef:
ee:af:0e:cb:21:36:42:83:a6:36:56:74:e8:17:71:
76:76:e9:19:0c:b1:c5:7b:3d:bd:be:a1:c8:6a:82:
61:d6:6b:3b:6e:fc:58:18:dc:2c:4a:19:65:9c:75:
09:c3:e9:89:0d:45:0f:ba:94:18:31:03:26:da:d8:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:8B:F4:1C:FE:20:01:F1:FC:60:4C:F9:71:50:4A:9A:F9:6E:93
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:99:9b:45:40:7d:67:ec:3c:4c:7e:1d:f3:07:3b:e6:14:
50:f4:1d:b2:85:be:7f:70:d0:01:b6:73:e8:50:e1:a7:c9:53:
43:42:2b:21:9d:e9:9c:6c:55:58:a4:11:a7:78:64:48:ce:05:
95:e4:0a:4b:ef:ee:37:4a:a9:5d:1f:13:65:62:02:1f:2e:87:
c4:c2:6d:d0:16:b5:07:df:f8:6f:29:98:c8:37:37:6a:c4:bc:
fc:49:8d:b8:ec:93:a3:e8:1a:f6:a7:ae:94:b0:f3:1d:9b:a1:
d7:81:d5:51:6d:d6:bd:91:7f:ae:a8:4a:fd:92:2f:a3:d5:49:
ae:1d:74:83:f2:f7:04:c2:de:fe:23:b9:1f:27:04:c6:a6:67:
0c:51:1e:4f:ae:a8:d6:75:75:62:db:82:c2:7b:25:44:d7:3b:
38:ef:ea:1a:e4:20:de:8d:78:bf:08:63:0b:40:27:11:23:c7:
b2:b1:52:d0:a8:49:ba:15:ad:51:bd:32:f9:68:c4:c3:05:78:
ae:96:35:76:bb:4c:63:16:38:8d:ae:a4:60:b2:c7:64:a6:d7:
97:07:a9:bd:af:4b:9f:cb:a9:a0:64:22:9b:1d:e0:1c:0e:d2:
f5:2c:68:41:02:91:1a:90:f6:d9:ce:63:cc:29:f3:df:6e:75:
e1:06:53:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjYwMzEyMTYyNDAyWhcNMjYwMzE5MTYyNDAyWjAYMRYwFAYD
VQQDEw02OWIyZThhMy0wZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lNsbaIUzknOXAPZG03bwoeI90XDFvMTi9TKEhd9qxFexm6bwhaOcsYNcEZe
WKvOPVF0OcTBsOAsBBrWnFq7GXHHvs+yM+DRx6wjBbsoNG+OWxldQ8O19JoleEJg
3qWvKBFd9d+dK0kcVBdFJIb5HYWZfQPapTItsc5vjnXJBsNXWMXCKuQaVGAxWx8s
HcPt38z3DLr+0yg2Hu3G7Fss679MWB0wwfj2kDDg6SDlCBtSRMepJsjMMjhnAQ0X
9xfP7+/urw7LITZCg6Y2VnToF3F2dukZDLHFez29vqHIaoJh1ms7bvxYGNwsShll
nHUJw+mJDUUPupQYMQMm2thglwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAU1i/Qc
/iAB8fxgTPlxUEqa+W6TMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUI0OS8wNzgwQjk5MEM5RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNf
dllNYXZRSmdPMS13LTVSYjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc42Zm0VAfWfsPEx+HfMHO+YUUPQdsoW+f3DQAbZz6FDhp8lTQ0IrIZ3pnGxV
WKQRp3hkSM4FleQKS+/uN0qpXR8TZWICHy6HxMJt0Ba1B9/4bymYyDc3asS8/EmN
uOyTo+ga9qeulLDzHZuh14HVUW3WvZF/rqhK/ZIvo9VJrh10g/L3BMLe/iO5HycE
xqZnDFEeT66o1nV1YtuCwnslRNc7OO/qGuQg3o14vwhjC0AnESPHsrFS0KhJuhWt
Ub0y+WjEwwV4rpY1drtMYxY4ja6kYLLHZKbXlwepva9Ln8upoGQimx3gHA7S9Sxo
QQKRGpD22c5jzCnz32514QZT6g==
-----END CERTIFICATE-----
Generated at Sat Mar 14 02:23:35 2026 by rpki-client