
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json)
Hash identifier: 9k5haeA9gUlErKJXk6buCot1k8KbUKm2YYEEBOhaQR4=
Subject key identifier: 9B:C4:06:92:29:BD:84:26:EE:48:3E:D8:E0:5D:A4:B0:BB:22:0D:25
Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Certificate serial: 0D2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
Manifest number: 0D1A
Signing time: Tue 18 Aug 2026 18:33:38 +0000
Manifest this update: Tue 18 Aug 2026 18:33:37 +0000
Manifest next update: Tue 25 Aug 2026 18:33:37 +0000
Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: tATF6zUnZKLZIcUf+8pMe9i6vH7JTw14AO0TWotO79Q=)
2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: yBowxfuCjhrMqbpO4ruB7+0RN+biV4Rph+HZV83yUAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3371 (0xd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE
Validity
Not Before: Aug 18 18:33:37 2026 GMT
Not After : Aug 25 18:33:37 2026 GMT
Subject: CN=6a84a581-0853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:25:ff:b9:10:7b:53:61:17:6b:25:10:01:
ec:f8:a8:52:c9:aa:b5:1d:96:c0:de:51:98:33:d6:
3b:14:0e:79:b0:be:8e:bc:9a:88:6e:ba:86:e6:0a:
97:18:46:af:4d:90:44:2f:ed:89:13:52:d0:68:5a:
45:0e:ff:b6:05:64:b7:bc:c2:e9:41:48:2f:48:6f:
42:10:4e:c0:a4:57:49:9a:43:0d:eb:61:d2:b8:ff:
99:7c:94:c5:27:65:3d:6d:01:1a:34:1f:68:5d:5e:
af:b4:c3:66:6d:41:bd:08:1c:36:f1:80:5f:3f:9f:
77:87:e0:1e:f1:b2:c3:e1:6e:25:45:2c:d0:a8:e5:
fa:ae:a7:04:e7:e6:ea:5b:3b:ba:07:1c:27:a5:ad:
a4:29:53:5f:71:bf:28:33:66:ce:24:cb:3e:5e:26:
9d:56:b3:15:dd:5d:be:d3:d9:83:c6:8c:ac:98:72:
db:6a:ac:26:ba:0f:9f:68:1b:13:f5:c2:b4:33:b3:
38:a1:77:59:aa:15:f8:78:1e:9e:ce:0c:23:84:2f:
13:84:44:a2:30:a2:b7:41:24:03:88:a3:be:89:ce:
87:85:c7:85:f8:80:b6:f7:02:d3:86:5c:3f:b5:3b:
34:9f:f8:9c:c8:a8:a8:e9:3c:97:4a:fe:91:51:65:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:06:92:29:BD:84:26:EE:48:3E:D8:E0:5D:A4:B0:BB:22:0D:25
X509v3 Authority Key Identifier:
keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4a:85:c7:2a:bc:66:93:10:8d:16:ae:4c:b8:a8:79:13:3a:
13:14:a2:64:ff:98:1d:c8:e7:14:ea:b9:7a:2a:af:7a:b9:d3:
82:19:79:3e:13:e5:d0:65:e4:b2:e5:77:c2:a0:0a:08:47:49:
b1:98:af:e6:8c:d1:a8:55:15:64:50:45:ea:cc:b0:8e:74:2f:
52:3a:c9:14:5f:95:c1:af:c2:5e:2e:4b:ae:07:89:e8:83:f2:
d2:5d:48:c9:70:bb:c6:51:6a:fc:c4:85:d8:87:12:1f:97:d6:
bf:8e:3b:01:08:28:40:29:cb:de:b1:21:71:a5:a8:4b:f2:46:
92:d2:90:c8:d7:32:f2:8e:f2:f0:0c:14:29:25:80:5c:00:24:
7b:55:2f:15:8f:aa:a0:05:0a:e4:03:0d:e2:41:4f:fc:13:9a:
d4:42:c0:e8:60:9e:3b:59:07:99:0d:f3:ba:9c:f9:c1:a9:66:
07:06:27:ef:e0:e7:e1:c2:82:43:90:62:82:76:0e:b3:9e:6e:
e0:17:aa:c6:14:05:0c:e0:5d:e9:69:49:34:75:b5:2a:9d:58:
ed:0d:63:e3:5c:33:4b:4d:8b:a5:7a:a4:b6:7f:c7:eb:34:98:
f8:29:22:ce:a8:6f:d9:72:50:52:3d:24:5b:d5:cd:19:9a:da:
83:3e:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:51 2026 by rpki-client