
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json)
Hash identifier: Eq5NHTwVyK70BBpQHZ4BtETJBlGSfV0uidvWGSGOpK0=
Subject key identifier: E8:F0:F0:0E:CC:A2:AA:FC:A4:EA:94:8F:EF:58:C8:3F:AC:A0:54:F2
Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Certificate serial: 0D42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
Manifest number: 0D31
Signing time: Fri 02 Oct 2026 18:29:44 +0000
Manifest this update: Fri 02 Oct 2026 18:29:44 +0000
Manifest next update: Fri 09 Oct 2026 18:29:44 +0000
Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: NvRm0PoByFwZs3aQdfZFXGhETxVYS7HEFq4XMm2yyVM=)
2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: yBowxfuCjhrMqbpO4ruB7+0RN+biV4Rph+HZV83yUAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE
Validity
Not Before: Oct 2 18:29:44 2026 GMT
Not After : Oct 9 18:29:44 2026 GMT
Subject: CN=6abff818-d16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:e3:f1:25:15:76:86:0b:83:74:42:5a:08:
46:8b:43:92:a0:4d:45:71:ad:09:97:4d:25:f1:73:
57:98:45:e4:ea:3b:ba:39:49:a1:80:dc:ba:f0:71:
8a:3e:0d:32:f3:38:8c:db:38:f0:9c:52:ff:c4:69:
a3:31:4f:a1:fb:18:9d:20:1e:60:31:35:7a:b9:11:
77:72:86:10:77:cf:86:da:91:ab:79:06:c0:98:90:
4e:b9:de:25:f8:0b:81:e1:28:f9:0f:9d:92:e6:ff:
94:cd:b9:d1:ae:99:35:7c:fd:71:b1:d1:fc:c0:b4:
7b:a7:ae:93:ea:1d:53:c6:8b:d5:32:4c:f3:7b:a6:
dd:36:94:fe:ba:7d:31:8c:fb:b3:bd:e2:72:e7:30:
50:ae:e7:45:bc:ca:a6:0f:f7:89:e6:98:40:fd:38:
0f:47:fe:e2:cb:97:df:7f:f2:63:0c:31:51:a8:e0:
9a:24:ac:02:be:ab:e8:6a:68:2c:2e:1a:b5:fa:4d:
21:11:a6:01:f0:fd:ed:b9:b2:67:a2:9e:13:83:7b:
ca:f9:14:e6:ce:ad:87:04:be:92:90:1d:1a:9c:dc:
d5:64:10:9c:87:43:13:a8:d4:c8:b1:05:1e:32:7c:
2e:01:95:00:81:39:09:9a:b8:fc:90:b5:5f:99:a8:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:F0:0E:CC:A2:AA:FC:A4:EA:94:8F:EF:58:C8:3F:AC:A0:54:F2
X509v3 Authority Key Identifier:
keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:69:6b:52:47:ff:c4:b2:24:0b:72:45:c8:67:b1:31:2d:af:
f2:df:25:46:02:2a:a6:cb:e0:82:35:14:7a:d2:e3:03:82:4a:
ce:84:d9:9f:96:83:40:57:65:f3:cf:bb:42:b3:76:b4:e7:ca:
0a:38:f0:be:6e:4c:4a:4c:d3:9d:76:d1:20:1f:4b:c1:62:77:
c4:54:b6:66:3e:98:fe:a8:19:54:36:7e:40:5e:56:2a:33:f4:
f3:e4:bf:5b:4c:0b:27:25:5b:48:60:2c:00:1f:8b:32:71:a0:
66:4f:6b:b2:cb:8d:64:b1:75:3d:5f:50:12:25:7e:10:ec:89:
a0:7c:ea:af:3a:4f:5a:a2:47:31:98:28:da:0a:7f:2e:68:8a:
eb:88:76:25:4d:52:c7:e7:a7:e4:98:0a:c1:d0:f2:11:fb:05:
51:58:15:c2:51:3c:73:28:b5:b1:c3:19:cc:2a:39:f2:ec:09:
75:69:64:cd:0a:74:de:94:12:8a:1b:8c:a4:2d:1b:81:79:a4:
fb:3a:28:60:b1:d4:89:6f:17:6e:00:2b:d4:e7:ce:e3:a6:f6:
29:b9:5e:04:c8:d1:27:5d:8c:82:24:81:95:c4:d0:c5:ee:c0:
50:56:07:9e:6f:18:0e:9b:e2:b2:40:7f:f8:8f:73:4b:7c:49:
f9:ef:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:16:01 2026 by rpki-client