
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File: RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier: IeeaVR5lGpF/6EG5U1rlTVoMLsHOpqg8IruQa4/Ihac=
Subject key identifier: 73:8C:CC:E1:DE:DA:69:7E:67:F9:5E:38:BF:62:6E:80:D8:A8:00:0D
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer: /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number: 24
Signing time: Tue 21 Apr 2026 08:37:35 +0000
Manifest this update: Tue 21 Apr 2026 08:37:34 +0000
Manifest next update: Tue 28 Apr 2026 08:37:34 +0000
Files and hashes: 1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: eC1dJL+/6r3Rgx+J9BsMcdce4JD8D+xBaZZcTQpyGE4=)
2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Validity
Not Before: Apr 21 08:37:34 2026 GMT
Not After : Apr 28 08:37:34 2026 GMT
Subject: CN=69e7374f-03e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:15:a1:f8:23:e2:2e:d3:ca:54:2d:b5:da:
57:74:1a:59:41:9d:d6:1e:db:b1:b4:fe:cc:c9:b5:
3d:6b:e4:68:f5:0e:b2:82:a6:6b:9f:2e:97:44:6e:
65:84:7c:bb:a3:16:08:eb:65:54:9b:29:90:62:94:
c3:b0:e2:c1:dc:3e:75:bb:a8:18:aa:a9:58:33:f6:
81:c7:aa:6d:bf:49:c3:26:be:9d:32:5d:09:d7:f7:
87:2f:df:c2:26:7a:98:41:b9:33:20:e6:2c:d7:59:
03:4d:db:f3:ef:43:c6:04:fb:30:de:58:da:18:f0:
57:47:82:5f:44:c5:9c:90:82:41:77:ac:f5:06:e9:
9b:01:ef:b8:ac:66:d8:71:32:c0:e6:17:03:73:c1:
d2:6f:4c:e2:f1:37:d9:73:e3:fe:22:20:2c:9f:35:
72:24:40:4b:68:22:13:f0:7d:73:61:42:bb:ed:f1:
9b:08:8f:06:75:a3:cc:d7:81:11:8e:55:b1:6e:f2:
98:92:10:3b:03:a7:78:5d:88:22:65:f3:99:16:ae:
94:e0:85:8f:9e:15:59:d4:40:25:fb:a4:ea:21:20:
b4:fd:38:88:11:94:be:97:4a:b6:cc:db:d8:5e:51:
a3:6f:c2:1b:83:b1:d9:82:98:9e:82:ec:5b:f5:fa:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:CC:E1:DE:DA:69:7E:67:F9:5E:38:BF:62:6E:80:D8:A8:00:0D
X509v3 Authority Key Identifier:
keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:bb:29:da:24:d1:59:91:dc:46:a9:7c:a4:12:c8:17:82:81:
38:c0:be:fd:f1:df:d6:72:5c:60:93:11:06:63:46:89:4e:5a:
11:a7:6f:b4:d1:82:85:36:fe:78:8a:d8:f4:84:d8:64:32:a6:
36:80:96:53:d5:fe:dc:3c:0b:18:12:c2:2d:b2:74:75:c2:c0:
4a:c6:6f:54:d8:c0:2c:58:61:46:5b:f9:86:c2:80:8c:0e:f1:
ae:f4:58:01:20:d8:db:c9:68:2f:03:6c:1e:d5:d3:40:b5:ad:
c7:6b:67:44:cf:3c:1b:d3:ae:71:7f:55:b9:6e:92:9c:ff:de:
d2:bf:43:07:ee:63:89:cc:92:1b:05:ca:b2:65:99:ae:69:41:
c9:24:9d:e3:cd:32:4d:cc:c0:70:0a:99:36:96:d0:5b:a9:6e:
18:04:35:fc:84:a6:3c:9b:28:f1:cb:d6:f0:08:67:9a:72:57:
23:13:4f:60:86:58:62:d3:a1:c5:bd:91:d8:c2:00:70:62:e3:
5d:11:c8:fc:56:59:5e:79:63:c6:5a:69:3d:56:3e:37:1c:6c:
47:36:8d:ac:a5:32:83:76:18:13:b6:62:70:a0:df:50:c0:d0:
26:42:0b:37:0d:2e:d8:11:88:2f:a4:98:f7:68:c1:41:bc:ac:
3f:ee:36:73
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NkJCQTExMC8GA1UEBRMoNDZFQkUyNEM1NTkxNEQzMjJGOTk5MjMyOEY4QUExRjkw
QjNEQ0E1OTAeFw0yNjA0MjEwODM3MzRaFw0yNjA0MjgwODM3MzRaMBgxFjAUBgNV
BAMTDTY5ZTczNzRmLTAzZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvGhWh+CPiLtPKVC212ld0GllBndYe27G0/szJtT1r5Gj1DrKCpmufLpdEbmWE
fLujFgjrZVSbKZBilMOw4sHcPnW7qBiqqVgz9oHHqm2/ScMmvp0yXQnX94cv38Im
ephBuTMg5izXWQNN2/PvQ8YE+zDeWNoY8FdHgl9ExZyQgkF3rPUG6ZsB77isZthx
MsDmFwNzwdJvTOLxN9lz4/4iICyfNXIkQEtoIhPwfXNhQrvt8ZsIjwZ1o8zXgRGO
VbFu8piSEDsDp3hdiCJl85kWrpTghY+eFVnUQCX7pOohILT9OIgRlL6XSrbM29he
UaNvwhuDsdmCmJ6C7Fv1+s5DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc4zM4d7a
aX5n+V44v2JugNioAA0wHwYDVR0jBBgwFoAURuviTFWRTTIvmZIyj4qh+Qs9ylkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0JERjM4QUM0MEQy
MjExRjFCOUI3MUU1OTA4M0Q4QzY3L1J1dmlURldSVFRJdm1aSXlqNHFoLVFzOXls
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvUnV2aVRGV1JUVEl2bVpJeWo0cWgtUXM5eWxrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2
QkJBL0JERjM4QUM0MEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L1J1dmlURldSVFRJ
dm1aSXlqNHFoLVFzOXlsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB1uynaJNFZkdxGqXykEsgXgoE4wL798d/WclxgkxEGY0aJTloRp2+00YKFNv54
itj0hNhkMqY2gJZT1f7cPAsYEsItsnR1wsBKxm9U2MAsWGFGW/mGwoCMDvGu9FgB
INjbyWgvA2we1dNAta3Ha2dEzzwb065xf1W5bpKc/97Sv0MH7mOJzJIbBcqyZZmu
aUHJJJ3jzTJNzMBwCpk2ltBbqW4YBDX8hKY8myjxy9bwCGeaclcjE09ghlhi06HF
vZHYwgBwYuNdEcj8VlleeWPGWmk9Vj43HGxHNo2spTKDdhgTtmJwoN9QwNAmQgs3
DS7YEYgvpJj3aMFBvKw/7jZz
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:23 2026 by rpki-client