
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File: RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier: wnS0lBU9LFb7HW0Sonj6lqa78bxoUUsZrdqr4S4AZcc=
Subject key identifier: 34:3D:F4:99:0C:B4:76:86:4F:60:05:FF:D1:26:B6:92:47:CC:CE:FF
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer: /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number: 51
Signing time: Tue 21 Jul 2026 10:08:43 +0000
Manifest this update: Tue 21 Jul 2026 10:08:42 +0000
Manifest next update: Tue 28 Jul 2026 10:08:42 +0000
Files and hashes: 1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: 1Gkb63cuWwAN98trxALTzSSMPGfnjgKBege+mkTtciE=)
2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Validity
Not Before: Jul 21 10:08:42 2026 GMT
Not After : Jul 28 10:08:42 2026 GMT
Subject: CN=6a5f452a-f6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:09:4c:6d:33:40:f0:3c:8a:35:45:b6:60:
da:54:64:29:39:b2:5c:9e:68:04:7b:dd:94:6f:30:
47:0e:0f:70:d3:05:37:72:83:53:5b:9f:1f:a0:58:
e7:52:be:ec:09:ef:07:e2:72:97:40:00:ab:54:86:
aa:34:6f:14:bb:04:8c:6b:51:75:10:6d:f2:51:c4:
6d:c5:d0:89:2d:29:22:6e:06:fa:fc:59:26:60:32:
48:d0:6c:11:5d:20:2d:56:dd:1b:5a:9b:d1:c9:35:
08:b9:e9:08:65:29:05:1e:2b:97:38:2b:f1:2b:81:
38:fa:71:e8:42:6e:eb:19:42:05:93:fc:45:68:ec:
02:5b:a6:6a:5d:13:b7:50:3c:79:b9:41:55:56:d7:
e3:67:e9:fd:63:01:f5:b9:d7:65:d3:4f:b6:92:2c:
1d:35:a8:85:b5:b8:d3:6d:66:fb:84:9a:da:a4:7b:
4e:38:a3:19:21:dc:7b:dd:a2:2b:5f:a5:22:db:3c:
c9:2d:05:3d:9f:c6:e9:2e:59:b3:2b:65:40:ae:66:
ab:c7:9e:74:02:a9:31:77:29:cf:40:c4:94:0e:93:
2f:38:8a:6e:07:c5:75:01:cb:42:5c:08:1a:13:96:
04:76:50:1c:6c:16:71:ea:a5:16:ac:69:dd:9d:cb:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:F4:99:0C:B4:76:86:4F:60:05:FF:D1:26:B6:92:47:CC:CE:FF
X509v3 Authority Key Identifier:
keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7c:81:bc:b5:9d:6d:10:5d:91:09:91:e4:93:09:e8:55:e0:
a9:a8:11:63:b2:55:8b:62:9b:f5:83:9b:db:74:83:27:6b:f9:
22:9e:5f:cb:63:0f:e5:b3:5c:ea:09:cf:82:57:e2:99:42:e7:
fa:a2:ba:d0:b2:2b:d0:78:7d:96:f0:a1:5a:aa:65:53:4d:46:
99:6c:74:8d:1f:0a:01:68:69:62:dd:11:c6:2d:2b:0f:b9:b0:
57:a8:11:cb:7a:06:5e:ee:5d:9e:e8:3c:ef:6e:d3:40:63:f3:
df:67:bf:ca:ff:fb:92:f6:89:a4:2d:15:95:4b:1a:91:e7:3c:
3f:13:5d:ca:26:39:a5:99:38:b5:24:6f:3b:4e:5c:2c:a9:10:
d0:11:a6:67:54:f5:f3:a9:e6:d2:ed:7d:9d:3d:17:32:66:5c:
70:75:d9:ae:60:7b:1c:90:be:07:65:1a:a7:65:b6:7f:76:c9:
cc:e8:07:d9:31:5d:89:a9:aa:f2:08:32:ff:6a:32:bb:5f:c1:
97:b9:1c:e6:3e:da:5d:d1:c9:0d:0d:30:6e:8c:c5:08:c2:8f:
f4:eb:1a:bb:87:65:97:0d:fe:32:ee:cd:a8:67:94:d0:f4:48:
ee:f9:e5:2d:e7:23:27:79:05:7e:2e:59:d0:b0:9b:c8:fb:d3:
c2:0b:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:36 2026 by rpki-client