
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: MQaYs8FTaCASYDRs4ytEYYCzo3H7wwHIwqfPsGRCeWI=
Subject key identifier: 1E:A5:8B:69:55:E3:2C:50:B8:D8:48:20:24:04:D0:12:5D:E7:5B:D0
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1944
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 18B9
Signing time: Tue 12 May 2026 16:31:08 +0000
Manifest this update: Tue 12 May 2026 16:31:08 +0000
Manifest next update: Tue 19 May 2026 16:31:08 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: yex3x8lpOTVIdBEiVRp7bOSEumUjej7gx7YLX8EBqII=)
2: 2F903356A40311EFBD995535C4F9AE02.roa (hash: vZDKKCDJKzzY+IvjpGTDfApzWjMelqWzZG+nlgpQJBI=)
3: 2F268460A40311EFBD995535C4F9AE02.roa (hash: L464pw+mYw7C/cRnG6o+mzU5wDcXRM+2+hFNemRcdQM=)
4: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
5: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: uQMa0Zw9eRpMdwrco7LAgAmTH9PaQbmYxKvMpopPRSg=)
6: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: 70+d1rfTRJf8w5VTyIQFaQNkyp+GkFzzhaOu6clyNSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6468 (0x1944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: May 12 16:31:08 2026 GMT
Not After : May 19 16:31:08 2026 GMT
Subject: CN=6a0355cc-8606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:4e:42:89:12:84:92:81:7b:18:e0:9b:c2:
78:d2:6f:62:9c:7a:33:de:1c:86:41:1b:00:81:22:
88:5b:75:61:83:15:bf:05:71:16:e3:30:03:2b:1c:
28:73:56:de:c2:8b:f8:11:27:b2:8c:ea:fc:9d:d8:
d6:ac:ef:9d:74:85:dd:a6:2a:c1:88:86:57:fa:96:
a6:ea:4c:ca:ac:67:8b:f9:1e:46:0f:5d:0f:04:22:
d4:51:9e:d9:9f:a8:a5:07:73:3d:33:a3:b7:a2:64:
ef:08:67:aa:49:5c:95:73:78:14:36:8e:02:2f:49:
66:43:29:49:67:b7:4e:c0:dc:95:80:ca:c4:29:f4:
7c:c6:d1:a7:9b:34:9c:92:b4:4a:6b:f8:fe:85:cb:
7e:96:44:da:bc:45:fd:36:6a:e7:1e:d6:e3:84:5b:
a1:4b:3f:c0:49:65:01:91:23:5e:f4:06:08:1e:a4:
17:f2:f7:f5:e5:a9:6a:25:2f:89:0a:c2:51:04:b9:
8b:5c:76:e4:bb:58:63:61:21:38:f8:bd:f2:b4:ca:
7b:15:ab:12:30:20:f0:48:f8:62:d8:41:95:b8:f9:
c4:ed:d1:a8:73:3f:5a:d6:62:33:4d:20:a0:eb:e2:
97:13:05:52:bf:a4:99:4f:bd:ff:e6:dd:ff:90:ad:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:8B:69:55:E3:2C:50:B8:D8:48:20:24:04:D0:12:5D:E7:5B:D0
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:26:77:f2:a4:15:a4:a5:14:d1:b4:b6:a7:a7:92:8e:3d:02:
01:eb:9a:a7:43:df:d4:4f:54:78:fe:a8:01:c5:d4:50:67:4c:
4c:52:22:e5:6f:f7:47:a7:cc:f0:67:2c:08:98:6d:1b:17:9b:
65:9f:91:0e:84:42:c0:fb:2c:21:e3:6c:d0:f8:aa:16:62:60:
5e:e5:78:40:a6:b8:eb:4b:f8:35:b3:72:fa:c2:62:d0:16:f2:
a6:d7:77:a3:ae:ef:ee:c6:2d:33:6b:a2:9c:6e:c5:23:ea:4a:
8b:6e:85:69:78:60:ef:54:6b:66:42:8d:80:e8:b2:d5:93:42:
92:83:8d:b2:df:96:62:07:df:a1:d0:84:5c:e4:19:04:2e:f5:
db:22:3b:70:ba:a1:bd:ba:29:d0:cd:a9:be:d1:4c:1c:e5:57:
06:02:d1:69:f4:e7:aa:47:69:29:3f:09:d6:9e:1c:bb:64:a8:
67:3e:8f:ee:b1:44:24:43:11:d5:48:17:e4:81:fa:fb:eb:36:
48:5a:24:ef:20:24:8c:97:3e:fe:56:bb:27:23:fc:e6:eb:6c:
38:0e:f4:ee:02:7d:cb:b8:51:df:48:2f:b6:d4:b0:8e:5f:83:
54:2c:31:4f:ac:bb:45:99:43:8a:62:2c:7a:93:98:7c:c7:f5:
63:97:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:51 2026 by rpki-client