
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: oi3YYLpQMBS8hPnL1wVWLXk++Nlpzm2QfPmHuniepXk=
Subject key identifier: 87:AD:84:02:19:66:3E:B3:53:F6:C6:4C:98:88:0A:54:EB:D4:DC:14
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 19C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 192A
Signing time: Sat 14 Nov 2026 16:24:52 +0000
Manifest this update: Sat 14 Nov 2026 16:24:52 +0000
Manifest next update: Sat 21 Nov 2026 16:24:52 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: 8Vtz8hTechkEfH8WdUCGU6/SfnU60Qpj3Hld4XPOh8Y=)
2: 2F903356A40311EFBD995535C4F9AE02.roa (hash: g4JMPRy0kEc89B4ILuNbcB/nyYsd7Dgv1xSeLjixiqE=)
3: 2F268460A40311EFBD995535C4F9AE02.roa (hash: +XoYDgz3ejR6r+6v8J3OWR8DEicSb5qc500Lrj9x1Vc=)
4: A8E45442C7C611F180B4F3865111F970.roa (hash: HGib+78aA6MzU0aF/Tbc4+Jfp5dunSDdToHIRQtXJMs=)
5: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
6: L-yMJWSGPiDauRfeA67r9-LFcKw.asa (hash: qaEfy5dF6enxBgOtX4PT20SsOAqPubGflqrr0ZHfG1I=)
7: F72199D4C23111F1AADE648B5A11F970.roa (hash: AiEjjG8pw2r8DAOtvGL+9ko0yxwM+202DD+kZXh9KDo=)
8: QnkbmIgKoU5mpJQGIygufs_W5t8.asa (hash: BuRHbohILnNsWceIPv3O7mCNKMmErfU0geFyysoAjw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6597 (0x19c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Nov 14 16:24:52 2026 GMT
Not After : Nov 21 16:24:52 2026 GMT
Subject: CN=6af88b54-55af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:b5:ac:27:75:65:d4:52:e2:38:92:5a:94:
ee:a0:c5:f5:a7:5c:80:07:23:34:a4:87:3c:a9:51:
10:e5:27:f0:f4:71:c2:05:79:1d:bc:2b:52:f9:af:
a7:f7:5d:1f:27:cd:f3:c3:94:1d:73:06:6f:c0:d0:
ef:db:ef:d0:ba:32:1d:5e:74:bc:b8:71:71:1e:ba:
8f:c6:c9:41:f5:ef:9d:6a:3c:6f:a5:af:5d:ca:5d:
06:0e:4a:8a:4f:7f:3e:49:2c:9c:18:99:2d:48:65:
22:51:e5:7a:36:8e:f1:8d:e5:71:1b:49:30:b3:d1:
d3:ff:fa:ce:8a:30:82:04:2c:13:ee:72:99:62:74:
a2:52:8f:24:85:a7:f9:f1:f7:72:80:a2:7b:96:7e:
88:58:49:48:57:b6:44:32:5f:ad:47:ed:90:82:d5:
c3:8a:7c:e3:df:cc:6e:08:ac:45:d5:ef:bf:57:15:
f6:98:b2:fd:d5:1e:9e:77:90:f9:af:66:7a:47:4d:
aa:55:77:95:4c:4e:5c:b4:4b:94:2c:ad:a9:5e:cf:
7b:79:ae:69:8a:d3:28:a4:39:22:e2:a9:14:4a:f1:
7f:45:d0:b2:60:6c:12:8d:ee:36:be:35:61:cf:07:
6d:a8:71:6f:cb:f5:29:f9:29:21:20:cd:2f:50:d5:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:84:02:19:66:3E:B3:53:F6:C6:4C:98:88:0A:54:EB:D4:DC:14
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:fd:09:d7:87:d6:e7:2d:f4:e5:35:92:97:a5:07:6d:73:ef:
ec:f0:d0:6e:06:1e:15:d6:0b:f6:b4:94:57:9c:ef:be:2a:17:
d9:1a:ea:8b:cd:76:cb:0f:6c:23:04:d3:6a:94:d3:d0:8d:6f:
5f:7f:e6:71:61:02:70:b6:95:c6:29:4e:0d:31:89:46:a2:bb:
15:00:7c:12:cc:63:a2:a0:9d:3c:8e:0f:a2:87:fa:bc:f9:d8:
59:d6:56:cd:d2:47:d9:5d:2b:68:a6:8f:81:c7:e2:71:45:86:
ba:ef:37:9a:bd:37:59:89:91:ad:a9:40:e9:9d:dd:42:9f:db:
4e:9a:6d:d8:c5:89:39:13:9f:37:88:75:a0:8d:f8:a0:d1:27:
2c:d4:e3:18:90:39:b6:27:1a:37:f2:14:06:0c:54:2e:1b:7f:
7c:23:e9:1e:fd:84:03:c9:fc:10:ed:2d:c2:fe:4f:c3:9a:51:
62:d2:23:99:d7:0d:81:6f:57:07:74:95:a4:0b:1b:9c:e1:9a:
e7:96:63:f3:b4:b8:76:e3:3f:7d:35:8b:8c:70:49:cc:c8:e0:
80:bb:30:ce:95:15:0a:8e:dc:28:3f:ed:de:36:e2:08:72:34:
43:fa:41:40:c0:36:ca:fa:c4:f1:da:5f:00:fd:c9:cd:b5:b4:
9b:7d:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:53:15 2026 by rpki-client