
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: zGny/yazmOd8qusJ4lQKSKYsza1rPF43snOT6B01nAc=
Subject key identifier: 3B:84:6F:1B:63:94:D6:63:62:B1:1D:7E:E1:FD:6B:5F:24:74:5D:25
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 19A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 190C
Signing time: Tue 22 Sep 2026 16:25:30 +0000
Manifest this update: Tue 22 Sep 2026 16:25:30 +0000
Manifest next update: Tue 29 Sep 2026 16:25:30 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: 9MUWlWdYizi1WS9msZhBlHZsSQ8Xj7NGgxLbjrg7dKM=)
2: 791BFABCA8F411F1BFE927BD7111F970.roa (hash: nmYpRuM2vsoInXP04gpMuX3xvwv6wOzSMunPM3Q6JJ8=)
3: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: Ki50lfOrvox/5RjuzW9V8XW8eAwJMbuX+pNTZrReUPE=)
4: F4172284A8FC11F1B11D96EB3311F970.roa (hash: xS/AUdU7s3/cOYOR6PaAdH4MjhHz0uuGiFonymaoImE=)
5: 2F268460A40311EFBD995535C4F9AE02.roa (hash: +XoYDgz3ejR6r+6v8J3OWR8DEicSb5qc500Lrj9x1Vc=)
6: 2F903356A40311EFBD995535C4F9AE02.roa (hash: g4JMPRy0kEc89B4ILuNbcB/nyYsd7Dgv1xSeLjixiqE=)
7: L-yMJWSGPiDauRfeA67r9-LFcKw.asa (hash: qaEfy5dF6enxBgOtX4PT20SsOAqPubGflqrr0ZHfG1I=)
8: QnkbmIgKoU5mpJQGIygufs_W5t8.asa (hash: BuRHbohILnNsWceIPv3O7mCNKMmErfU0geFyysoAjw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6564 (0x19a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Sep 22 16:25:30 2026 GMT
Not After : Sep 29 16:25:30 2026 GMT
Subject: CN=6ab2abfa-119b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:e0:b9:11:ca:20:86:3a:9f:0c:4f:af:84:
58:c1:1b:09:28:c5:58:63:a0:d2:5b:5d:0a:4d:0a:
04:fc:0a:39:ce:32:25:31:06:f3:da:4b:41:48:16:
3d:bf:de:03:f3:b1:e0:ab:e2:39:40:9c:4b:3f:94:
0f:7c:2d:75:e1:e2:f3:3e:0e:87:2a:3b:ae:18:a8:
86:e1:62:42:62:c9:8d:b5:3f:c3:e3:03:37:99:48:
3c:48:84:cb:29:28:bc:64:29:8c:5c:70:f9:d9:63:
fb:2e:0f:0b:f6:e4:0a:45:1a:26:7f:00:6d:2b:54:
6a:8e:4b:1b:81:8c:03:b3:5a:e4:b9:55:81:fc:0e:
37:fa:37:de:fd:60:58:e3:7f:47:6b:7d:56:0d:e8:
8d:1a:49:83:06:e9:fa:eb:47:3a:89:18:21:21:a7:
73:ce:d7:1f:54:33:2e:d3:3c:35:4d:fe:51:fe:f3:
a9:d2:d6:4d:ca:39:8b:01:75:43:dd:ce:52:02:1b:
b0:92:a4:c5:ca:b0:0b:55:0e:fe:9b:d8:41:30:41:
49:35:8f:f3:07:85:12:0a:b6:07:71:51:4b:ee:72:
40:66:dc:5a:e9:fd:df:c4:6d:16:46:4a:65:84:fa:
f1:3f:c4:63:60:45:41:2d:da:45:8c:e4:fe:c9:24:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:6F:1B:63:94:D6:63:62:B1:1D:7E:E1:FD:6B:5F:24:74:5D:25
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:c5:33:ec:37:ab:a6:c7:8a:3d:a1:ee:52:d0:20:17:78:
e4:61:11:d8:bc:47:5e:b2:f7:1d:c9:d2:87:ad:78:f4:d7:35:
a9:5f:64:a9:95:79:76:f1:77:2e:8e:58:74:de:e7:74:77:03:
9d:a0:d2:0a:4e:04:a6:06:d9:b7:c3:8d:d8:44:61:8e:99:d2:
a3:c0:b1:6e:35:82:c9:83:74:9e:ba:8e:63:c6:52:e5:34:4a:
fc:05:51:1a:d8:3e:10:fb:5b:83:9b:54:ed:77:e2:86:0e:3d:
77:96:1a:e6:8c:f9:b9:27:ac:fc:58:34:a5:6f:93:3e:51:8c:
5e:09:e6:0b:97:fc:f9:28:d6:b9:a2:45:d0:3d:6c:d7:d3:8e:
ec:4c:a9:b6:7a:66:d0:9a:47:1a:8d:2e:da:42:6d:2c:ce:70:
7a:d4:5e:3c:1e:0f:24:2b:bc:78:4f:e0:ff:71:05:6f:6f:a4:
d7:fc:48:2d:12:33:e2:ea:1f:5f:f7:d0:2f:72:50:e7:89:51:
b4:de:6f:f4:b4:fa:48:cb:90:c8:0d:df:26:0d:a6:4a:1d:cd:
47:50:6f:9a:40:00:03:f2:e8:fb:92:ef:b8:25:51:b0:f0:ea:
73:64:30:27:53:9c:db:58:28:99:91:87:01:35:2b:f3:d2:7c:
88:d4:1b:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjYwOTIyMTYyNTMwWhcNMjYwOTI5MTYyNTMwWjAYMRYwFAYD
VQQDEw02YWIyYWJmYS0xMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzI/guRHKIIY6nwxPr4RYwRsJKMVYY6DSW10KTQoE/Ao5zjIlMQbz2ktBSBY9
v94D87Hgq+I5QJxLP5QPfC114eLzPg6HKjuuGKiG4WJCYsmNtT/D4wM3mUg8SITL
KSi8ZCmMXHD52WP7Lg8L9uQKRRomfwBtK1RqjksbgYwDs1rkuVWB/A43+jfe/WBY
439Ha31WDeiNGkmDBun660c6iRghIadzztcfVDMu0zw1Tf5R/vOp0tZNyjmLAXVD
3c5SAhuwkqTFyrALVQ7+m9hBMEFJNY/zB4USCrYHcVFL7nJAZtxa6f3fxG0WRkpl
hPrxP8RjYEVBLdpFjOT+ySRCaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuEbxtj
lNZjYrEdfuH9a18kdF0lMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUI0OS8wNzgwQjk5MEM5RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNf
dllNYXZRSmdPMS13LTVSYjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe+vFM+w3q6bHij2h7lLQIBd45GER2LxHXrL3HcnSh6149Nc1qV9kqZV5dvF3
Lo5YdN7ndHcDnaDSCk4EpgbZt8ON2ERhjpnSo8CxbjWCyYN0nrqOY8ZS5TRK/AVR
Gtg+EPtbg5tU7Xfihg49d5Ya5oz5uSes/Fg0pW+TPlGMXgnmC5f8+SjWuaJF0D1s
19OO7Eyptnpm0JpHGo0u2kJtLM5wetRePB4PJCu8eE/g/3EFb2+k1/xILRIz4uof
X/fQL3JQ54lRtN5v9LT6SMuQyA3fJg2mSh3NR1BvmkAAA/Lo+5LvuCVRsPDqc2Qw
J1Oc21gomZGHATUr89J8iNQb6g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:13 2026 by rpki-client