
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File: RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier: h2R61shwGC5+RBmNtt3XHpwFAi1xPqt/rsohNK+Iaos=
Subject key identifier: 23:71:BE:18:5F:C4:0F:32:AD:16:88:49:01:DE:91:11:9A:18:FD:DE
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer: /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number: 73
Signing time: Fri 25 Sep 2026 07:59:48 +0000
Manifest this update: Fri 25 Sep 2026 07:59:47 +0000
Manifest next update: Fri 02 Oct 2026 07:59:47 +0000
Files and hashes: 1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: gBB/ZumNOyyNJU8/YsslT7P5EJ6Gb+RwSsxFly9LnBA=)
2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Validity
Not Before: Sep 25 07:59:47 2026 GMT
Not After : Oct 2 07:59:47 2026 GMT
Subject: CN=6ab629f3-ee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:e6:74:5b:34:01:ae:3a:d4:8a:ca:90:fa:
d8:df:37:65:a4:29:cd:81:ad:24:46:10:06:65:07:
86:d1:74:d3:34:78:f6:a6:e3:a8:62:3b:f8:18:33:
2f:17:2f:8c:1c:82:41:70:22:b5:22:37:f5:c7:89:
ef:56:48:bd:04:86:8b:99:6e:3e:e0:47:39:f9:69:
05:f1:3e:6b:cd:01:92:30:39:81:1c:1c:3a:ec:e1:
8c:7f:66:7f:05:d6:82:86:b6:da:11:5d:ef:08:2c:
7e:b3:ff:fd:a7:46:be:c6:e2:db:4b:21:0e:83:94:
72:4c:73:bc:e6:0d:c6:10:1f:d0:0c:b1:e4:18:88:
0b:9e:a8:d2:8f:96:78:15:e1:e6:15:79:32:a8:1b:
3f:10:5b:98:ab:91:9d:dd:7a:58:e8:21:66:1c:47:
a9:96:a6:13:7f:a9:70:e0:32:ef:ea:9e:c4:af:99:
41:50:48:d5:b8:6f:bd:9a:ff:5e:da:e4:61:08:5b:
cd:33:d1:d1:00:dc:37:a6:e4:32:7b:40:0d:4c:5a:
be:54:f1:f1:72:00:f2:d5:49:d2:9a:24:06:6b:e6:
67:6c:bc:f9:5b:81:f9:11:80:38:a5:1e:52:6a:10:
49:28:b3:d9:5e:6e:34:a2:fb:b9:82:82:60:8c:c4:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:71:BE:18:5F:C4:0F:32:AD:16:88:49:01:DE:91:11:9A:18:FD:DE
X509v3 Authority Key Identifier:
keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e7:23:64:0d:aa:1c:a5:dd:40:65:ed:05:a1:cd:e1:c7:05:
b6:7a:22:4e:d0:23:58:54:fd:2f:a0:74:07:72:66:64:9a:5d:
7b:c3:26:11:ae:fc:02:84:fe:53:0d:53:a0:ed:4d:c3:f0:fa:
1e:9b:29:f7:1b:8c:99:7c:93:18:ff:b9:4e:ba:78:bc:4e:6f:
85:5a:87:d4:f7:7a:57:3c:a8:66:63:2e:bf:21:85:2a:80:98:
56:16:a4:01:63:b7:59:75:8d:c9:4d:e0:f1:fa:43:31:65:37:
a1:58:15:53:a9:d5:46:39:76:e3:6f:ea:be:d5:cb:47:37:5a:
24:31:3b:23:97:64:65:f4:e9:a8:c7:70:24:4a:bf:de:ec:ab:
d2:cc:71:3c:30:ac:a1:e9:0f:b3:28:43:7b:88:9a:2d:41:27:
9c:e9:bd:4b:a0:a7:14:f8:9c:cd:57:9b:48:fa:70:7d:8f:14:
fe:dd:50:88:b8:91:dc:bd:01:56:7e:ae:ab:02:b5:dc:9b:fb:
da:a7:fe:24:a4:7e:d8:d8:89:18:2a:54:52:90:a8:f6:c8:dd:
55:ab:e0:4d:ba:45:a2:36:ec:2f:6a:e1:2e:dc:be:5f:a6:90:
41:fe:b7:07:e6:db:12:f4:ee:4b:06:4f:9e:76:c4:3a:84:79:
77:2b:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:59:54 2026 by rpki-client