
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File: RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier: ft3NBmJdHbGHuwegaJf/4wUkiw0Pddk4Pm3Ytn3g3hc=
Subject key identifier: FD:B9:F7:F6:EB:10:8D:96:C3:58:D0:C3:F2:EC:FA:1D:86:A7:01:FD
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer: /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number: 16
Signing time: Wed 25 Mar 2026 08:12:03 +0000
Manifest this update: Wed 25 Mar 2026 08:12:03 +0000
Manifest next update: Wed 01 Apr 2026 08:12:03 +0000
Files and hashes: 1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: SdbjuZ9t3AyEzDn5vlvd/PYeH7mEpy7j1VEGqF84xdY=)
2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Validity
Not Before: Mar 25 08:12:03 2026 GMT
Not After : Apr 1 08:12:03 2026 GMT
Subject: CN=69c398d3-691d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:dd:9b:a7:d9:e3:e5:0c:0f:d0:fe:46:92:
7a:aa:b5:ad:61:19:96:0c:d7:6a:62:68:83:15:6e:
d8:ba:3a:f6:fb:ce:86:93:7a:02:cf:60:4a:9d:fe:
15:b1:c4:97:39:e5:d6:d6:f6:40:bf:94:27:e6:05:
d7:ab:52:06:a7:ff:ee:1d:27:58:e2:f0:2b:dc:02:
5d:4a:f1:a8:f3:d6:0a:7e:02:2a:42:7e:2d:e4:45:
5c:1f:42:80:3a:81:81:0f:bb:81:b9:a0:8b:be:83:
76:a3:d0:06:1a:ce:50:b3:eb:67:04:c8:07:fd:85:
a7:80:29:17:f9:88:6f:e4:57:5a:30:5e:73:cd:bd:
bd:7f:a8:8b:b8:83:b0:04:da:14:57:06:f5:e0:94:
15:d6:61:59:3e:9a:6f:b2:6b:d3:63:04:16:96:0f:
0c:71:06:77:67:65:19:89:ce:f3:e8:6e:da:40:c1:
ae:3e:c1:a9:56:75:e1:af:27:fe:75:63:8c:ee:cc:
54:d6:c5:50:66:7b:6f:dd:e3:c2:f4:01:df:35:d7:
99:e0:e0:64:bf:06:2e:8a:0b:62:fd:2c:0b:b7:ee:
18:40:77:3f:9e:1f:0a:75:d0:dc:4c:6f:df:60:49:
ef:7e:e2:f4:ed:56:18:7d:da:0e:e6:be:bb:42:50:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:F7:F6:EB:10:8D:96:C3:58:D0:C3:F2:EC:FA:1D:86:A7:01:FD
X509v3 Authority Key Identifier:
keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:77:7f:a3:ee:30:d1:28:c9:4b:a8:e3:30:6b:b8:8b:4c:e6:
23:1f:df:07:2a:aa:41:d1:35:b2:04:be:a5:e1:42:95:12:e5:
69:11:a6:f0:a2:09:94:56:24:88:e5:99:ea:33:46:30:5b:32:
8a:a2:ed:e0:02:f1:1f:91:38:ee:4e:8b:c4:e5:20:41:95:9c:
7b:d1:e7:61:ad:16:f2:7f:fc:b1:3a:48:87:56:03:19:60:d5:
44:e3:e7:d3:0b:0b:6b:7c:a3:5b:30:0a:80:b1:3a:03:1c:f3:
6c:c6:0a:ae:a1:51:8f:94:c6:1a:8e:93:be:b2:f2:a3:a3:ba:
92:14:8b:52:e6:f2:53:15:0a:f0:fd:e5:06:c4:af:cd:a9:fb:
70:46:41:4b:35:56:08:de:82:6f:f6:9c:9e:36:f6:cc:61:89:
40:d9:f6:c7:0f:e3:fa:02:ee:eb:54:45:cf:eb:c1:96:1d:11:
ab:7e:81:d1:03:13:cb:d4:39:e0:b8:62:a2:ef:4c:c9:46:17:
91:c7:17:98:bc:b4:01:a7:f6:7c:c0:3c:8b:39:b0:60:0d:e6:
e8:a5:39:6f:b8:1a:cf:50:34:2a:a2:25:f4:1b:58:e6:eb:f1:
9c:aa:40:e3:c4:2d:8e:c9:67:9a:49:f6:40:0c:48:6d:e2:cb:
93:fc:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:10 2026 by rpki-client