
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier: m7Eg5hv8G7G3fYY78RA+3znwwaB5O/O1GPDBDA70Lf4=
Subject key identifier: 7F:81:BC:C9:26:2A:76:CA:AD:1D:C6:F3:60:C8:C1:1C:DA:2D:F6:FD
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 13B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number: 1386
Signing time: Wed 22 Jul 2026 17:05:27 +0000
Manifest this update: Wed 22 Jul 2026 17:05:26 +0000
Manifest next update: Wed 29 Jul 2026 17:05:26 +0000
Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: x2+b4U+Ry0WxQIyifWpTkOUQktPAzA9L37+o7Tqgzqc=)
2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: azHcEZz2GBJVjDyR8Vdr2A5zsoqu99TMJIuTeQ/WvfY=)
3: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: VSOMGpR0/e2J9EQLKTIhVqJ/wQMqC0LOmUgq8KK0Szk=)
4: 403398AA233111EEAF768F66C4F9AE02.roa (hash: Y52+tRvMTfL460RUNVYk3L8TtXM2/GdPu6P2ErCDVWQ=)
5: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: XY8B3tTzPyJBZMYoI9Ehi8tJlU71I3ce0cvFxvp+s6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5040 (0x13b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: Jul 22 17:05:26 2026 GMT
Not After : Jul 29 17:05:26 2026 GMT
Subject: CN=6a60f857-9ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:69:0e:c1:de:bb:d0:1f:43:29:17:f0:16:
8b:fe:e9:80:47:ed:3f:bf:2c:53:00:e4:04:db:b8:
f8:db:3c:c6:75:cb:11:02:b4:a4:75:8d:a8:38:b0:
09:da:28:5f:46:f1:80:19:e1:80:c5:31:0b:9b:8e:
fd:c0:5a:53:f6:7e:b6:89:c5:5f:c6:8c:18:f9:2c:
f9:23:bf:80:52:bb:41:3d:d6:a8:2a:44:01:95:47:
b9:6a:3d:0c:89:5e:28:6f:e2:c6:96:9b:46:1b:fc:
9e:e2:b8:02:d8:72:c8:4a:b5:7d:ce:6e:6c:2a:a3:
8c:c7:4b:44:aa:9e:33:e8:0e:f6:68:fe:91:3e:40:
d3:80:e5:36:b3:e1:77:4b:fc:9e:f9:d3:60:31:c3:
c7:46:2d:39:13:f5:90:0a:c5:0d:ad:b2:cc:22:ab:
49:aa:b8:df:a0:10:81:6a:65:2c:a4:02:9a:0e:c2:
3f:3a:48:16:01:11:88:a2:b0:db:48:8a:a1:38:eb:
50:a2:51:af:85:eb:52:2e:8b:11:43:8e:46:0a:b0:
b5:5c:39:4e:8e:0c:78:6a:36:6f:b3:1f:fa:1d:8e:
b7:14:9c:4b:56:11:d7:47:0e:16:c1:8e:90:d9:9f:
7d:a0:2f:67:91:fb:89:1e:98:1e:08:ae:51:6d:7e:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:BC:C9:26:2A:76:CA:AD:1D:C6:F3:60:C8:C1:1C:DA:2D:F6:FD
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:72:89:b6:b2:31:09:9e:f5:38:a2:e5:1b:aa:26:4e:14:
cb:30:33:58:2f:d4:a9:e3:20:9e:6f:11:6b:68:a7:f9:b6:5e:
34:0b:e1:6e:65:7b:84:04:10:87:27:5b:d7:b9:e7:39:6c:4c:
59:95:61:21:1b:73:cd:2e:f8:55:ba:4e:af:2b:3a:c0:eb:03:
0a:4b:e2:b3:8e:ca:cf:74:52:d8:7b:7f:69:50:67:da:67:39:
0b:c9:72:89:99:a2:8d:29:db:6b:9c:dc:46:f6:27:99:e4:c4:
7c:0c:3f:33:c6:dc:28:83:c8:98:4b:74:a2:3b:5e:38:92:b6:
d4:8e:03:f3:bd:4f:31:3a:85:bf:a0:dd:23:aa:94:37:4c:c6:
70:52:42:75:96:4c:38:f4:b7:7e:39:98:c3:d3:2d:bb:8d:5d:
e7:7b:4e:c4:e4:6a:49:6d:2c:45:53:a3:46:12:2a:51:90:4b:
71:f9:81:a0:54:e2:be:2c:da:ac:18:58:ed:6e:d8:49:33:37:
ec:4c:4c:55:ff:db:88:79:a9:da:05:05:91:81:ce:c7:b7:50:
a3:9d:cb:1d:69:e0:f3:dd:ca:14:3b:3e:e4:dd:8e:8b:08:67:
ba:8f:c5:80:21:bd:e2:3c:14:45:b3:28:ae:f4:ff:b3:29:c5:
64:c6:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:43 2026 by rpki-client