
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier: KZ8vHsZP+CKRYhw5dd26AIluLuTNS+acd/8+9A40YiE=
Subject key identifier: 33:76:BC:F3:D6:DF:C5:93:AA:D1:8D:42:3F:32:2F:12:3E:01:8E:EC
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 138C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number: 1362
Signing time: Tue 12 May 2026 17:00:52 +0000
Manifest this update: Tue 12 May 2026 17:00:51 +0000
Manifest next update: Tue 19 May 2026 17:00:51 +0000
Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: 4V31+xn9i1csiT5+AxEjaCO8FXBTUIumO/zdv29R1QY=)
2: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: VSOMGpR0/e2J9EQLKTIhVqJ/wQMqC0LOmUgq8KK0Szk=)
3: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: azHcEZz2GBJVjDyR8Vdr2A5zsoqu99TMJIuTeQ/WvfY=)
4: 403398AA233111EEAF768F66C4F9AE02.roa (hash: Y52+tRvMTfL460RUNVYk3L8TtXM2/GdPu6P2ErCDVWQ=)
5: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: XY8B3tTzPyJBZMYoI9Ehi8tJlU71I3ce0cvFxvp+s6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5004 (0x138c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: May 12 17:00:51 2026 GMT
Not After : May 19 17:00:51 2026 GMT
Subject: CN=6a035cc3-8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:fd:dd:e2:af:02:7d:0e:0a:9c:7f:4d:67:
15:cf:f0:b7:17:3a:33:c5:f2:d4:2e:cd:e9:08:03:
12:f8:f5:0f:11:e7:f1:2b:0d:9d:53:15:70:14:75:
aa:5d:74:4e:01:21:8b:f1:21:3b:30:73:18:fa:76:
6b:15:76:ed:3f:ab:2c:8a:e7:67:55:48:c6:06:3f:
e9:dc:ed:c5:63:87:60:46:90:42:54:01:0c:11:b5:
3b:33:1c:61:b9:81:de:c7:12:61:a7:81:aa:10:84:
9d:a0:dc:4e:4f:7f:9c:2a:13:a0:5a:01:c0:d7:cc:
7d:a6:ca:eb:b7:91:4f:73:43:d8:e7:78:e9:81:36:
70:89:84:86:e9:44:62:5d:cf:ae:ae:da:b8:b2:dd:
07:e2:04:41:a5:bc:9d:88:c9:db:d6:2c:53:26:9c:
a1:c6:8b:ea:28:6a:7e:e0:00:a4:38:12:2d:5a:d0:
16:f9:d6:65:51:06:22:65:5d:1e:2e:da:95:72:de:
a1:2b:94:af:df:55:44:52:f2:98:7b:7a:c7:4d:33:
71:fc:63:b3:fb:03:2f:92:11:f1:aa:07:69:a5:a9:
30:30:b9:6f:75:a1:f9:18:b2:50:19:3a:26:a0:c3:
25:6c:e1:6c:8c:21:b6:6f:f5:88:04:50:46:2f:d4:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:BC:F3:D6:DF:C5:93:AA:D1:8D:42:3F:32:2F:12:3E:01:8E:EC
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:c6:1e:c0:12:28:ff:79:b7:0b:02:d0:d7:77:5d:73:62:d5:
d3:6d:f3:5a:3f:97:2f:1c:c6:93:4f:43:6d:60:e5:ee:30:29:
ed:91:b3:47:ba:4f:63:3f:18:2f:62:5a:40:56:89:1a:00:22:
7e:0a:35:cb:06:91:c9:32:17:3f:a8:cd:6a:12:14:71:d4:31:
84:e9:15:31:85:63:c7:4e:97:19:f1:45:20:e0:ae:e3:b6:db:
d0:f6:67:ed:84:1f:78:c7:79:26:19:9e:31:69:ef:70:63:f8:
25:b2:51:4f:0c:a3:07:96:01:dd:6e:2e:23:51:28:2f:6a:a6:
a8:09:9c:eb:2d:0c:ec:c7:2d:11:ef:e6:c8:6b:81:89:9e:db:
1c:5d:68:a0:69:c5:19:1b:c0:c9:c7:52:e6:e8:14:f9:2e:94:
2d:c2:20:e2:89:d0:5e:46:73:1a:da:cf:3e:24:4f:cf:1b:41:
b4:fe:46:60:7a:c0:bf:9d:c4:b0:5b:0d:41:f0:e3:c2:97:cc:
ae:38:8b:ba:49:21:d1:f9:42:7c:43:6e:68:13:18:9b:20:2e:
22:0e:18:d5:81:3b:bf:cb:02:2f:92:3c:f6:f5:16:f7:b9:8b:
57:ae:e0:d8:80:13:2f:9c:a9:76:b2:90:1f:af:36:0c:e7:8f:
08:d1:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:29 2026 by rpki-client