
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: sAJTq4ZysVFx+AUxQzWNHb3Wz+G+50AcAmWeflMFcF8=
Subject key identifier: 1C:7A:0A:DC:93:E1:B3:65:B0:88:28:78:E7:56:7B:B9:89:3C:29:92
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 06F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 06EB
Signing time: Tue 12 May 2026 22:14:25 +0000
Manifest this update: Tue 12 May 2026 22:14:24 +0000
Manifest next update: Tue 19 May 2026 22:14:24 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: hiI4mNZiTNAIs/xJ9EMkQ1cIhrW9t01uqxNuT5Vwxw8=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: ANO9ATvmrYILQmlhem8z7fcbouBAL7kvJgnxQnAu8ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: May 12 22:14:24 2026 GMT
Not After : May 19 22:14:24 2026 GMT
Subject: CN=6a03a641-4e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:f2:43:0a:70:e4:e2:2e:9e:7c:7e:b8:53:
2d:b1:a0:75:2d:6e:2e:b1:af:6f:6d:71:67:f3:3c:
51:bc:4e:60:fb:ca:20:43:11:2f:4f:05:70:35:be:
36:c6:72:97:d4:e0:da:c3:f8:56:3a:b8:84:18:52:
fc:b8:d3:69:f0:48:1c:7e:63:6a:bf:e3:d0:8d:67:
24:4f:64:8a:8f:d4:d4:66:51:dc:47:cb:fd:34:e2:
4e:73:39:d0:a6:9f:f0:e1:51:dc:6e:cc:cb:a2:e0:
b1:7c:e8:1d:43:d5:69:29:01:a6:d4:39:16:9d:01:
f7:4d:74:dc:62:41:94:9a:44:27:dc:64:95:35:1e:
8a:0e:67:3a:31:8d:ac:fd:cd:6e:4f:f9:32:5d:f7:
08:3c:62:2a:f7:2d:55:76:8c:94:e4:6a:b4:86:28:
8f:45:84:14:6b:42:05:b7:82:9c:5c:29:ef:aa:e6:
3b:4c:7a:49:3a:20:69:e1:b1:81:00:1f:dc:07:20:
e6:82:2a:3a:21:5b:97:94:4f:02:2c:3b:ea:0e:a0:
8a:a0:84:9e:a9:a4:43:98:62:9a:33:3d:62:f3:3c:
6d:b2:1a:a1:c3:30:da:74:e4:06:b9:9b:96:5d:ce:
e4:9c:50:92:75:1e:16:18:d3:8c:37:cf:39:14:2b:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:0A:DC:93:E1:B3:65:B0:88:28:78:E7:56:7B:B9:89:3C:29:92
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:56:d4:63:d4:8c:81:d7:d4:4f:2b:58:00:3c:f7:75:9f:
dd:46:ca:08:63:65:2b:ec:3d:4b:16:aa:e3:f6:2b:e5:a6:07:
55:dc:e5:b1:2a:3e:5c:5a:31:02:24:78:4a:84:d2:7d:cf:0f:
b5:27:5d:2f:21:2a:aa:47:d7:54:3e:74:eb:fa:65:69:2d:d1:
67:ff:23:b3:42:2e:90:93:ad:6d:18:80:28:b6:d4:13:ea:3a:
d3:be:98:74:e6:69:8d:a5:cf:00:7a:d2:96:68:38:15:10:75:
29:b0:14:c7:32:e7:3d:58:ff:77:1d:00:4a:82:a1:8d:0f:a4:
1f:b2:25:40:40:3b:6f:56:1f:cc:2c:a9:00:d5:f3:91:4f:9f:
5b:79:d2:98:77:b4:72:c4:6d:95:0b:9f:53:4a:7c:f5:55:74:
bb:5a:4f:df:b8:12:01:53:47:50:ec:6d:5c:78:c0:bc:69:ad:
70:5e:db:61:f1:33:63:d3:d2:8c:97:0f:10:86:5c:59:fe:f4:
71:41:1b:b2:61:ec:4c:c3:15:15:bf:29:46:09:d0:ef:58:70:
a9:22:59:d7:60:3f:9b:b5:66:8f:4b:c5:9e:a1:28:a6:9f:5f:
36:6b:e4:84:9e:06:20:a1:e6:ee:0f:63:60:30:8d:81:c3:2f:
68:b1:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:10 2026 by rpki-client