
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: Avd0EJCp5M8HSAUM33J0UN4Ms2NUbyACpWn/kViEuvw=
Subject key identifier: 7F:75:30:36:BC:91:57:00:30:3D:F6:91:B6:F4:99:4F:22:CD:0C:BB
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 0739
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 0733
Signing time: Sat 26 Sep 2026 22:02:52 +0000
Manifest this update: Sat 26 Sep 2026 22:02:52 +0000
Manifest next update: Sat 03 Oct 2026 22:02:52 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: h2mAZn2oihN1UGUayczSEWnmcUUTyiMgLGfa5D7sFD8=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: Xp4lD/QSImDCE4efuMgqe92Y/4E3I4XjwfeB+l5VEAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: Sep 26 22:02:52 2026 GMT
Not After : Oct 3 22:02:52 2026 GMT
Subject: CN=6ab8410c-eee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:df:aa:87:90:68:e8:f4:0f:14:73:e9:2f:
c2:a9:7c:8f:ec:4f:8c:9b:35:97:e1:ae:28:af:6b:
60:19:cb:db:db:25:4a:c2:8f:c1:74:8f:5f:8c:58:
a6:63:fa:63:46:2c:85:24:70:f2:32:50:a1:8f:5e:
52:16:21:a6:75:99:69:91:fd:9c:e8:ae:e1:27:ea:
1a:1d:d1:fd:af:25:f1:cd:0c:95:f1:dd:58:be:67:
90:c8:28:90:23:f4:c0:d2:dc:bd:d6:d4:56:b0:30:
94:22:5e:35:89:81:b7:14:5a:d0:fc:96:fc:f7:ca:
58:b3:ac:54:e3:b2:8e:de:75:38:86:9f:4a:6d:59:
c7:d6:cb:89:26:d9:34:b6:5c:6f:e6:74:cb:8c:31:
47:63:5c:21:c3:22:de:64:c4:7a:27:15:77:b7:d7:
2f:c8:05:6e:70:aa:20:e3:ef:f3:d1:e0:fa:8b:d2:
64:0f:44:b0:c9:82:ed:d1:06:cd:5b:cf:ad:02:e6:
8f:5b:47:46:b0:ae:0f:d5:7a:ad:af:f1:f9:21:80:
1e:91:e8:39:5c:33:b2:12:a5:96:04:6a:a4:5a:1a:
9a:e9:0c:07:fd:f1:dd:68:a0:3c:e3:a1:72:f3:e4:
82:e6:e6:a5:90:3c:5a:41:f8:bb:5c:c5:59:a4:86:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:30:36:BC:91:57:00:30:3D:F6:91:B6:F4:99:4F:22:CD:0C:BB
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:a4:fe:32:06:ab:eb:68:1d:a8:f0:88:06:cf:51:5b:a0:
b4:83:5f:25:5f:73:05:c6:1b:d7:86:8c:5d:eb:07:1d:f2:5f:
96:db:ee:81:62:bc:7f:d2:4d:a5:1c:62:00:05:0a:73:0c:41:
9d:4a:20:4c:06:95:3a:3c:61:c9:e5:90:61:4c:77:47:d8:07:
06:a3:86:41:ba:e8:12:8e:9b:69:09:3c:c3:74:45:1f:c0:4e:
a8:3f:87:6f:03:ef:a9:2e:0e:6b:ba:c0:48:4b:e7:6c:b7:86:
41:7f:9f:a1:fe:0b:2b:f5:54:83:81:99:c6:bd:2d:09:21:6c:
79:4d:24:c8:23:41:b0:9e:79:fc:80:1f:98:2b:f4:3d:24:b9:
cb:e4:28:67:98:b3:d0:95:23:3c:0a:f6:a9:0b:27:5a:cd:3a:
d4:4e:8e:fd:43:2f:0a:6a:0f:69:ea:03:eb:9e:d8:cb:c1:22:
bd:c5:84:2f:51:4e:05:e9:41:6e:90:26:a0:47:ad:48:e3:80:
88:23:e9:35:5d:ff:21:19:c6:bc:ee:ff:44:74:30:3d:fb:0b:
74:2d:f6:68:71:87:55:50:1a:7f:37:bc:e5:98:19:c9:91:59:
a7:c3:54:73:f1:81:5b:45:3b:9d:20:56:6e:bd:62:e2:82:ed:
36:b4:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:26:40 2026 by rpki-client