
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier: 4WnkflBV2kbTa6YIv2bywBDs20YmD1FsEwgPgIVre1Y=
Subject key identifier: 37:DE:0A:FB:F5:AA:75:7C:19:DC:D2:D2:56:C5:78:44:BE:E6:B9:8C
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number: 021E
Signing time: Fri 25 Sep 2026 02:54:51 +0000
Manifest this update: Fri 25 Sep 2026 02:54:51 +0000
Manifest next update: Fri 02 Oct 2026 02:54:51 +0000
Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: Nj31NNvH6FwIJEAOaHWLt9W+n32VsBE4b7s6ystKSbk=)
2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: Bt9+mlwqAKzVL7tvX3gE+a0ovQgB4wNFaWaiaFG93oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Validity
Not Before: Sep 25 02:54:51 2026 GMT
Not After : Oct 2 02:54:51 2026 GMT
Subject: CN=6ab5e27b-c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:4d:3a:fc:16:83:32:b6:0e:0a:6f:60:78:
9d:30:30:3c:f1:33:1e:83:b8:79:96:3b:2a:00:6b:
1c:df:89:cd:e2:ae:c4:bd:0d:d9:d4:53:07:c5:20:
05:2f:9f:bd:94:5e:2e:88:43:67:a3:5f:a2:66:55:
4e:63:b5:ff:93:b5:56:a5:fd:92:b8:b1:02:f4:cb:
0c:06:73:f0:1b:fa:b9:64:f2:f0:aa:e8:9a:77:52:
c6:2f:52:17:59:9b:72:21:73:e1:07:12:80:66:4f:
3b:28:93:4d:d3:9d:23:95:b2:99:8b:74:fa:4e:57:
25:49:a4:79:c1:ac:b5:aa:d9:88:e6:10:8c:d7:d5:
b4:57:c7:36:d0:cd:52:a4:ef:7d:8b:09:4f:76:9c:
50:ff:99:ed:18:76:b0:8f:ca:d6:b3:7d:96:95:ae:
bb:59:5d:cf:37:8a:df:1f:01:54:23:4a:9a:54:37:
65:04:aa:da:ac:df:eb:bb:cd:58:b7:5f:a2:e5:75:
b2:05:f4:a4:76:c9:72:ff:94:88:54:ba:3c:38:5c:
02:7a:fe:c1:46:a9:43:f2:7d:ac:e4:cc:d2:45:50:
b8:fe:a8:42:7c:a0:7b:1c:17:ca:3f:35:14:22:b5:
68:3d:f8:07:e8:39:3a:7a:f0:63:1f:ab:e8:ad:69:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:0A:FB:F5:AA:75:7C:19:DC:D2:D2:56:C5:78:44:BE:E6:B9:8C
X509v3 Authority Key Identifier:
keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:0d:fc:74:04:fb:82:51:32:ce:e8:fd:75:7d:99:8f:56:06:
2f:05:0e:38:b0:43:64:01:33:5a:70:a8:91:3d:cf:69:f7:11:
0b:c8:c0:15:14:da:e4:7e:50:9f:6d:3e:ab:90:05:d3:e1:8e:
56:d3:ac:57:04:6f:84:ec:85:40:c5:49:7f:e9:4e:35:27:96:
53:b7:7d:32:a3:82:8f:7f:bd:b7:82:27:7e:94:69:88:5f:a0:
2d:67:06:f4:ea:40:3a:9f:8b:62:39:29:56:fb:e6:87:1c:e2:
3a:fa:97:47:b5:f1:52:18:1c:28:f5:78:bd:00:ff:c1:71:cc:
7f:43:1d:79:ce:ef:a1:4e:e0:ae:86:4b:45:44:fd:ec:38:b3:
29:c7:ba:5f:a9:e3:f5:47:81:e2:d3:c5:8a:09:7b:e1:ce:a8:
28:a7:27:12:29:f1:b1:f4:cd:6f:21:12:a0:e7:9a:fc:86:09:
bb:4a:a7:9d:70:ff:47:10:45:9f:f8:84:1e:8c:39:55:e0:c9:
36:aa:6b:84:0d:6a:03:ed:3c:64:e6:41:c2:ef:ad:d1:f0:97:
0c:43:ec:e5:4c:dd:08:2c:39:72:9a:2d:fc:d0:5a:a0:c4:eb:
97:e7:e6:d1:45:da:f5:f4:e7:35:e9:04:bd:8c:29:a7:10:a6:
26:51:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:03:15 2026 by rpki-client