
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: RDn2cG+ZZwiLvpdwhv63DOtgD9KGEM+PZ8Pma0EUOow=
Subject key identifier: D2:46:11:F2:18:82:41:0C:71:E5:76:A7:0C:84:BC:39:3E:47:AE:9E
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 06FB
Signing time: Fri 12 Jun 2026 22:09:14 +0000
Manifest this update: Fri 12 Jun 2026 22:09:14 +0000
Manifest next update: Fri 19 Jun 2026 22:09:14 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: rBk7B7d8xhBo1IZSEVZ3Q+PzpW3lkDtoqP8z187GgqM=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: ANO9ATvmrYILQmlhem8z7fcbouBAL7kvJgnxQnAu8ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: Jun 12 22:09:14 2026 GMT
Not After : Jun 19 22:09:14 2026 GMT
Subject: CN=6a2c838a-24d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:53:e6:40:70:6d:ce:71:02:75:7e:e1:ab:
6e:4e:66:46:ae:cd:da:41:b9:a5:16:73:b9:96:d5:
de:30:b1:3e:ae:49:79:d8:fe:72:ff:28:d6:cb:01:
3d:b0:5e:18:63:8b:28:e8:89:9d:e4:0a:dc:f7:e5:
80:4b:dc:08:33:0a:7f:b5:e8:2f:3d:f1:97:d8:46:
39:e0:ae:39:45:c3:ea:0b:7d:fc:20:c7:23:d7:16:
5c:84:ae:b3:09:35:1d:ee:95:ca:5a:f0:3a:dd:3d:
c8:84:c2:ed:ab:6a:5e:5a:31:6f:4c:5f:f8:41:eb:
a7:a7:1e:5d:b2:b0:72:00:23:90:40:5f:02:5b:a6:
ae:1a:ee:88:24:32:ef:c0:12:89:38:0e:cd:a0:56:
7b:e9:20:aa:84:ef:07:2c:41:1e:51:d2:ed:d3:c4:
b9:d9:ef:65:88:96:f6:17:5d:94:cb:ac:b9:e2:6f:
f7:f2:01:74:a9:49:a3:36:98:53:bc:6f:87:2e:63:
a2:5a:57:c7:9c:53:97:fd:e6:8d:84:05:1b:be:e3:
72:6e:e7:2e:d9:f9:67:51:55:d5:1d:5c:6e:df:eb:
5c:bf:34:84:9e:45:e4:3f:ab:42:5d:ff:2e:c8:51:
93:d4:69:f3:d6:ed:5c:e2:8a:52:13:5a:ef:77:27:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:11:F2:18:82:41:0C:71:E5:76:A7:0C:84:BC:39:3E:47:AE:9E
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:56:3c:3c:45:52:23:31:c4:8b:f6:fe:a0:89:b1:ea:9c:
49:99:24:56:c1:8b:22:e1:8f:d9:6c:1c:29:f2:76:0e:07:d4:
b3:1a:d1:44:a8:14:dc:f0:62:d4:c9:3a:10:1d:93:10:59:be:
be:5d:47:05:bd:a9:72:6c:14:1b:f5:d5:73:63:ea:8f:e7:bb:
b0:d3:17:a5:2f:ae:cf:8c:26:28:b3:dd:58:0d:df:fb:da:b5:
bf:5e:32:ff:1c:fd:91:4f:96:5a:4d:30:e8:00:a4:5d:56:5c:
70:1b:a0:eb:13:a0:29:a3:20:3b:fd:52:d2:4e:f2:02:44:16:
9d:a3:c6:bb:6d:0d:f5:46:18:9a:3c:58:ac:4f:9c:9a:82:4d:
4a:09:2f:76:cc:46:ec:9f:45:43:a3:5e:9a:ee:fb:9f:14:2d:
d6:73:2b:dc:86:68:07:71:b7:1e:9c:80:eb:16:5e:a3:09:42:
28:db:7b:4d:cc:92:96:48:38:56:b9:9b:f0:70:95:8b:55:da:
30:d8:13:1e:f7:9c:f0:9b:40:f2:a9:08:39:a6:45:84:94:bb:
6f:70:24:58:90:7e:21:38:c4:17:6a:7a:af:d0:29:3e:01:8a:
0c:68:73:93:8a:59:38:0f:07:ce:47:a6:61:f9:75:46:41:83:
9d:db:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:54 2026 by rpki-client