
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier: KXvGusW4ktwBoocwptNq7ip7x70aPISfTUZZMWEa7NQ=
Subject key identifier: 65:19:00:3F:18:DC:33:3A:AF:23:BB:06:08:9B:93:D7:12:E9:B4:B3
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number: 01CB
Signing time: Fri 17 Apr 2026 03:25:36 +0000
Manifest this update: Fri 17 Apr 2026 03:25:35 +0000
Manifest next update: Fri 24 Apr 2026 03:25:35 +0000
Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: K1naHeYR5jcFlzXjEBifgIdApCjyXnH0/JrrBZhjqEI=)
2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KgGijW2soQRzCpn/hhV4Vag0nXvvNHm3EmDe2YvYSfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Validity
Not Before: Apr 17 03:25:35 2026 GMT
Not After : Apr 24 03:25:35 2026 GMT
Subject: CN=69e1a830-5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:75:5d:f7:7f:ce:93:ea:02:8e:62:8a:c3:
53:c2:80:8b:c7:33:48:dc:bc:c5:20:c1:9b:86:15:
14:40:e7:6b:e2:a7:6b:92:d7:9f:35:e2:78:2b:d4:
18:70:4d:2e:31:ba:b5:01:94:a1:d0:3b:db:8b:6b:
53:3e:2e:68:45:05:60:5c:82:6f:22:23:ff:cb:ce:
d8:38:c8:ae:f3:3d:7a:96:e0:a8:68:4e:58:8c:3b:
03:04:79:3c:f2:23:6e:a0:5f:88:55:b2:3c:9f:c0:
90:fa:52:ad:94:28:f1:23:de:00:a4:be:c6:91:88:
f4:0d:87:01:0b:17:8d:e1:fa:17:3e:99:a9:55:cc:
bc:f7:1a:d9:1a:9c:7e:22:7a:69:49:50:23:38:63:
84:9b:2d:7a:16:25:96:84:e1:cf:22:d9:5c:ea:b7:
8a:c6:98:e4:5c:72:2e:b3:c1:99:ea:19:e2:76:3e:
6e:e2:92:08:03:13:ea:90:75:d3:0d:ce:c6:cb:86:
66:65:96:40:84:26:2b:d4:16:a5:ba:b4:cd:2d:18:
60:2a:9f:64:73:92:94:2f:05:7e:5c:5e:d2:d4:ff:
05:ab:0b:dc:90:6c:bd:45:56:72:dd:83:52:52:cd:
5c:a5:bd:39:54:4e:ad:1c:d0:aa:68:86:f4:b8:95:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:19:00:3F:18:DC:33:3A:AF:23:BB:06:08:9B:93:D7:12:E9:B4:B3
X509v3 Authority Key Identifier:
keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a8:f5:73:11:fb:ef:e3:a4:0a:bb:fb:71:07:5e:30:18:6c:
31:90:c2:28:4e:af:7b:23:02:5f:bc:15:d2:5e:b2:dc:8b:45:
97:75:0a:b9:75:be:26:51:c5:d1:a9:8e:fd:8e:4a:29:6a:ad:
40:b7:73:22:74:4c:33:0c:3d:b0:27:a9:5e:51:ba:4b:eb:b4:
51:38:65:a4:b1:00:cf:28:9f:50:2a:59:2b:fa:05:45:3d:bd:
a1:dc:5c:ef:cd:f7:8d:b8:a9:f6:3f:2f:69:26:b6:31:55:57:
23:c4:16:1c:71:37:b1:96:7f:77:f2:37:96:28:e1:21:28:64:
37:c3:c6:35:2a:60:83:5e:fa:2c:46:aa:52:54:bc:f1:f5:df:
20:7f:3f:16:37:34:74:b4:29:4b:92:22:f3:84:7d:2f:3b:10:
51:94:62:66:df:57:44:90:5b:94:5e:51:2d:ea:50:1a:81:83:
7e:75:d8:13:92:a9:19:60:de:fc:73:8c:e9:9f:65:17:31:e2:
47:f2:0e:70:14:f3:d9:51:9a:a6:da:de:a2:dc:54:37:90:d2:
60:1c:95:55:0a:4c:2e:48:76:a6:aa:50:c9:e6:d6:b9:90:c9:
07:14:51:0d:67:6f:42:fa:04:db:fa:fd:12:32:5e:7d:a6:30:
c8:50:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:44 2026 by rpki-client