
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: 8l/hk7xCIetxiyJpZI3m17aBtkQvmY1eXFCcCbpQ6ZQ=
Subject key identifier: F1:36:8D:DA:0E:91:86:A0:72:74:DA:FC:1D:1B:FA:36:9D:0C:85:4C
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 06F6
Signing time: Tue 02 Jun 2026 22:09:56 +0000
Manifest this update: Tue 02 Jun 2026 22:09:56 +0000
Manifest next update: Tue 09 Jun 2026 22:09:56 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: 6svyjkE6SUuu3GGdtOlXS+yg5N7H0oNLKzPV/kcEXZc=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: ANO9ATvmrYILQmlhem8z7fcbouBAL7kvJgnxQnAu8ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 22:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: Jun 2 22:09:56 2026 GMT
Not After : Jun 9 22:09:56 2026 GMT
Subject: CN=6a1f54b4-0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:23:24:92:cb:44:c4:aa:c0:7f:82:d0:25:
c7:79:07:3f:27:7a:ec:fc:2a:e1:8a:94:4b:68:5e:
b9:95:24:ed:19:6f:5a:3f:3b:24:27:d8:b9:ff:b2:
43:db:dc:31:bd:ff:14:88:71:f9:e1:be:56:ec:82:
4f:0a:b1:bc:1e:bb:d5:6b:c4:5f:73:92:1e:6c:38:
4f:74:04:f1:52:7c:d5:49:4c:85:12:c5:06:cf:c4:
b0:20:f9:7a:8d:6b:b1:44:5b:7d:6a:8b:2a:a3:e9:
dc:a5:81:98:c8:a9:af:83:25:62:dd:d3:8b:96:aa:
03:b8:e1:8f:b0:ef:98:80:c7:c5:57:0b:32:dc:13:
df:fb:8b:18:22:b3:10:9f:2a:33:64:23:97:65:a1:
9f:d2:41:87:2d:14:ee:a7:17:ac:f7:08:44:0c:30:
1d:39:62:af:67:f2:2d:bf:1c:a1:bb:28:aa:88:5d:
25:50:11:b5:2e:bc:e3:02:e9:c0:53:54:ec:63:33:
a8:af:d8:d7:c7:5b:53:a3:48:d0:9b:4b:44:79:46:
fc:ef:b3:88:f4:bd:f2:d6:5a:5d:e3:78:79:8e:12:
d9:6c:4a:68:40:63:7a:ca:52:db:b8:c2:5d:31:a4:
e4:b1:08:66:22:17:76:fc:df:a6:3a:12:44:ef:b2:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:8D:DA:0E:91:86:A0:72:74:DA:FC:1D:1B:FA:36:9D:0C:85:4C
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:5c:7b:f5:3f:e1:7a:7d:79:d9:31:27:7b:99:0b:d1:ba:3c:
cc:2a:f8:41:82:4c:e9:61:07:9b:84:99:0e:78:ec:f9:85:b0:
7a:ab:92:5a:6c:f0:0d:5d:ad:32:d2:76:06:4a:17:3f:33:25:
7c:82:df:b4:a2:d8:42:54:b8:42:0c:7f:33:93:2e:58:a8:88:
bc:87:22:c4:1d:5b:68:c7:83:ba:12:32:b7:45:aa:26:ae:ce:
c1:46:2f:16:f5:fa:18:7b:f9:af:fe:5d:7c:b9:b6:f2:db:d2:
09:65:fa:27:2c:cb:e9:18:0c:45:85:0d:72:d0:23:08:c0:2b:
5c:3d:07:40:7b:9c:a8:dc:05:0d:4b:02:10:93:1c:d6:cf:c1:
65:ef:04:6c:fc:ce:f7:22:00:89:ab:cd:4f:4f:f7:f4:97:d4:
d1:a8:7f:3a:d7:37:9f:bc:64:10:b5:68:5c:8a:d1:5b:3f:95:
a7:dd:37:1d:66:6a:57:99:0c:52:78:a2:7e:02:de:32:78:48:
70:69:f8:63:6e:59:fa:d1:7c:82:b5:85:78:c0:56:1b:ff:d8:
e3:7a:d8:28:7b:4c:1e:1c:2a:5e:50:62:c3:f7:a3:de:64:de:
87:bb:bb:49:77:d0:7a:4f:36:29:e8:83:8a:3f:4a:ab:df:da:
93:77:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:21:03 2026 by rpki-client