
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: jX8JXgEqbdPkJh8KZbK0ijZ+6kNIn6I3fQfbqEI9K6Q=
Subject key identifier: 84:34:CD:88:B8:C8:21:DB:CF:E7:44:6C:20:C1:19:BC:20:A5:B9:2A
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 0747
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 0741
Signing time: Sat 24 Oct 2026 21:55:05 +0000
Manifest this update: Sat 24 Oct 2026 21:55:04 +0000
Manifest next update: Sat 31 Oct 2026 21:55:04 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: +kIJZorkCYsLlOax7MauopA0R0AVdQldyIambilMVMc=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: Xp4lD/QSImDCE4efuMgqe92Y/4E3I4XjwfeB+l5VEAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: Oct 24 21:55:04 2026 GMT
Not After : Oct 31 21:55:04 2026 GMT
Subject: CN=6add2939-6829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:3f:ee:c7:33:1a:a2:ae:fa:f8:a1:8e:d3:
7d:92:c0:a7:10:29:e2:f2:5c:20:97:3d:37:b9:2c:
7c:e5:ba:12:f9:7f:9a:f2:f3:76:19:e2:87:51:e4:
8f:49:ed:f9:e0:af:96:b5:ef:d4:c4:2f:8a:c7:a2:
84:44:ad:4c:ad:f2:a7:10:2c:b8:74:30:d6:ee:79:
4a:86:4f:69:f2:44:32:94:9e:5c:1d:36:46:9c:02:
cd:5b:90:ae:32:21:c1:32:0c:cb:ac:76:39:85:90:
4a:84:34:ef:5e:76:4f:b9:15:ee:5f:0f:77:f8:7f:
31:e4:1d:67:22:5d:50:be:2a:3d:a6:55:c3:79:10:
95:e2:c4:37:64:5b:df:ae:da:7d:f6:3c:e0:58:87:
dc:8f:e6:41:fa:4c:b2:f4:a6:98:6b:65:c3:74:ec:
85:1e:b1:e5:f7:3e:b4:f8:22:df:31:bd:75:11:f3:
fa:77:53:a1:be:03:72:fc:99:4a:3f:9b:59:6f:76:
ea:7d:86:bc:2a:07:59:fb:75:4d:36:6c:c0:32:c2:
1b:0a:9c:8d:e6:df:f4:83:d1:7b:5c:f2:06:b1:4e:
b4:0c:cc:38:a5:ff:ed:7b:35:00:fa:b9:6c:a8:99:
eb:39:cb:35:c8:08:5a:f9:18:24:26:0f:80:59:68:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:CD:88:B8:C8:21:DB:CF:E7:44:6C:20:C1:19:BC:20:A5:B9:2A
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:39:3e:38:ac:65:a8:65:b4:42:0f:e8:dd:8a:ca:34:17:
53:c8:f5:70:8a:aa:4b:b2:73:07:93:d1:c8:eb:ae:2f:d5:a4:
b8:c6:2e:7e:43:41:f9:b9:de:5f:f4:5d:c1:70:15:98:84:f0:
db:2e:ea:03:55:f0:f2:0f:a7:3f:8b:af:94:d9:af:51:d1:1b:
5e:bd:7c:7d:be:c4:5a:8f:e7:6a:af:8c:dc:7f:e3:30:ff:7d:
8c:9f:56:58:86:36:06:78:7b:3b:99:32:5e:05:89:00:f2:c6:
3f:be:c4:95:12:26:95:15:a9:95:b2:03:70:d2:aa:33:a7:39:
a9:d7:0f:f0:9f:8a:ea:cb:81:a8:49:96:73:57:3d:b8:eb:fa:
dc:32:a6:b7:21:ea:70:4d:72:75:fa:5f:2d:60:1e:29:99:b4:
36:8c:ee:c9:7c:9a:3b:1c:31:42:41:6a:71:4e:55:5d:13:41:
98:f6:ac:3a:4b:89:a3:07:5f:08:09:23:5a:dd:ab:e7:45:1d:
98:7f:61:21:d8:8d:34:42:5a:0d:df:62:c4:08:99:91:34:a5:
66:03:9b:f4:7a:e8:a2:e0:c6:b5:41:c5:3a:25:06:2a:08:30:
b1:6c:41:83:5a:cb:99:d3:c5:2b:72:1b:21:98:53:74:7e:df:
45:cc:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:57 2026 by rpki-client