
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier: P3ro6KVT0qx4Uxgs61GPLgNV7P7v30u871Uf0BHFPAE=
Subject key identifier: 71:1C:34:9F:AB:DD:FF:2E:57:0E:79:64:F0:11:9C:D7:D3:62:0A:BD
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number: 0209
Signing time: Wed 19 Aug 2026 03:37:43 +0000
Manifest this update: Wed 19 Aug 2026 03:37:42 +0000
Manifest next update: Wed 26 Aug 2026 03:37:42 +0000
Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: LkHBsgqrShmJTdRzpORaBIyAPytm+CxmM6Zbm6vzruE=)
2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KgGijW2soQRzCpn/hhV4Vag0nXvvNHm3EmDe2YvYSfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Validity
Not Before: Aug 19 03:37:42 2026 GMT
Not After : Aug 26 03:37:42 2026 GMT
Subject: CN=6a852507-aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:70:3b:7f:f4:ae:e6:92:4e:d0:85:04:62:
bd:75:09:63:d9:59:d8:33:8d:9e:ab:bf:1e:9a:9d:
e8:6c:95:5c:e4:4a:df:2b:58:eb:d2:f2:8e:75:a5:
10:97:51:7d:91:da:55:e2:57:81:3b:31:65:56:f4:
23:8e:d1:64:56:86:5c:c3:8a:c8:be:8a:b6:74:c4:
74:7e:53:d9:cb:db:7a:3b:92:14:7c:10:55:df:b7:
6e:54:b5:a2:eb:55:37:67:b9:9e:27:07:2c:3f:17:
2c:6d:34:35:8d:a9:19:5a:79:0f:9d:91:53:a0:e9:
0a:95:1a:68:5c:bc:65:47:f9:33:dc:e3:6e:16:9f:
ef:71:3f:a3:21:26:fa:37:68:7c:5a:dd:d9:d6:64:
0e:04:59:0f:12:9f:f8:f7:9b:4b:81:64:d5:aa:d1:
48:5c:90:0d:28:b9:97:7f:9e:37:b0:05:f6:60:8e:
6e:3c:73:10:c7:9d:27:9f:81:38:ea:e5:65:28:23:
03:05:29:09:d3:bf:d1:bb:61:ff:05:72:3f:72:00:
46:da:a9:47:58:33:84:f1:b9:5b:77:71:f7:e4:fd:
b3:66:b1:b4:be:4a:82:ba:92:13:75:44:36:6a:d7:
7c:fb:00:c7:40:c5:4e:24:a5:c0:ff:7c:91:06:07:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:34:9F:AB:DD:FF:2E:57:0E:79:64:F0:11:9C:D7:D3:62:0A:BD
X509v3 Authority Key Identifier:
keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c0:7f:4e:f2:88:de:12:3e:78:46:1a:ec:e5:d5:a4:aa:8e:
c1:7d:ea:87:f3:43:e2:0a:b6:c5:3c:8f:58:11:28:89:fe:a9:
aa:50:04:47:2f:ff:4c:69:70:ca:da:b0:6a:c5:b2:07:93:13:
23:9d:7d:f2:e5:58:4f:8f:84:93:e3:21:1b:4e:f0:e9:84:55:
58:17:60:5a:02:27:b8:49:f4:2f:51:84:8d:e8:0e:77:7f:88:
2e:44:9b:86:0f:4e:78:34:ed:6d:9d:5f:f9:51:13:73:2a:5a:
5d:d5:bb:e4:5a:c1:f1:2c:de:2e:f5:0a:d1:2a:d8:3c:98:c1:
58:cd:f4:04:ae:55:98:5a:1b:37:90:24:3a:e0:9d:18:2e:5b:
1b:ae:f2:1e:2a:01:5d:63:88:36:65:df:ee:34:76:96:00:1d:
a6:3c:9e:a7:e8:b9:f3:c0:b0:38:18:3d:dd:8c:16:cd:28:a7:
13:71:4f:c7:e3:de:45:75:d9:62:41:e8:f3:2f:6f:55:06:bc:
95:1d:73:5f:09:a3:5d:3a:66:54:0f:52:7b:46:e0:79:f8:e7:
e1:73:c8:6f:7e:fc:46:a6:8e:3e:0e:bd:ad:c6:d2:a4:cb:f4:
ef:f2:ed:97:10:b1:f3:b4:fa:b3:ee:0e:38:e1:c2:23:5f:39:
23:03:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:44 2026 by rpki-client