
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier: QQ85EsM/9nMcXAJgWXW7cW7V+/WPyXrRGGNMn597sp8=
Subject key identifier: 26:C9:40:BF:D6:52:4F:0D:2B:53:C7:38:2D:55:54:4A:1D:16:48:5D
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number: 0223
Signing time: Mon 05 Oct 2026 03:08:32 +0000
Manifest this update: Mon 05 Oct 2026 03:08:31 +0000
Manifest next update: Mon 12 Oct 2026 03:08:31 +0000
Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: wJ6BEkgNZ3vEN4LI9jk3Jecl37XzDN75xQGIvxpe/Vk=)
2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: Bt9+mlwqAKzVL7tvX3gE+a0ovQgB4wNFaWaiaFG93oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Validity
Not Before: Oct 5 03:08:31 2026 GMT
Not After : Oct 12 03:08:31 2026 GMT
Subject: CN=6ac314b0-cad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:01:19:8b:2c:ef:77:7e:0b:51:8f:93:28:
dd:f3:53:d0:c2:d6:11:c3:d8:64:97:d6:f5:64:5c:
9b:c0:62:65:1a:1d:0e:1e:3d:dc:1d:63:27:88:32:
72:e2:ee:e4:5d:37:5b:7d:fd:21:c7:60:8a:26:22:
36:1d:53:36:9d:9b:63:06:e9:93:51:69:7f:3b:8e:
2d:11:ca:08:e9:fa:6d:31:5c:cb:3d:8b:a9:0f:5d:
62:73:61:ea:23:e3:c9:0f:c7:23:62:90:04:f9:d2:
ff:82:86:f1:ac:91:f7:ef:c9:09:3f:86:27:67:77:
56:75:07:f1:fb:d1:d8:52:2c:56:31:5b:cc:1a:2e:
53:ca:c8:70:e6:79:c8:fb:40:53:41:15:f6:37:c3:
f2:b3:12:30:7d:4a:28:cb:58:10:62:78:b5:65:0e:
8a:a3:45:dd:00:8a:53:41:83:57:0b:32:90:61:0b:
d6:91:1d:c4:b8:a6:14:0f:4d:01:f8:93:d3:f1:ec:
77:2d:e6:ce:73:e0:01:ab:4c:a1:ce:37:d8:8c:8f:
3e:89:cc:ef:57:d4:a6:cf:2e:5a:0e:91:90:bf:5f:
c1:d0:c9:87:66:a8:2a:ed:e6:0f:f6:aa:4a:4b:35:
e3:64:d3:50:bc:bb:46:d6:66:b4:69:d0:7d:a2:b5:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:40:BF:D6:52:4F:0D:2B:53:C7:38:2D:55:54:4A:1D:16:48:5D
X509v3 Authority Key Identifier:
keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:a8:87:05:3a:c0:30:c8:0e:1d:3d:27:a5:c2:76:42:63:
f1:a0:b4:e5:84:54:1b:d5:38:9e:30:b5:ad:15:dd:48:16:cd:
8f:a0:30:7d:c0:da:63:4b:49:85:b7:49:e5:c4:03:b3:0f:99:
52:6d:df:e4:f7:62:55:bf:1d:f1:ed:17:fa:f9:05:7d:a7:90:
32:a6:b8:bf:46:94:ce:1b:68:7c:47:1d:86:76:48:30:3b:12:
dd:fc:9b:89:97:84:76:7b:10:59:17:02:19:7a:7c:36:1f:9f:
1c:11:2a:4b:72:31:91:bc:5c:45:85:3e:4d:13:46:c2:e6:dc:
62:3a:8c:47:c5:dc:5f:06:41:54:87:f9:7a:d7:9b:66:79:82:
0e:3c:b3:37:ea:fc:ff:b7:c4:54:88:f3:b2:cc:ff:e6:62:d8:
0a:97:aa:85:1e:be:29:62:26:5d:d6:24:ef:55:ed:00:e8:ef:
95:79:c6:2e:13:5d:d5:1e:6b:d2:3f:b7:af:99:45:12:57:4a:
f3:e0:1c:cf:2e:26:b3:4f:d2:95:bb:5e:bd:50:4c:08:d1:c8:
16:14:a0:e9:3d:c0:2e:45:f1:cc:78:70:e5:4a:82:d1:4a:e2:
b3:b0:1f:6b:2d:1e:5b:38:82:b0:5f:07:96:aa:33:09:49:8c:
70:5c:31:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw
MUJDQjM0QzkwHhcNMjYxMDA1MDMwODMxWhcNMjYxMDEyMDMwODMxWjAYMRYwFAYD
VQQDEw02YWMzMTRiMC1jYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxh8BGYss73d+C1GPkyjd81PQwtYRw9hkl9b1ZFybwGJlGh0OHj3cHWMniDJy
4u7kXTdbff0hx2CKJiI2HVM2nZtjBumTUWl/O44tEcoI6fptMVzLPYupD11ic2Hq
I+PJD8cjYpAE+dL/gobxrJH378kJP4YnZ3dWdQfx+9HYUixWMVvMGi5Tyshw5nnI
+0BTQRX2N8PysxIwfUooy1gQYni1ZQ6Ko0XdAIpTQYNXCzKQYQvWkR3EuKYUD00B
+JPT8ex3LebOc+ABq0yhzjfYjI8+iczvV9Smzy5aDpGQv1/B0MmHZqgq7eYP9qpK
SzXjZNNQvLtG1ma0adB9orXKUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbJQL/W
Uk8NK1PHOC1VVEodFkhdMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE
NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU
T2JSbEhBVzVMXzRCdkxOTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlKaohwU6wDDIDh09J6XCdkJj8aC05YRUG9U4njC1rRXdSBbNj6AwfcDaY0tJ
hbdJ5cQDsw+ZUm3f5PdiVb8d8e0X+vkFfaeQMqa4v0aUzhtofEcdhnZIMDsS3fyb
iZeEdnsQWRcCGXp8Nh+fHBEqS3IxkbxcRYU+TRNGwubcYjqMR8XcXwZBVIf5eteb
ZnmCDjyzN+r8/7fEVIjzssz/5mLYCpeqhR6+KWImXdYk71XtAOjvlXnGLhNd1R5r
0j+3r5lFEldK8+Aczy4ms0/SlbtevVBMCNHIFhSg6T3ALkXxzHhw5UqC0Uris7Af
ay0eWziCsF8HlqozCUmMcFwxpw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:31:57 2026 by rpki-client