
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier: 2GGFgONxHZ3Yipos8XbfescizKVg5g6v9/O1Ngo5nk4=
Subject key identifier: BF:41:9F:A2:49:71:28:58:10:2B:94:9C:21:A6:7D:ED:42:77:90:7E
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial: 0B69
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number: 0B5B
Signing time: Sat 18 Apr 2026 19:06:26 +0000
Manifest this update: Sat 18 Apr 2026 19:06:25 +0000
Manifest next update: Sat 25 Apr 2026 19:06:25 +0000
Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: TcUPX720HnIl+KhVFq2ORu2WA0o51FTNAFifvoMd3Xg=)
2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Validity
Not Before: Apr 18 19:06:25 2026 GMT
Not After : Apr 25 19:06:25 2026 GMT
Subject: CN=69e3d631-5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:b5:d6:a3:2b:5c:02:69:f9:06:95:1a:98:
cc:3a:2a:cb:94:83:c2:75:00:e6:97:2f:ff:8b:85:
bb:b0:71:bc:32:e6:a4:c3:5b:6c:0b:b7:b6:37:f9:
e5:1c:c4:89:23:8f:99:a9:ec:1b:84:cc:0b:7e:66:
86:70:96:1d:3f:1f:08:53:98:e6:d0:fd:39:2a:fa:
54:0a:61:d4:56:5c:14:45:19:03:d6:a8:32:83:c2:
b4:eb:8a:90:2f:0b:a1:52:cf:c3:26:75:d4:6d:67:
a8:73:0f:1e:a2:6b:a4:61:1f:ac:06:9f:18:ec:0f:
f7:c6:44:0d:f2:49:d3:ac:30:43:2a:8b:90:af:1c:
06:41:f3:62:f7:5a:38:40:1a:b5:94:bf:5b:8a:5d:
b6:41:e6:7c:97:55:2c:0b:67:3e:bd:e0:a9:b6:f6:
35:81:bf:e0:2a:26:57:4d:6b:99:84:cb:bf:3b:fe:
13:d6:d9:0a:c7:09:fd:75:56:45:42:43:fa:e8:75:
5a:2a:c3:8c:4b:c5:1d:aa:df:b0:7c:9f:fb:97:a2:
15:62:13:96:e9:f7:63:b7:58:3f:cf:c6:50:54:37:
70:f9:e8:d5:ec:86:7b:f0:f9:b3:e4:d6:5f:c5:f2:
ad:ac:dc:3c:da:ed:d7:0b:bf:63:ec:23:d0:2e:6f:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:41:9F:A2:49:71:28:58:10:2B:94:9C:21:A6:7D:ED:42:77:90:7E
X509v3 Authority Key Identifier:
keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:8e:f1:38:7c:52:e5:bc:6a:46:e9:ee:2b:4a:b6:58:f7:
3b:09:1c:a8:57:ca:c9:c8:54:77:62:96:1a:3a:af:14:68:53:
a0:b5:b0:92:6c:a4:b1:84:8c:4b:d8:dd:f9:ea:b3:13:24:05:
c6:88:25:08:5a:70:54:b1:4a:88:27:9b:c7:b5:4e:6a:95:fe:
01:52:36:40:5c:77:e4:6c:c0:e1:4d:52:87:d6:30:cf:c0:bd:
8e:1e:1d:79:1c:87:c7:07:bd:22:cd:90:97:5d:8c:de:b6:d6:
e2:2e:87:0b:74:f0:44:e0:88:28:4a:c4:74:05:d2:4f:39:db:
f6:2b:5c:8b:d0:0a:81:d7:f0:7b:5a:fd:4f:49:64:b4:24:f0:
ce:56:34:9a:95:2e:4c:14:7a:8f:0f:5e:78:30:ca:27:a4:c5:
fa:6d:65:4a:b6:37:8b:7d:cc:a5:24:19:b1:f9:8b:49:81:64:
10:71:bc:5e:e2:af:5b:bf:6f:bd:fb:7b:1f:24:b2:2d:02:6c:
3d:00:7d:4b:35:77:18:60:58:45:ae:ec:9b:c2:04:73:c9:23:
81:46:ea:76:bf:17:e6:0e:b4:bc:ef:cf:17:b1:1b:9f:dd:cc:
43:a1:cb:73:c2:b8:11:c8:fb:ba:2e:89:6e:38:7f:b5:39:1c:
64:00:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:49 2026 by rpki-client