
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File: UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier: lNSpyrdfMSe0Skvi+cS7Z7B+J2O/zfMVKoKYL/m/Ipg=
Subject key identifier: E9:62:CA:F7:CA:83:E0:5A:DD:97:A1:FB:8C:FD:87:E3:EB:28:32:E8
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number: 35
Signing time: Mon 02 Mar 2026 14:39:55 +0000
Manifest this update: Mon 02 Mar 2026 14:39:54 +0000
Manifest next update: Mon 09 Mar 2026 14:39:54 +0000
Files and hashes: 1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: WhLn1H/u0Sfz06KJthvlruM3AxMa8//S1C6q786bAo8=)
2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: YGc7kv7ZZdCc5DPV66N241SwkEHthgl6Nrvhn4oZsMs=)
3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: Ol7o3PHS2fJcKJjNIbEjcxAgX88BdxCRDK1NBP+aiIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Validity
Not Before: Mar 2 14:39:54 2026 GMT
Not After : Mar 9 14:39:54 2026 GMT
Subject: CN=69a5a13b-65de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:9e:d4:0e:7d:da:69:86:3a:a0:e8:46:b2:
13:24:5f:30:f9:71:8e:a6:9f:10:9d:27:03:3d:3e:
8a:6f:37:3b:be:cb:c4:fb:89:4d:9f:07:59:09:97:
c4:5f:e9:75:d8:c1:de:ca:99:81:ed:b2:9d:d4:de:
73:f9:6c:57:be:37:d3:95:76:9a:1b:55:5c:66:62:
32:6f:79:d1:f1:98:47:62:25:68:f0:76:7a:4d:ea:
51:56:2c:f7:ec:21:a2:2c:1a:5b:18:34:81:4d:86:
4a:dd:79:35:76:8b:06:44:01:84:fd:9d:73:79:cb:
6e:0e:8c:29:ca:83:a5:a2:d8:1a:81:8d:65:fc:8c:
fc:78:57:5e:08:fe:7c:89:80:7f:dd:d4:7e:4e:20:
f4:fa:34:7e:74:ae:fb:a1:41:8a:86:2d:aa:eb:db:
a0:c4:c2:ff:dd:9c:f7:5f:96:2c:e5:04:60:ab:48:
ac:d9:33:23:36:6c:2e:86:53:65:ef:5f:40:51:15:
17:0f:e1:83:96:35:bd:a8:f0:3d:a9:fe:b2:4a:33:
4b:dd:6a:ff:be:ef:cd:7c:76:99:27:fb:95:d5:51:
4c:9d:e5:28:da:7f:65:5f:c0:7b:bc:1d:8d:bb:61:
88:14:d5:8d:e3:6d:a4:ff:d5:c3:b8:90:70:c5:da:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:CA:F7:CA:83:E0:5A:DD:97:A1:FB:8C:FD:87:E3:EB:28:32:E8
X509v3 Authority Key Identifier:
keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:df:88:0d:24:27:bd:1b:50:f5:f6:cc:44:b9:58:47:73:
b3:1c:53:7d:fe:3f:78:34:88:45:c4:b7:1b:32:e2:bc:ac:df:
87:dc:de:4c:9e:6e:dd:c6:58:3c:18:08:34:b3:c9:a8:0c:87:
1f:22:c0:e0:bb:8c:22:9e:b8:01:6b:f2:48:d6:5a:f1:29:5d:
64:97:3e:6e:a6:05:2f:34:66:aa:56:46:da:08:c4:ae:8e:de:
6c:9a:72:3f:85:c9:5c:be:bf:20:f8:7d:05:54:66:4d:1b:ed:
bb:d3:f9:a5:52:b6:50:36:d6:a8:b6:6b:0d:48:7c:54:88:b2:
40:0e:2c:8d:29:0d:67:41:2c:0b:41:bb:ff:fc:bd:aa:59:f4:
5b:f6:1c:80:b1:79:97:bd:03:ac:9a:83:fb:56:0b:da:52:2a:
97:df:ff:b7:1c:75:5e:43:ab:e8:5f:75:84:ba:14:cd:38:64:
0b:c9:3a:2f:59:1d:95:2d:ba:7e:66:e8:13:95:63:80:55:2a:
cb:5d:81:36:c0:af:04:0b:c8:d8:c4:0b:29:7a:e6:07:be:6b:
8b:86:1c:af:6b:92:6b:b3:90:a4:5c:20:42:47:60:b1:ae:02:
6d:3b:ca:36:a8:ce:52:0b:f0:a3:4a:1e:59:f4:1f:9c:f3:5f:
34:6f:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:31 2026 by rpki-client