
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File: UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier: sZ2Gu88I69KHXWFhhP1/ICfuODtKr7ccRHWN6AZpoQU=
Subject key identifier: F1:23:9D:51:65:8F:BA:56:65:08:63:09:A8:ED:2B:01:4D:BC:7B:F3
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number: 4D
Signing time: Fri 17 Apr 2026 08:01:39 +0000
Manifest this update: Fri 17 Apr 2026 08:01:38 +0000
Manifest next update: Fri 24 Apr 2026 08:01:38 +0000
Files and hashes: 1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: gx9mjjPR/nA/wHkmgFm6YtulIqLEv5U5fZa98oDmg2Q=)
2: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: Ol7o3PHS2fJcKJjNIbEjcxAgX88BdxCRDK1NBP+aiIY=)
3: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: YGc7kv7ZZdCc5DPV66N241SwkEHthgl6Nrvhn4oZsMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Validity
Not Before: Apr 17 08:01:38 2026 GMT
Not After : Apr 24 08:01:38 2026 GMT
Subject: CN=69e1e8e3-c38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:9f:83:bb:f0:02:18:49:c3:18:af:99:2d:
ad:97:7b:7f:09:30:fc:15:76:67:ef:62:bc:18:e1:
42:56:a8:58:44:49:d7:57:8d:34:01:f9:90:13:b6:
49:27:0b:fb:1d:89:70:9a:17:f4:1f:c9:d3:c9:ce:
56:20:af:6f:cb:51:e7:1a:77:98:ce:25:64:c3:e8:
bd:df:b2:1d:37:6f:2f:34:50:d2:d0:8a:b8:9c:a9:
aa:46:b4:15:c3:c1:28:78:77:91:67:d0:66:04:67:
bc:cb:b6:27:fa:0b:4b:23:81:b8:7f:5b:a3:05:c8:
2b:65:11:27:92:a9:b1:4d:cc:91:25:98:fc:4c:dc:
98:a3:71:d6:bf:38:56:63:b1:ee:9e:4a:f9:f9:b8:
c3:b9:04:f7:39:c8:53:52:68:65:b4:06:0b:f8:1d:
f9:80:10:31:77:c0:68:73:e0:56:b6:40:9d:cc:f2:
01:e2:ed:e3:7f:94:f6:75:89:cd:00:3f:fa:5d:7f:
1d:ab:2b:23:e5:c1:9d:6e:41:eb:65:ef:11:89:73:
0b:84:71:73:b8:a7:94:05:c8:8e:61:52:86:99:4d:
96:7a:b9:69:1b:2a:26:9a:07:5d:f5:54:09:c6:47:
84:c0:a4:91:35:7c:4c:ad:a5:00:fd:5d:56:e1:1e:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:9D:51:65:8F:BA:56:65:08:63:09:A8:ED:2B:01:4D:BC:7B:F3
X509v3 Authority Key Identifier:
keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:aa:eb:96:c3:e9:84:a6:45:57:8a:1f:57:aa:6b:51:e5:23:
0a:0b:a1:99:9c:44:a9:97:13:d2:33:3b:16:9d:47:37:07:cd:
84:7f:6c:6d:19:6a:93:93:c9:a8:ce:47:15:8a:c8:ed:a4:5a:
cb:78:7a:f6:ac:c6:8e:6c:88:eb:63:53:b0:32:e4:8d:87:7f:
0d:b9:cf:a4:e8:74:39:40:d7:48:30:4c:95:3c:48:5c:4a:d3:
5c:7d:09:fc:63:6d:26:32:b6:93:02:50:b6:32:ec:8b:d4:88:
6c:8f:25:fd:a4:b3:a2:23:f3:64:97:b7:d6:da:68:1a:cd:c4:
73:64:ba:7d:f0:a8:52:e9:59:00:98:a2:33:54:2c:13:57:56:
f0:81:20:d1:31:b1:88:5c:e7:6c:c6:5c:16:b8:8e:5d:3a:d1:
19:76:fc:0b:6f:9b:32:16:e2:f9:61:4e:f8:45:40:f8:34:3d:
84:69:df:1e:d8:79:17:38:60:79:34:d1:95:bf:34:cd:ea:03:
46:64:4f:c1:04:75:b0:f0:80:05:5f:a4:cf:90:2c:37:e0:7d:
1d:13:bd:f8:31:a8:27:2f:2b:89:54:ed:c4:89:ae:8f:f8:f3:
a2:33:eb:b0:e9:ab:cb:a7:6f:6a:95:32:06:e2:d0:9f:36:c3:
d3:7a:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:23 2026 by rpki-client