
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier: 6t7wUay+3hGJujws1Uax6y/iRylpcUPGHYJHjBZSuNA=
Subject key identifier: FF:EB:C1:61:32:85:97:32:E5:A9:FC:79:12:63:DC:8B:86:9D:8F:77
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number: 50
Signing time: Wed 05 Nov 2025 07:28:53 +0000
Manifest this update: Wed 05 Nov 2025 07:28:53 +0000
Manifest next update: Wed 12 Nov 2025 07:28:53 +0000
Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: 7PI39gq43vH5IAM30kW2zx/o8SM6CM+aYN8wKhebF4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Nov 5 07:28:53 2025 GMT
Not After : Nov 12 07:28:53 2025 GMT
Subject: CN=690afcb5-c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:af:e7:9e:85:7d:17:9c:cd:45:75:89:d8:
b2:69:33:5c:8b:41:d9:ae:e5:67:bf:dc:87:1e:fd:
06:2b:6e:39:00:8f:6d:76:b1:66:24:9e:c4:fb:a4:
a6:88:64:3f:4e:fd:c9:ec:3d:cd:86:40:5f:cf:8e:
a6:ce:b9:3e:64:96:91:02:93:d4:88:b8:43:81:31:
ab:48:7e:86:6a:0f:ca:18:35:b1:88:0f:42:e5:1b:
21:da:4f:7b:2d:dc:21:90:cf:3b:e4:ba:42:78:81:
f6:b5:3d:a6:9e:42:35:1e:59:fd:fe:5e:06:5f:85:
81:9e:e5:93:0e:64:72:68:c7:e3:04:eb:39:3b:c8:
a3:49:fc:f1:bb:de:02:5f:c4:fd:e8:b9:66:e7:c6:
b3:a9:b6:5a:e4:50:ce:b7:b5:72:23:f4:31:9c:6a:
b5:09:3d:7b:eb:57:4f:a5:00:6b:37:a0:be:08:86:
68:c5:d6:45:73:ce:96:90:5d:e0:16:b7:80:f2:7f:
60:1a:b9:7d:0a:61:5b:82:fe:5e:df:f2:30:df:c8:
6a:18:5a:f1:15:44:3d:18:fe:86:e3:b1:f3:f3:d0:
c1:df:a2:63:ae:ed:17:40:78:88:60:53:8d:1b:7a:
5c:e1:a3:d5:38:17:b0:08:ff:e0:8a:c7:21:a0:f2:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:C1:61:32:85:97:32:E5:A9:FC:79:12:63:DC:8B:86:9D:8F:77
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:41:49:d6:f7:66:07:59:22:da:99:06:82:67:92:91:87:
ec:6b:97:7c:83:f4:de:c0:76:f9:0a:f1:85:1f:fd:96:da:b0:
af:eb:72:b7:db:b1:6c:d8:8e:3f:e5:0a:12:69:cd:37:9f:91:
ab:66:d2:e1:6a:6e:47:5d:c2:cb:b6:b5:8f:eb:dd:ac:83:e3:
00:5f:e5:98:29:ce:d4:48:16:d1:bd:e4:0c:73:e0:4e:4a:fa:
01:33:be:cf:61:75:6c:6c:2c:6f:37:74:ae:37:5f:95:1c:38:
72:8f:c5:32:78:b7:94:6f:89:4f:6c:52:4a:d4:51:62:87:4f:
7c:c7:eb:14:6b:a2:a0:22:ea:a2:e4:56:11:b8:b3:0d:cb:3f:
e2:3e:f1:71:35:b2:2e:34:64:d5:07:16:24:82:f8:ba:71:d9:
65:b7:3a:d1:d7:8b:a8:f0:d0:92:08:86:6d:47:3f:64:b5:88:
6f:6d:06:15:ac:12:b2:45:ba:0b:8c:89:e8:ba:62:a0:eb:6b:
9c:a0:3e:8b:58:d2:8d:75:8b:4d:b1:89:c8:0b:3b:14:21:eb:
66:fe:d3:6e:8e:05:eb:31:02:0a:10:15:18:25:ea:b6:52:ec:
4a:f8:e4:46:d6:0b:9e:f9:14:06:cf:bc:62:f0:4a:ea:47:1b:
03:4c:cc:a7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
REU2QzExMC8GA1UEBRMoNTBBQUZDNkEzRUY3NUIyMkI3NjgzQ0FCNjNEODRCRTQy
OTE5NTRCNDAeFw0yNTExMDUwNzI4NTNaFw0yNTExMTIwNzI4NTNaMBgxFjAUBgNV
BAMTDTY5MGFmY2I1LWM0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3GK/nnoV9F5zNRXWJ2LJpM1yLQdmu5We/3Ice/QYrbjkAj212sWYknsT7pKaI
ZD9O/cnsPc2GQF/PjqbOuT5klpECk9SIuEOBMatIfoZqD8oYNbGID0LlGyHaT3st
3CGQzzvkukJ4gfa1PaaeQjUeWf3+XgZfhYGe5ZMOZHJox+ME6zk7yKNJ/PG73gJf
xP3ouWbnxrOptlrkUM63tXIj9DGcarUJPXvrV0+lAGs3oL4IhmjF1kVzzpaQXeAW
t4Dyf2AauX0KYVuC/l7f8jDfyGoYWvEVRD0Y/objsfPz0MHfomOu7RdAeIhgU40b
elzho9U4F7AI/+CKxyGg8jx5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/+vBYTKF
lzLlqfx5EmPci4adj3cwHwYDVR0jBBgwFoAUUKr8aj73WyK3aDyrY9hL5CkZVLQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzZCQzM3NUIwNDNE
NDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZM
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVUtyOGFqNzNXeUszYUR5clk5aEw1Q2taVkxRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE
RTZDLzZCQzM3NUIwNDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL1VLcjhhajczV3lL
M2FEeXJZOWhMNUNrWlZMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFivQUnW92YHWSLamQaCZ5KRh+xrl3yD9N7AdvkK8YUf/ZbasK/rcrfb
sWzYjj/lChJpzTefkatm0uFqbkddwsu2tY/r3ayD4wBf5ZgpztRIFtG95Axz4E5K
+gEzvs9hdWxsLG83dK43X5UcOHKPxTJ4t5RviU9sUkrUUWKHT3zH6xRroqAi6qLk
VhG4sw3LP+I+8XE1si40ZNUHFiSC+Lpx2WW3OtHXi6jw0JIIhm1HP2S1iG9tBhWs
ErJFuguMiei6YqDra5ygPotY0o11i02xicgLOxQh62b+026OBesxAgoQFRgl6rZS
7Er45EbWC575FAbPvGLwSupHGwNMzKc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:16 2025 by rpki-client