
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier: LlHt3WRHTAyrwa8MJdlCjknWdkwIFJpw0CJmfxOKsMo=
Subject key identifier: DC:5B:92:08:18:85:0B:1B:C6:A6:92:B1:D6:E9:47:83:66:4E:AC:93
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number: CA
Signing time: Sat 13 Jun 2026 07:01:19 +0000
Manifest this update: Sat 13 Jun 2026 07:01:18 +0000
Manifest next update: Sat 20 Jun 2026 07:01:18 +0000
Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: eu3qJPHapT0HDnwHlYuUF2Gj+N3jTBHB+j+1fKVmEJ0=)
2: 21364F844F9C11F1B46382DC98833773.roa (hash: n/OInjim29mwNTmUQyu6+nqP7xx4ud4IopjoPJfXB2Q=)
3: E00442524EDB11F1B57B694D99833773.roa (hash: bxpjndWBJ1ln8/u3+t4VPp+yJvmgyiY62H11DXEea/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Jun 13 07:01:18 2026 GMT
Not After : Jun 20 07:01:18 2026 GMT
Subject: CN=6a2d003e-9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:c3:6b:8d:0b:34:8a:fb:66:71:03:65:b4:
57:bc:c5:63:ca:56:dd:ed:1a:b5:9c:48:e7:92:d2:
29:4a:35:0f:63:51:d1:b3:54:3e:60:ce:97:cb:81:
37:b9:76:49:bd:cf:82:12:49:c7:37:fe:c3:4b:30:
d9:fc:76:7a:ac:b9:27:5d:7d:3b:d7:3c:3e:04:da:
22:57:b8:41:61:cc:a2:17:b4:c2:d4:5a:91:02:bf:
1e:05:36:2f:d0:64:0c:65:6a:f6:d4:cb:c5:50:26:
f0:60:ed:d8:eb:bb:55:10:15:df:3b:dc:b6:fa:dd:
14:9d:04:77:c2:66:8a:af:21:02:8f:85:5f:54:de:
65:20:5d:9f:25:89:99:7d:c0:38:ab:a9:65:1a:cb:
85:86:23:37:66:74:9e:15:ee:06:24:18:23:1e:45:
f5:9b:60:3e:fa:ba:e7:26:47:b8:79:5a:63:ba:dc:
88:df:2a:9d:36:e0:a9:0c:de:dc:f7:23:98:93:d2:
88:9a:70:1c:bc:97:bb:e4:b6:0c:2d:20:32:8c:7f:
56:01:8d:85:58:1b:da:76:fd:27:7d:75:fe:ae:b3:
3b:3a:b1:0c:c5:77:06:96:17:7a:24:75:ce:55:32:
04:5e:d8:5f:50:bb:1c:c7:c1:82:76:46:c9:43:4a:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:92:08:18:85:0B:1B:C6:A6:92:B1:D6:E9:47:83:66:4E:AC:93
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8a:8e:21:ae:27:a2:32:7d:05:30:13:cc:2c:70:8b:68:c5:
b1:12:9e:a6:96:21:1f:84:69:b8:68:81:a8:96:c2:18:92:b1:
67:fd:14:1e:c7:4c:45:b7:82:5a:35:e3:95:8d:fd:91:69:99:
ec:4d:65:4a:ca:95:a7:18:52:12:0b:5c:4b:a3:70:eb:7a:ca:
05:7d:00:0e:58:fa:23:aa:29:7c:4f:73:7d:66:8f:e1:fa:d6:
e7:be:22:5d:1a:33:ff:6a:c6:a5:a7:cb:ba:5c:e7:33:84:de:
6b:93:4b:2f:1c:28:f5:16:3e:1a:32:2e:61:57:c0:91:b3:d8:
fd:a6:26:c8:fe:de:a0:f8:40:ce:24:0b:37:b2:a1:d4:32:fe:
91:16:b0:02:f9:a0:73:64:38:e2:de:f9:24:3b:c7:7a:33:8a:
79:4b:09:2f:da:f1:e9:2f:d6:08:94:3c:e9:7f:9d:f4:06:9a:
f5:28:30:6f:f6:b9:80:25:3e:15:49:43:de:ee:2f:c6:3d:80:
db:58:f2:8f:25:53:2d:2d:5f:9b:98:52:27:84:53:f0:d5:db:
c9:f1:64:53:f4:12:27:0f:91:7e:e9:fd:ba:7f:92:dc:88:14:
56:89:7b:1c:95:73:43:b5:14:81:4d:f6:79:78:86:f2:4d:e9:
a0:c5:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:19 2026 by rpki-client