
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier: 5RTrcN+9kgKvXSfnD61th27NrOjDTnuCTWXa+VrjkwE=
Subject key identifier: 09:8B:78:B4:DA:3D:62:1A:08:DA:52:57:CD:C0:F9:30:F2:58:FA:4E
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number: 0719
Signing time: Thu 16 Apr 2026 21:51:35 +0000
Manifest this update: Thu 16 Apr 2026 21:51:35 +0000
Manifest next update: Thu 23 Apr 2026 21:51:35 +0000
Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: NdQDJmErqFtTXrEC0MGukbcwdciQXlQ5AA/RE5T3XrQ=)
2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: rBLmCstaiSTAZIiJ78MwP1Xx8bjB/LfaaqELF4UDGXk=)
3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ky5ZB0zmCFJ4ZhtIcZDO2A/tVio+hB2OepjdPThGIFI=)
4: A44DBD8486F811F0BCE74679C4F9AE02.roa (hash: mmFkgE0L1sreVpQhtYAV83v46s2MaftdRM1lyxnQjlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Apr 16 21:51:35 2026 GMT
Not After : Apr 23 21:51:35 2026 GMT
Subject: CN=69e159e7-5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:10:7e:91:5e:44:9e:e4:7f:e5:dc:dc:07:
e1:d1:12:1b:8f:09:33:91:c4:56:b1:77:6e:4e:d9:
a8:6f:c9:20:f8:27:8a:eb:4d:9f:27:9f:f0:53:90:
c2:cb:3c:55:74:b9:6e:0d:3a:da:00:0a:2d:05:2b:
33:3b:00:21:f3:b9:96:3e:7a:e6:46:c7:c4:c1:f7:
d4:14:57:e8:86:30:20:c9:09:b5:98:85:bf:9e:4b:
ae:b3:ff:98:a7:cc:57:1f:19:9a:f1:5e:05:b2:ab:
e1:5d:70:8d:46:88:f8:7d:bf:98:d7:e3:05:c2:7f:
fa:73:5e:ba:34:bb:70:c2:bb:44:2c:82:f5:a3:3d:
44:c1:45:38:4a:43:c5:9f:10:f5:5d:dc:77:27:0e:
96:7e:1f:04:4c:48:e6:8f:c7:17:24:b0:02:18:82:
4b:3f:16:b4:af:24:fe:70:3a:8a:53:da:b7:c1:7d:
50:9e:16:76:6d:31:77:5c:22:a4:b9:8b:72:76:53:
ea:55:b5:31:e5:9d:c2:5a:18:03:92:f4:46:ce:ef:
45:5b:60:c5:5f:86:3e:29:9b:82:ab:48:71:77:1f:
7e:29:2b:ad:4d:29:88:61:bf:64:30:3d:87:a1:72:
8c:a3:d7:04:c4:6c:db:dc:da:fe:6b:a5:8c:ad:46:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:78:B4:DA:3D:62:1A:08:DA:52:57:CD:C0:F9:30:F2:58:FA:4E
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3a:9e:9c:64:57:71:5f:7a:01:80:be:01:54:c3:2a:70:e4:
a2:8a:ad:22:76:d2:f5:ed:61:41:4e:9d:c9:ea:c2:05:82:8c:
85:65:c9:20:5d:6a:fc:f7:c6:05:68:07:43:b2:1f:3a:03:5d:
9b:ec:a2:9a:64:51:fb:b8:89:e2:a1:43:f1:ab:da:56:84:d3:
e1:62:52:74:e3:a3:68:0a:68:cb:99:d0:10:bc:81:a3:53:52:
c0:7f:4f:76:e4:c9:ef:87:2f:9f:03:18:1b:bb:f1:77:7c:60:
3b:90:65:75:f8:a6:c5:8a:af:5e:4e:2f:ce:25:57:66:79:af:
5b:8e:74:4c:8e:97:fe:50:19:50:fd:09:e7:e0:f7:f3:c0:55:
a3:cd:5a:e0:43:ce:c7:3c:7b:b5:9f:2e:57:0d:a2:22:66:d6:
69:50:6d:50:a0:17:fb:e3:46:41:e1:f7:f2:9b:cc:ba:3f:29:
4b:28:6f:e9:cc:52:a0:44:3a:00:51:73:ec:18:6f:71:f6:8a:
0a:4d:df:09:e3:7c:d8:ea:31:56:dd:91:cd:56:aa:ac:c6:ae:
c4:6f:2c:6a:79:74:b2:1f:8e:d5:4b:c2:86:38:05:88:b9:a5:
af:b7:97:ca:c5:18:8c:42:5e:3f:3d:7b:1a:15:b5:7d:54:5a:
5a:54:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:51 2026 by rpki-client