
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: gCzlThG7shV7wDj9JoudrLtf8O6zj8MMrerK+MzUK3o=
Subject key identifier: C7:58:E9:DB:26:9F:72:F6:93:B8:92:3C:CF:CF:24:5F:E3:3F:1C:3D
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 021C
Signing time: Sat 13 Jun 2026 02:53:41 +0000
Manifest this update: Sat 13 Jun 2026 02:53:41 +0000
Manifest next update: Sat 20 Jun 2026 02:53:41 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: lcHNHSovfFhuyJ6nzVBSLYaBooOsUUrBuEcgnyQEohY=)
2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Jun 13 02:53:41 2026 GMT
Not After : Jun 20 02:53:41 2026 GMT
Subject: CN=6a2cc635-821d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:b8:50:b6:af:be:8a:67:73:fe:11:f1:f9:
4e:36:09:a3:aa:6c:1b:e0:eb:16:f1:50:dd:f4:52:
72:9f:78:3c:f1:e5:df:ec:e3:74:88:79:ce:9f:d1:
0c:9e:33:cd:2c:ac:40:ae:af:2a:44:48:35:90:d8:
62:ce:31:9f:61:a8:14:75:22:da:cb:69:ad:5e:76:
8d:79:41:ab:f9:ed:3d:d9:ca:53:5b:e8:ab:89:24:
e6:73:97:3c:45:8f:dd:70:eb:ee:11:b8:aa:07:3c:
9d:42:29:77:c9:21:9f:4a:49:19:6e:aa:bf:e9:fe:
26:e2:35:02:bc:43:ea:a2:7d:c0:6c:9f:10:ac:a8:
e3:e1:71:35:fb:71:fe:ae:de:87:db:71:c4:3e:e5:
b5:c4:b0:e8:70:77:e6:92:55:a0:c4:a8:4b:4d:21:
6c:30:e2:09:fa:58:23:28:f7:96:12:72:79:eb:00:
ff:8f:cb:6b:d9:49:6c:42:87:69:0b:08:61:57:5b:
4e:be:a7:c1:a3:28:34:9f:60:85:13:6d:7d:f4:01:
36:f0:7e:f7:14:a1:7c:86:02:4a:4a:90:bb:40:e9:
ac:54:de:7c:92:f1:e1:72:e3:a2:cb:90:7e:e6:b5:
60:c1:e2:c5:a3:d0:70:82:88:b7:b5:0c:e8:59:a6:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:E9:DB:26:9F:72:F6:93:B8:92:3C:CF:CF:24:5F:E3:3F:1C:3D
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:1a:5f:4f:bb:18:a3:08:54:7b:14:7c:22:73:ae:de:b9:7b:
61:83:e0:78:2e:b5:15:7d:76:91:69:47:59:9b:71:98:b8:c1:
aa:7d:cf:e5:59:2e:31:bf:7d:cf:82:60:cf:9e:9f:fd:ec:9b:
f0:31:3d:c4:20:43:10:dc:32:65:dc:70:92:70:73:e4:99:6d:
d4:f9:89:9a:ad:e8:2f:29:74:98:94:92:80:9e:66:94:8e:35:
10:d4:2c:68:dd:44:16:c9:9c:57:d7:eb:6e:01:af:28:1c:f7:
e4:76:46:4e:48:b2:dd:d1:ea:92:23:c2:eb:3f:74:6a:93:53:
b6:94:00:b3:eb:40:d7:82:01:a3:5e:4e:b9:c8:96:ef:0b:38:
0e:53:1d:47:c8:dd:52:8d:c5:8c:b4:08:31:47:69:ab:4d:40:
8a:51:c8:1c:8a:7f:44:2a:56:22:97:35:18:f6:22:49:d4:34:
cc:f8:68:9a:e9:d9:0b:76:0b:d4:39:50:47:4f:13:59:15:4b:
d4:93:61:1f:55:27:85:55:10:5e:5d:5a:2c:02:e2:80:9f:b7:
4c:e3:74:78:c1:6e:52:a5:fd:69:3a:38:f9:47:8b:32:5e:18:
18:54:b4:7e:e2:ed:c4:aa:07:cd:ec:29:60:0d:0b:71:52:d4:
b5:44:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:19 2026 by rpki-client