
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: eSQz5toFsnXdl+I0LISRdtommmcrwtPHHBRrNLEqyy4=
Subject key identifier: 89:A6:5F:E8:09:4F:6D:1B:AE:22:61:DC:6C:3B:B3:A0:94:87:E8:C3
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 0254
Signing time: Sun 27 Sep 2026 02:42:20 +0000
Manifest this update: Sun 27 Sep 2026 02:42:19 +0000
Manifest next update: Sun 04 Oct 2026 02:42:19 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: s+TXSMait/9QUVCeBvGv4eOpus8XuFIZJRK5eEbQI1A=)
2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: AZUii1T6oGVh2l0OyOK0i0t9NH91aYMJ778UK9MmIlI=)
3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: q5zOvT4EolzxJnpWJZXj87BdcVRbnQ7M7O7aI2ns0Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Sep 27 02:42:19 2026 GMT
Not After : Oct 4 02:42:19 2026 GMT
Subject: CN=6ab8828c-6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:81:88:ad:dc:8b:17:cc:ea:b6:89:a0:b2:
a9:2d:42:84:d0:11:54:00:87:82:f7:51:1c:70:d0:
51:44:89:9e:38:1f:4b:a3:e2:a2:80:7a:71:a5:60:
ee:fb:56:0e:59:69:9e:2a:6d:8c:26:41:4e:16:c8:
a0:1f:9d:4d:e3:1d:70:19:5a:89:56:c5:13:37:89:
f5:64:7b:05:c8:0d:27:89:d6:bf:05:84:e0:27:cc:
b8:9d:eb:dd:a2:fb:63:55:14:ef:fd:2f:9a:a9:d6:
43:89:db:9b:38:f7:65:5b:e9:f4:0f:3f:9c:00:b2:
4e:bd:80:5b:0f:4f:9c:39:4b:88:8a:7a:bf:c4:a5:
70:d4:14:e0:5e:48:e9:29:a4:3b:6d:d8:02:00:f8:
f0:e9:de:cb:4a:4b:fa:db:52:97:36:73:f4:cc:f1:
b3:86:25:5b:b8:30:49:3e:62:05:09:37:ee:5f:9f:
51:93:54:83:ce:32:c8:b1:cb:7a:57:2a:81:24:72:
4c:4f:8b:a9:7d:19:a4:b8:01:dc:0b:6b:9e:b2:de:
ee:34:50:b6:bc:83:51:0e:b4:ec:65:5a:f2:8a:38:
ba:13:2f:13:2b:8f:96:58:ec:ef:2d:ef:73:c1:d1:
fd:10:7e:76:3a:38:5a:f3:84:99:73:93:34:f1:a6:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:5F:E8:09:4F:6D:1B:AE:22:61:DC:6C:3B:B3:A0:94:87:E8:C3
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ae:70:37:83:ca:52:44:0f:ec:f7:4e:61:1f:f5:59:7c:9f:
ef:0a:14:13:5e:c8:1e:a4:63:9a:53:a8:67:cd:b1:e6:cb:36:
4b:98:5c:db:4b:15:56:f2:98:0d:06:5f:f4:0e:60:78:07:04:
fd:1d:5e:a1:6e:77:4a:2a:66:18:33:49:ca:b4:ce:61:92:47:
25:46:d4:08:c0:2e:c0:1c:21:35:f2:d2:8b:2f:ed:a7:75:9f:
a2:6a:02:f6:e6:e0:12:7e:71:8c:0c:53:15:73:a5:6b:9d:bb:
08:6e:01:2e:89:ee:48:95:bc:11:f8:83:7b:6a:8c:10:f0:0b:
6a:34:7a:06:13:5a:92:41:1b:54:44:a5:98:7a:70:93:8f:60:
b4:61:0d:7a:f7:07:ca:a0:46:86:3f:32:22:bd:1f:ea:5c:da:
e3:f4:77:0e:55:e7:ef:f4:25:7a:c7:f1:b4:44:14:b6:12:7c:
d4:52:c8:10:f3:46:9d:98:09:51:dc:18:28:c3:0b:c5:bd:75:
6c:e8:2d:86:d0:43:d6:1d:c5:a0:95:f1:a0:3c:cd:93:36:b1:
00:43:24:76:a8:8d:2b:c6:c2:fc:51:b3:8f:46:27:22:c8:e2:
1c:27:50:fa:bc:ec:6a:cd:ee:0e:b7:a0:e6:0a:59:42:db:16:
02:94:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:46:34 2026 by rpki-client