
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: 6fO9thTLdc/bfe9exHEOVE0UQVRKgpZ6vDcOzco42vQ=
Subject key identifier: 0B:84:CE:6E:4B:B2:5D:85:7C:49:D8:A3:3E:0A:9E:A2:B7:2C:B4:E0
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 01E6
Signing time: Sun 01 Mar 2026 04:11:13 +0000
Manifest this update: Sun 01 Mar 2026 04:11:13 +0000
Manifest next update: Sun 08 Mar 2026 04:11:13 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: SjMfdmftc9kACwYQdVwNGBx6pXAsdVS+GkOfGHrTH60=)
2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: ArfhB2PhVsHpBnCuxTAZaN9fEqhnqfH2tcV0KRWRM8s=)
3: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: fV4R5q8jmyaZ1y6M6EGHK7qWH/l+INutGWYgcX5lTMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Mar 1 04:11:13 2026 GMT
Not After : Mar 8 04:11:13 2026 GMT
Subject: CN=69a3bc61-3713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:be:23:72:2f:59:88:d3:42:5f:01:1c:a9:
72:b1:e3:67:08:2a:ed:de:6f:1c:c1:46:17:c1:8a:
27:97:7d:c7:46:2a:ed:b1:b2:98:35:47:1d:64:2f:
b2:4c:24:44:83:84:69:15:8e:14:c0:ae:a8:24:72:
60:09:df:4a:17:ab:61:db:b8:0d:94:d2:82:8d:df:
cf:90:9d:0b:0a:9b:63:bb:ff:70:f6:19:7a:08:25:
f5:1d:5a:8f:26:06:c1:dc:47:75:d4:94:a4:06:7b:
47:c8:b4:02:96:4d:ee:83:93:16:0c:a5:de:23:6e:
2f:e2:f6:e4:5d:c5:5e:e0:fd:36:ca:0d:1b:25:dd:
f8:c1:a7:b8:2e:90:f8:0a:a8:b5:45:28:3c:d6:01:
4c:57:61:a2:cc:9a:95:e7:6f:a1:0c:ba:f6:8f:3d:
67:9f:75:fb:1c:3f:d2:d6:5b:b6:71:07:82:cc:21:
b5:6f:54:dd:c9:a4:91:2d:f3:58:e0:46:94:e0:8d:
01:75:9f:9b:3f:d7:7c:d3:28:72:55:c4:0d:8d:09:
ff:e0:99:e8:f2:71:9d:9a:d8:92:ae:0d:9c:b2:b4:
c0:a8:f8:0f:ca:5d:5a:47:eb:0d:f0:93:01:41:65:
00:e0:b3:14:c4:ef:dd:87:d6:56:1a:1c:a3:63:ed:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:CE:6E:4B:B2:5D:85:7C:49:D8:A3:3E:0A:9E:A2:B7:2C:B4:E0
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:bb:b9:a7:b1:3f:d9:c1:62:cb:35:99:61:a4:a8:38:26:
59:95:47:98:7a:23:cf:94:f0:0b:46:ba:0b:33:83:e9:f7:b5:
13:48:15:11:83:2d:8b:6d:2f:8b:8b:2a:54:a8:e8:10:d4:3c:
7c:c1:0e:f8:a5:19:54:cf:fe:f3:7b:a4:50:95:3f:9c:76:a8:
11:b6:ef:9c:ff:fc:ea:d5:9d:6a:8c:34:ab:18:ea:3f:5c:14:
9b:c8:6e:50:5b:de:6d:33:68:b4:98:a1:d3:2a:96:6b:08:fc:
4c:6a:c4:ca:b0:00:35:94:4a:4c:2a:db:49:55:66:9e:84:52:
e6:d1:d2:53:c7:fa:df:c9:b1:1e:1f:f6:a3:04:02:cc:a7:fd:
67:b0:03:de:fa:8d:e3:fd:3c:1f:17:50:c1:ec:f3:92:a1:23:
28:9f:a5:3f:3b:14:a7:93:14:aa:6e:be:7d:b8:6a:f9:e0:ed:
3e:33:47:2f:4c:05:0e:59:f7:52:76:db:18:81:a7:68:48:43:
3f:0b:c4:2b:7d:06:4c:fc:73:2b:cb:bf:86:b4:65:8f:e3:36:
fa:80:9e:d9:34:f5:66:d1:06:4d:81:0c:bb:41:5a:ee:9a:ef:
a1:e9:51:a9:44:13:b0:0d:0b:a6:06:75:99:cb:96:0e:08:ff:
6f:bb:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:56 2026 by rpki-client