
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier: 4etCwek/AF3DatSGRs3PtMzzNeG4OFWWib2ffPmbBVM=
Subject key identifier: 60:55:50:93:7C:7A:02:0F:EE:41:E4:A1:C0:5E:20:95:60:F9:FC:0F
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial: 0D54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number: 0D38
Signing time: Tue 28 Jul 2026 18:22:11 +0000
Manifest this update: Tue 28 Jul 2026 18:22:10 +0000
Manifest next update: Tue 04 Aug 2026 18:22:10 +0000
Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: RA4DVaheA0f+kWHzAe5Ty5o+Ael6+cFjXudS7K67lRQ=)
2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: H6dj7xFFUstXgEpSczjVXVqVRfoxR53Jp0gN3RANW6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3412 (0xd54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Validity
Not Before: Jul 28 18:22:10 2026 GMT
Not After : Aug 4 18:22:10 2026 GMT
Subject: CN=6a68f352-adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:30:a8:ff:12:58:39:5f:a3:cc:c4:94:b1:
f9:70:92:ef:6a:54:3a:f3:d0:0f:bf:64:4d:12:c3:
1c:7f:f3:78:8f:97:12:90:9c:43:26:e6:e7:d0:4b:
75:a5:67:ca:c7:cf:5c:82:f8:56:06:32:02:16:36:
12:b2:20:23:89:72:12:c7:47:55:0f:82:7d:ed:c1:
dd:73:94:34:28:2f:ad:40:27:33:36:fb:a6:ba:c0:
44:df:cc:78:f2:ca:4e:3f:07:23:b1:83:c2:95:a7:
97:89:7e:62:1c:61:9e:6c:d8:a1:8b:b8:d3:7e:b0:
4c:13:fe:84:54:ca:63:67:1a:8e:54:ab:59:75:cd:
f9:51:4f:26:8d:d4:38:9d:b2:85:75:6a:5c:f3:f9:
ab:9a:e9:c1:1b:77:6e:b4:bb:4c:fb:b8:06:b8:77:
12:f7:05:ed:21:60:60:48:b1:36:93:2b:68:0a:94:
08:66:bd:55:ef:19:5b:90:c8:da:b9:42:93:07:6f:
ad:ba:0e:88:c8:d2:62:1a:f6:98:fa:98:47:d5:d4:
99:4f:a4:27:9f:fb:6d:1a:1b:68:65:4e:1d:e5:ed:
31:32:8b:65:06:89:05:86:cb:77:c9:f6:71:b3:3a:
6c:28:89:54:01:1f:c5:97:ac:6c:2c:0e:1e:17:e9:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:50:93:7C:7A:02:0F:EE:41:E4:A1:C0:5E:20:95:60:F9:FC:0F
X509v3 Authority Key Identifier:
keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ac:93:c7:83:3a:65:0c:d9:35:59:b6:3c:43:e7:bf:f2:8b:
e3:95:5e:c1:a6:12:03:be:55:99:e0:0f:56:b8:61:30:02:1a:
b5:70:6c:f1:71:49:c0:95:53:e9:d3:2b:6d:48:63:44:76:3d:
16:01:90:22:f5:b5:09:91:a3:c2:36:ea:5c:f5:a8:a2:e3:43:
ed:6f:27:7d:88:18:a2:8f:0e:85:41:9b:09:b6:7d:6b:fe:33:
f4:1f:7a:f3:86:66:88:68:98:b6:66:c5:25:04:ba:85:87:2b:
33:53:1e:c1:e9:32:7f:fd:fc:38:01:97:eb:dd:7f:9d:a1:13:
f5:56:b4:de:f0:db:5b:3f:74:40:02:7d:b3:51:dc:bf:03:dd:
ae:1a:be:05:bc:ec:2f:0d:41:ef:7d:30:77:bd:ff:f3:81:8b:
da:40:27:0a:bf:b3:34:dd:59:d9:ab:dc:d2:aa:5f:4c:02:c3:
09:d0:ae:43:aa:04:0f:7e:b8:bf:69:8e:3d:0e:d5:85:cf:b1:
75:37:d4:c0:b4:b3:b2:06:9c:51:b5:b7:bd:49:de:10:78:36:
87:69:d7:ac:25:c6:3a:3c:5b:b2:b8:76:38:a1:59:01:7e:b9:
ef:ad:b3:f7:58:5b:a0:4e:11:11:ad:18:be:33:aa:5d:6a:ad:
93:19:8c:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy
QzYwMDQ2MzgwHhcNMjYwNzI4MTgyMjEwWhcNMjYwODA0MTgyMjEwWjAYMRYwFAYD
VQQDEw02YTY4ZjM1Mi1hZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmkwqP8SWDlfo8zElLH5cJLvalQ689APv2RNEsMcf/N4j5cSkJxDJubn0Et1
pWfKx89cgvhWBjICFjYSsiAjiXISx0dVD4J97cHdc5Q0KC+tQCczNvumusBE38x4
8spOPwcjsYPClaeXiX5iHGGebNihi7jTfrBME/6EVMpjZxqOVKtZdc35UU8mjdQ4
nbKFdWpc8/mrmunBG3dutLtM+7gGuHcS9wXtIWBgSLE2kytoCpQIZr1V7xlbkMja
uUKTB2+tug6IyNJiGvaY+phH1dSZT6Qnn/ttGhtoZU4d5e0xMotlBokFhst3yfZx
szpsKIlUAR/Fl6xsLA4eF+nDaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBVUJN8
egIP7kHkocBeIJVg+fwPMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2
MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI
QjJXMDVoMS11YklzWUFSamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuqyTx4M6ZQzZNVm2PEPnv/KL45VewaYSA75VmeAPVrhhMAIatXBs8XFJwJVT
6dMrbUhjRHY9FgGQIvW1CZGjwjbqXPWoouND7W8nfYgYoo8OhUGbCbZ9a/4z9B96
84ZmiGiYtmbFJQS6hYcrM1Mewekyf/38OAGX691/naET9Va03vDbWz90QAJ9s1Hc
vwPdrhq+BbzsLw1B730wd73/84GL2kAnCr+zNN1Z2avc0qpfTALDCdCuQ6oED364
v2mOPQ7Vhc+xdTfUwLSzsgacUbW3vUneEHg2h2nXrCXGOjxbsrh2OKFZAX65762z
91hboE4REa0YvjOqXWqtkxmM2A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:16 2026 by rpki-client