
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier: yU3l80uR2J+dCzZUOYmJaofoaNdtHow1PrMGX778KvU=
Subject key identifier: B7:29:F8:4D:45:70:4F:70:37:3A:0D:29:30:2E:80:6C:D5:84:9E:E3
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial: 0D05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number: 0CEA
Signing time: Mon 02 Mar 2026 01:06:02 +0000
Manifest this update: Mon 02 Mar 2026 01:06:01 +0000
Manifest next update: Mon 09 Mar 2026 01:06:01 +0000
Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: e4sUD9p14emsd9iB3SNpr+PDcd6X0vpokX7bOpcAvq8=)
2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: hBVlKog5sRwEaP/MDsz0qoe8RZcUtfVi0W/VBym4um0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Validity
Not Before: Mar 2 01:06:01 2026 GMT
Not After : Mar 9 01:06:01 2026 GMT
Subject: CN=69a4e27a-a8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:b6:9e:a2:94:fd:e3:6a:9b:3c:9c:d1:0a:
db:d3:6a:0f:e7:12:19:a0:85:d9:1a:c3:7d:9c:d3:
24:31:b3:57:be:17:33:51:13:b7:31:4f:d4:f2:90:
42:f1:a7:76:63:e6:cd:52:6b:e1:51:1f:2b:53:ff:
6c:3b:68:51:ad:30:a1:89:37:dd:9e:48:15:1d:2f:
57:a5:8b:7b:da:1f:66:59:6d:9f:c0:db:a9:74:ea:
0a:ae:53:b3:33:29:4c:d7:0c:32:a2:7f:3f:99:b5:
aa:03:14:22:52:f0:3d:95:03:8a:72:f6:bd:4d:7d:
ab:63:49:0b:43:69:17:ba:6a:89:5a:61:08:a3:13:
f6:bf:ec:3a:cc:6d:51:95:80:27:2d:2f:57:1f:65:
2a:67:55:22:1f:ac:45:d5:98:ab:38:ab:ef:7b:b7:
67:c1:f3:67:58:8c:70:44:7b:bb:a3:79:fc:9a:90:
2b:8c:cc:92:c2:f7:e6:5d:7d:9d:af:73:8c:4f:ef:
42:b6:84:17:e4:e1:9c:a3:ce:a9:10:57:2c:d5:95:
ea:76:a7:65:33:cb:59:96:3d:69:50:a7:fd:9d:8c:
42:30:51:83:fa:89:63:bd:9c:5b:f3:05:90:0b:8d:
e4:7a:a5:db:21:35:2f:ed:3a:3e:34:54:ef:7a:a7:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:F8:4D:45:70:4F:70:37:3A:0D:29:30:2E:80:6C:D5:84:9E:E3
X509v3 Authority Key Identifier:
keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:3c:22:98:7a:6c:d0:e9:76:16:0c:11:ba:6d:53:a8:78:
9b:2d:ea:21:d2:12:ff:62:58:01:cf:7b:e1:77:de:be:d7:ea:
c4:ae:0a:5f:10:69:d0:41:57:55:aa:1b:66:a2:07:07:58:5a:
0a:41:22:65:99:fc:8a:11:04:69:e1:1c:db:80:63:04:3d:7e:
b3:ae:89:81:60:a2:f8:d0:a1:29:c1:0d:cc:4c:e4:cb:c4:2a:
f2:97:89:54:a6:d5:00:2e:95:10:49:a8:b7:4f:3d:5e:ca:d5:
df:4d:38:86:67:61:97:19:87:b4:4a:71:34:4b:49:6b:11:53:
7f:2a:26:46:cd:cc:e1:ed:85:93:5d:6b:70:47:5a:a5:c4:c8:
03:b3:49:1b:a3:cd:61:03:0a:f6:e9:51:0e:fa:e0:30:eb:37:
63:e4:db:6f:3c:36:ba:07:ae:03:b1:27:d6:8d:0c:f7:fc:23:
f0:4b:77:72:3f:90:50:9f:32:76:bb:a0:e4:6a:0f:ef:27:b3:
8e:3a:b1:55:cd:41:b7:d7:80:54:52:63:3e:43:ad:21:60:2a:
09:dc:d8:23:d8:33:66:ef:72:99:a2:b5:06:20:af:b0:86:ba:
a2:dd:aa:8a:34:6b:fc:cc:57:b6:0e:14:b6:78:c3:b8:51:76:
d3:1d:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:54 2026 by rpki-client