
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: bXVOokeyJboxdl3uXwWFas/LCfV03xantrOBl+0dv9U=
Subject key identifier: DC:8D:D2:5B:CA:EE:0B:47:0B:37:09:F5:51:C3:A6:A9:F7:23:AF:54
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 0900
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 08C6
Signing time: Tue 28 Jul 2026 20:56:06 +0000
Manifest this update: Tue 28 Jul 2026 20:56:05 +0000
Manifest next update: Tue 04 Aug 2026 20:56:05 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: esApk7UF1jBPWMGt3qqSEmsGs4xZKwks5DXSsbfy23U=)
2: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: x0AyEGZhy26k8z246Jc2VasCzp5sbmspaH+OtYNOEWs=)
3: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: PfHDw4DaRqC2ZXMq4ARTCCLzrWQSRZK6GUEI+hjUiAU=)
4: 13EFC134D76A11F0B167783877D3641D.roa (hash: OAkDISp2mNvKJaHX0l4tkxZfgV8Eyg2s2MQ8sT5pfZo=)
5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: s2NEeRu6U8DeIVUa9m1JE39StaQ7QBWVNUdAUo0eP+0=)
6: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: nhO3zldVtz1XPOVGFAZXpKFBjV+eqr/i1obHYupDgR8=)
7: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: LzXgskniQhad+dad7IeMfaGj3PNcVRfdS6IKvp/jtks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Jul 28 20:56:05 2026 GMT
Not After : Aug 4 20:56:05 2026 GMT
Subject: CN=6a691766-6b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:7b:d8:f4:12:52:77:e5:ef:4e:ce:9d:21:
b3:4f:00:23:38:a3:b1:2c:15:21:21:93:6f:70:5b:
30:85:49:9f:e2:b0:ed:f0:f5:67:8c:f0:54:be:72:
41:7a:2f:80:1f:a9:e5:09:fb:f7:97:9f:d7:d2:9a:
3c:f7:9a:c3:b9:bc:37:17:eb:2d:ef:c0:31:74:17:
e2:b5:e9:42:d3:9b:e1:8b:d7:2c:3c:e5:52:82:0d:
72:aa:66:54:37:22:ed:57:9d:92:12:b0:d8:e8:d6:
29:85:99:a1:89:10:85:fa:3c:c4:bd:5e:2c:ef:b5:
57:17:30:34:23:bd:46:ab:03:2a:1e:6f:e1:7d:83:
f8:06:62:13:dd:c4:55:b5:61:01:ba:0c:ff:70:73:
23:db:62:bf:00:c1:55:c1:1f:68:7e:1b:99:fb:c0:
04:e4:75:5b:bf:68:69:8e:4f:c2:50:34:5e:5f:14:
f2:38:fa:85:4b:dd:33:90:83:d7:c0:32:15:a9:50:
24:2c:49:4d:bb:b5:de:aa:aa:22:68:23:c0:72:36:
a7:8d:47:01:cb:7b:87:29:6e:83:00:77:ab:20:7e:
0d:4f:93:b6:92:bb:a1:4d:fe:a0:aa:61:5a:ab:84:
0f:00:4e:51:10:05:27:45:11:e2:69:9e:e5:35:7e:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:D2:5B:CA:EE:0B:47:0B:37:09:F5:51:C3:A6:A9:F7:23:AF:54
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:93:74:3c:e7:77:7e:3a:23:cb:7e:f7:8f:62:0a:8c:bd:f3:
92:cd:e0:7d:73:c4:47:fb:df:9a:15:37:5b:4d:f6:52:42:1f:
af:97:9e:97:10:36:c1:63:46:e9:71:2a:be:39:16:59:67:ac:
76:7a:7b:69:87:97:10:8e:80:81:93:fa:bc:b4:3a:69:5d:ec:
42:bb:1d:35:96:33:58:cf:44:93:a8:4e:fa:40:e9:53:40:fb:
cf:b0:f6:37:3e:5e:3e:21:3f:b7:c2:96:85:6a:c0:5d:6c:52:
b4:8b:a0:35:f5:aa:1c:49:7c:8a:d2:c2:a6:27:fc:45:2a:be:
e9:a2:21:e9:8c:b2:52:23:c0:7e:41:ad:91:fb:56:f6:e0:06:
15:40:d7:03:a1:fa:f5:d9:99:59:81:a6:dc:89:34:25:68:00:
74:44:b6:5d:97:a2:e7:ba:b6:c3:47:f8:ca:c2:12:2b:04:ea:
68:90:06:f7:89:71:a7:05:23:69:a0:a5:84:b5:df:f8:de:09:
32:97:80:bd:c8:3c:8d:e8:06:4b:e8:29:d6:54:c5:a2:b5:42:
d3:7c:37:47:19:b2:e8:3a:e8:05:eb:c6:02:88:54:c3:f4:b6:
47:fd:13:87:98:6f:36:4f:c1:65:41:b6:d8:de:24:39:56:49:
21:00:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:50 2026 by rpki-client