
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: TYmsJFrHuqPucmaDXsycdRJzMNceowDb1lrx9fu2EG4=
Subject key identifier: CF:91:48:75:DF:00:87:83:73:4F:AA:9B:DB:A2:F8:66:E2:CC:23:76
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 091B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 08E1
Signing time: Fri 18 Sep 2026 20:26:26 +0000
Manifest this update: Fri 18 Sep 2026 20:26:25 +0000
Manifest next update: Fri 25 Sep 2026 20:26:25 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: Yfe08OBH+cxw+0XPvK9f+DZQ61Cy5hrc71Bsn3sMRek=)
2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: nhO3zldVtz1XPOVGFAZXpKFBjV+eqr/i1obHYupDgR8=)
3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: LzXgskniQhad+dad7IeMfaGj3PNcVRfdS6IKvp/jtks=)
4: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: s2NEeRu6U8DeIVUa9m1JE39StaQ7QBWVNUdAUo0eP+0=)
5: 13EFC134D76A11F0B167783877D3641D.roa (hash: OAkDISp2mNvKJaHX0l4tkxZfgV8Eyg2s2MQ8sT5pfZo=)
6: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: x0AyEGZhy26k8z246Jc2VasCzp5sbmspaH+OtYNOEWs=)
7: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: PfHDw4DaRqC2ZXMq4ARTCCLzrWQSRZK6GUEI+hjUiAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Sep 18 20:26:25 2026 GMT
Not After : Sep 25 20:26:25 2026 GMT
Subject: CN=6aad9e71-9f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:db:64:2d:07:0f:e3:2a:88:b1:87:c9:7f:
59:8b:20:39:c3:b0:a5:43:bb:b7:46:73:18:d7:af:
c0:ab:33:5d:8f:fd:53:df:89:71:33:d5:10:6e:9c:
ee:c2:de:6b:28:d9:9a:c1:d9:13:62:43:d3:a9:34:
c6:fa:d1:a4:a4:cb:d9:43:69:93:09:ce:1d:4a:1c:
7e:97:b9:b4:91:9e:99:c2:a1:ce:d0:bf:ba:e1:55:
6e:85:d5:be:d5:21:58:10:b1:98:b8:15:a4:55:37:
09:16:01:06:71:86:79:d2:af:51:6e:98:d9:e8:cd:
be:75:af:33:80:bb:e8:90:fc:83:e3:92:bc:28:6d:
1a:f7:25:00:bb:fe:75:4f:c8:55:56:c8:84:53:01:
80:67:1f:03:88:69:6a:f8:02:40:12:82:fa:f2:7b:
f9:59:c9:d8:e5:04:24:a5:e3:7c:e2:79:31:12:94:
c1:0e:11:2b:e2:84:eb:b8:e6:ac:db:8f:3c:b6:00:
cd:ad:a6:5e:b4:31:32:14:d6:c3:ca:2d:58:8f:a0:
9d:f9:37:54:15:d7:bf:59:02:d5:07:32:a9:97:82:
48:f0:1d:a7:92:37:cf:ec:dd:d0:c6:4d:49:98:d1:
7b:e5:14:29:5d:02:76:4c:67:d3:86:c8:8c:17:86:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:91:48:75:DF:00:87:83:73:4F:AA:9B:DB:A2:F8:66:E2:CC:23:76
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:05:7a:21:43:74:60:da:9b:4c:71:62:44:dc:1e:cc:06:
41:79:25:67:bb:50:51:ae:67:5a:6d:2e:50:78:35:02:88:4f:
17:51:27:57:cf:d9:46:ba:3e:71:8b:b5:9c:4d:18:c2:26:ed:
ed:89:52:72:8f:ac:75:23:50:15:3a:31:97:ab:dd:64:92:65:
aa:88:53:db:05:3f:b4:dd:66:d7:56:85:da:94:a1:19:2b:5c:
1f:cf:59:ec:e6:98:b5:41:70:3b:b1:73:76:f3:d9:85:fe:59:
b1:24:36:46:25:2e:88:73:3a:7c:2f:e0:c1:b6:9b:22:f0:70:
47:93:93:65:92:98:6b:aa:8d:95:a3:be:35:0d:22:55:cd:1f:
90:4f:50:34:a3:81:af:1f:68:ea:e4:b8:59:9a:22:5b:e1:75:
a3:d8:b8:2a:61:e6:15:b9:e7:3b:e8:77:5f:bb:80:a3:47:4b:
c0:2d:09:d7:4e:05:7b:8f:0d:0e:7d:d7:ef:bc:c4:c5:8d:79:
2b:b6:23:3f:68:97:b9:55:44:84:06:25:1e:14:90:93:6e:83:
17:8c:99:01:15:84:8e:ef:9f:f9:da:98:59:f0:0c:39:c9:3c:
ba:56:6e:81:80:6c:dc:4b:c0:cd:ad:ba:55:70:a8:dc:47:23:
e9:ac:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:35:58 2026 by rpki-client