
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: MKVhI1gp7arN15pdMtnaGS8fBe2ehqLJ/iTBS9qW6TM=
Subject key identifier: 90:08:C8:26:22:4B:EA:FC:3E:B9:43:31:3D:C9:99:49:27:18:A6:15
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 08BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 088C
Signing time: Thu 16 Apr 2026 20:34:00 +0000
Manifest this update: Thu 16 Apr 2026 20:33:59 +0000
Manifest next update: Thu 23 Apr 2026 20:33:59 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: 1c+VWxB7GIcBzEtrHq/v4O72yar9E0MctlrX5UGVtVI=)
2: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: O+JwB/SEAHAqD7WtU6nBxA0f+/QZlJ1WVpx3bHligPk=)
3: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: 4516lLcwdbhs9raS1s1qYezVIgjpvS8lGp3X+O41JmI=)
4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: MEH+/hoe8OY25Wy/4OSxzZr0rDbZRuSg03Fo8orAav8=)
5: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: oF66sE4VVdSppAlWLDJZOCJCTi3cKgb7nU6uP9HE/vw=)
6: 13EFC134D76A11F0B167783877D3641D.roa (hash: kVjqo5zG4uUJol2yH/Uy+gEkSnM8vZ/R3aNHFvH1mGM=)
7: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: uuc/6Rzby9wnILe/qRPLJpCHKAxsiYD3RMUjHfhtRhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Apr 16 20:33:59 2026 GMT
Not After : Apr 23 20:33:59 2026 GMT
Subject: CN=69e147b7-5ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:8a:fa:53:52:56:ad:7d:fa:78:fa:0a:a8:
19:fe:5e:e9:44:75:33:4d:b1:b9:2f:92:7a:da:be:
46:29:e2:c2:a7:c3:0e:20:4d:4e:ec:7d:6f:ff:eb:
85:90:be:23:6a:93:b7:df:0c:d0:18:55:42:e6:87:
0b:da:dd:f4:5e:68:3b:11:0c:1d:4f:9f:17:d5:71:
7c:59:c7:49:62:3b:32:76:ab:fe:33:51:35:ac:f6:
c3:af:d3:25:7a:08:46:5c:16:33:54:a2:29:ab:2e:
db:8d:ca:04:63:f6:04:04:51:d1:42:7a:9b:f8:29:
b9:e1:13:c9:4a:5b:64:e2:d1:a7:34:54:ce:83:7f:
0d:14:a4:8d:2c:77:e8:e5:00:d2:f3:0c:49:a3:a6:
d1:67:2e:fa:7f:46:ef:ce:db:eb:f7:1f:52:0c:ce:
9c:95:01:8a:32:44:46:89:55:d5:b5:ac:2a:90:89:
99:b4:23:d5:13:ff:08:c4:94:46:af:f2:b1:b3:5c:
79:6b:58:ce:3a:32:e6:0b:e2:20:2c:79:7f:67:e8:
1e:b4:36:9c:0f:a4:0e:3c:91:38:fc:f4:e2:58:0a:
b8:81:e2:5f:c2:44:fc:dd:f7:68:48:e6:34:89:2c:
0e:89:bd:bc:75:cb:66:6b:62:38:7d:4b:00:df:17:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:08:C8:26:22:4B:EA:FC:3E:B9:43:31:3D:C9:99:49:27:18:A6:15
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:07:b3:c4:ce:c8:02:6c:5c:25:b8:48:b7:d8:b4:ef:42:
83:8b:38:dc:dc:b4:f8:21:52:09:0b:16:76:b5:6f:93:3c:9a:
36:ed:9c:40:77:35:12:55:3d:5a:c3:70:49:62:78:de:8f:5e:
d9:7d:93:fa:82:b2:3a:ca:3a:9e:f1:3a:1f:b5:cb:49:2b:ec:
77:62:34:7e:fc:8c:d8:b2:b4:74:02:8f:95:6b:a7:56:1e:24:
5b:92:de:29:dd:d8:9e:19:4f:50:56:70:cd:cc:96:ba:35:fe:
1f:35:e0:4e:d2:a2:10:51:8f:b1:af:7e:97:06:1e:e7:90:bc:
da:49:31:93:a4:bc:68:13:7f:e8:52:05:f3:74:a7:44:c8:d4:
8a:5a:c3:d4:ab:58:60:39:43:0f:f7:69:79:10:99:5c:2c:9a:
a7:03:ca:38:43:3a:d6:5e:7c:f4:f0:e0:1f:b0:2c:48:6b:d7:
fa:46:b1:7d:b5:57:8d:4e:1e:fb:3c:91:f9:22:34:29:ee:cd:
ed:03:9d:1b:31:3b:f2:e2:b4:47:ef:3d:3e:08:f7:06:6e:7e:
17:f5:27:c6:79:7d:cc:99:d4:c5:52:05:01:c8:d5:ad:a9:98:
ef:c0:91:20:68:02:01:03:a9:dd:44:16:f1:68:7c:9d:71:f1:
39:34:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:23 2026 by rpki-client