
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json)
Hash identifier: mJgwj0pEnmBWnv1MeaOoYW2HZFIs+/9gnJpbPl6qSVg=
Subject key identifier: 20:95:9F:1B:37:CB:A5:68:2A:09:8B:30:61:70:44:17:56:DB:52:B8
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
Manifest number: 0191
Signing time: Sat 13 Jun 2026 04:23:42 +0000
Manifest this update: Sat 13 Jun 2026 04:23:42 +0000
Manifest next update: Sat 20 Jun 2026 04:23:42 +0000
Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: iUrzNb6NgKrtW97/uNv9ixYEkctqGNtSMsHU1PAZrsw=)
2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: MmWFM1dURxQD1o2oF69cp1HxMUdsdeEfUuFqXRdwgSw=)
3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: QctUwaISCCsjTsg8d6+OCTF1bXP6fQ+c0E+PJuOqkfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Validity
Not Before: Jun 13 04:23:42 2026 GMT
Not After : Jun 20 04:23:42 2026 GMT
Subject: CN=6a2cdb4e-1ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:5a:a6:52:46:0b:4d:66:08:bf:9d:9b:5b:
90:3c:fd:20:72:92:ca:8b:ea:11:e3:37:de:2f:6c:
91:0b:e2:40:6a:b9:47:b6:0a:1f:76:71:74:3b:c3:
4d:35:11:d8:92:2b:2f:fb:89:d7:a2:7c:b7:4d:6e:
11:cb:de:07:b8:2e:ac:5f:78:0c:9d:6f:11:b0:f7:
11:fb:22:48:c0:4f:38:ed:70:ef:94:3d:ec:3b:b6:
16:23:16:1e:db:c3:00:55:15:a2:7c:f0:73:c6:1f:
28:5d:00:9d:5b:8c:02:c6:b5:ed:49:80:b5:a7:7d:
59:6e:f9:e8:9b:04:c6:13:b4:93:9b:5b:44:95:27:
2d:44:16:bd:49:c8:96:a8:1b:54:53:7d:d6:c9:54:
0d:97:90:ea:a3:6c:e8:82:25:e5:0c:0f:72:4c:0f:
80:e4:47:e8:3f:e9:9a:0d:f9:d5:0c:81:be:55:0a:
a3:90:62:43:80:b8:cb:78:ea:5c:80:e9:35:1f:97:
4d:51:32:e9:73:60:fa:70:bd:a9:9a:20:4e:06:89:
66:56:af:23:ab:2b:06:95:0a:ce:8e:c8:3e:a8:04:
7f:12:7f:d9:4c:c8:fc:ab:16:ed:ee:49:4c:20:62:
32:93:b3:a6:b5:e0:7e:c4:57:d0:a9:31:ec:79:1e:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:9F:1B:37:CB:A5:68:2A:09:8B:30:61:70:44:17:56:DB:52:B8
X509v3 Authority Key Identifier:
keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ba:2e:ea:c4:71:ee:52:7e:3d:40:89:f2:a4:0b:7a:41:c3:
7b:14:12:8a:98:f7:9c:50:fd:d0:ef:89:5d:60:f2:14:ac:b2:
bb:ec:10:28:89:eb:1b:82:47:34:5e:b1:49:80:fa:c0:bf:b8:
9c:2a:04:0b:bd:16:41:b4:e2:de:73:ca:45:21:24:ae:c5:cc:
9b:8a:54:58:e0:4f:de:6d:3b:6f:6d:b1:50:55:7a:a2:c2:cb:
be:92:7c:8f:fe:51:7a:38:8d:98:00:26:8e:b3:ba:d6:b0:b3:
8e:03:68:14:82:40:37:48:3b:bd:10:d0:e4:14:70:46:e4:8c:
61:e2:d1:b6:3e:81:6e:77:3a:95:48:62:9c:45:8f:e2:93:ce:
bd:23:d6:b9:13:3a:fd:83:db:34:1f:26:e0:98:68:4f:12:b1:
d9:f0:cd:c2:e9:ed:1a:3a:65:3b:71:af:c6:cb:d9:db:56:82:
b1:d6:83:91:4f:f2:5b:81:9c:ba:70:98:57:02:c6:1c:4e:88:
ff:46:a6:4c:ad:19:20:1a:54:51:95:95:ee:f4:1a:2b:41:f8:
2e:8b:f1:e6:e1:3e:8c:3f:79:81:53:8a:22:6a:87:03:5b:0d:
03:b1:48:b9:22:72:72:b0:44:9e:a9:d3:83:c0:74:8f:66:94:
c8:1e:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:55 2026 by rpki-client