
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json)
Hash identifier: Sxv3vog1h4DARH/bCpYTyN0GTtnTegzenXGcM23qjWA=
Subject key identifier: 2A:39:E9:27:EB:1F:C8:4E:4F:BF:BD:36:FD:DC:9F:F4:D5:3B:6C:5B
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
Manifest number: 0338
Signing time: Fri 17 Apr 2026 03:59:25 +0000
Manifest this update: Fri 17 Apr 2026 03:59:25 +0000
Manifest next update: Fri 24 Apr 2026 03:59:25 +0000
Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: 2hS4Iltu16Cqw4DHvwfLS6uYx3wV2IFFKpNo0z7Sygk=)
2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Validity
Not Before: Apr 17 03:59:25 2026 GMT
Not After : Apr 24 03:59:25 2026 GMT
Subject: CN=69e1b01d-dcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:21:76:68:c5:df:17:0e:b6:c0:1d:63:63:
8f:3d:21:15:42:35:38:9a:f8:18:a0:5f:2c:f5:b4:
d9:e6:51:5e:c9:9a:af:e4:5e:0f:72:93:90:d4:59:
42:b6:d5:5b:26:7f:df:f3:4f:ba:f1:58:bb:b8:62:
db:56:22:11:0c:aa:78:7d:f5:1f:b3:75:18:eb:d4:
17:47:ac:c4:89:0f:86:19:46:81:94:5f:4b:fe:de:
dd:c5:35:72:23:14:56:24:82:67:35:bd:53:1e:19:
68:01:b1:b7:e6:16:45:32:bd:9b:fb:13:66:16:f2:
77:00:9a:56:dc:27:f1:ad:da:9a:6c:0e:91:98:b8:
be:89:89:32:93:15:cb:59:7d:c7:0c:ff:eb:3f:c8:
3e:14:b1:ac:76:61:c4:87:f5:99:46:8d:e2:12:ec:
45:a2:51:44:cf:13:83:76:55:1d:61:48:b0:70:74:
df:92:eb:9b:cd:11:a7:24:6f:1b:dc:41:ce:7c:cf:
42:f5:7c:f9:93:7b:9a:30:a6:41:4f:6f:32:51:91:
19:bd:59:bb:5f:53:a3:68:f9:95:21:42:ec:d6:3c:
a8:1a:ce:a2:d1:73:b6:44:b9:74:93:ca:1c:9d:2a:
61:82:13:b6:7c:e9:ed:b1:a1:02:b3:bb:96:9d:50:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:E9:27:EB:1F:C8:4E:4F:BF:BD:36:FD:DC:9F:F4:D5:3B:6C:5B
X509v3 Authority Key Identifier:
keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:79:13:1e:b3:56:2a:10:f2:b8:75:66:05:40:68:d2:26:88:
1b:df:7b:b4:cf:71:97:68:4d:b4:dd:bd:52:f7:c6:1e:1d:ce:
c7:4b:3a:c7:49:1d:eb:62:e5:36:89:75:f6:98:b2:2e:a3:0a:
db:0e:16:8d:43:b8:38:29:f8:43:82:3b:5b:ba:f4:28:00:19:
d2:47:4c:a3:61:b3:af:4c:ae:57:c0:72:3f:45:81:55:93:12:
00:97:41:5e:77:90:8a:39:98:fb:e6:61:59:f0:c2:ec:75:b9:
f1:f1:ce:be:f9:ba:2f:fa:71:42:ca:5f:66:00:95:b3:6a:93:
cc:3e:1d:c1:0c:f5:e9:97:97:0f:c0:35:39:d6:01:12:12:e9:
b9:01:74:06:fb:e4:52:8b:ea:bb:b1:03:b4:9e:a9:eb:9e:30:
5f:32:71:1d:dc:cf:57:ef:59:14:1d:a0:1b:2d:e1:9b:8e:33:
97:0a:56:6d:c2:da:47:6a:19:4f:b6:30:ed:0c:08:2a:f3:d7:
c2:2b:b3:04:76:8f:58:c6:f3:11:93:05:3d:0a:76:15:a9:b8:
9b:73:5e:e0:38:11:4d:a5:fa:26:a6:85:bd:75:c1:dd:21:d7:
ae:32:e7:e0:a2:09:a3:1b:62:ec:cc:28:25:b0:42:8d:6f:05:
d0:91:0b:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx
MTY5MDhBMzIwHhcNMjYwNDE3MDM1OTI1WhcNMjYwNDI0MDM1OTI1WjAYMRYwFAYD
VQQDEw02OWUxYjAxZC1kY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmbwhdmjF3xcOtsAdY2OPPSEVQjU4mvgYoF8s9bTZ5lFeyZqv5F4PcpOQ1FlC
ttVbJn/f80+68Vi7uGLbViIRDKp4ffUfs3UY69QXR6zEiQ+GGUaBlF9L/t7dxTVy
IxRWJIJnNb1THhloAbG35hZFMr2b+xNmFvJ3AJpW3CfxrdqabA6RmLi+iYkykxXL
WX3HDP/rP8g+FLGsdmHEh/WZRo3iEuxFolFEzxODdlUdYUiwcHTfkuubzRGnJG8b
3EHOfM9C9Xz5k3uaMKZBT28yUZEZvVm7X1OjaPmVIULs1jyoGs6i0XO2RLl0k8oc
nSphghO2fOntsaECs7uWnVBXeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCo56Sfr
H8hOT7+9Nv3cn/TVO2xbMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2
OF91Y3k1elMyRWdSYVFpakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZHkTHrNWKhDyuHVmBUBo0iaIG997tM9xl2hNtN29UvfGHh3Ox0s6x0kd62Ll
Nol19piyLqMK2w4WjUO4OCn4Q4I7W7r0KAAZ0kdMo2Gzr0yuV8ByP0WBVZMSAJdB
XneQijmY++ZhWfDC7HW58fHOvvm6L/pxQspfZgCVs2qTzD4dwQz16ZeXD8A1OdYB
EhLpuQF0BvvkUovqu7EDtJ6p654wXzJxHdzPV+9ZFB2gGy3hm44zlwpWbcLaR2oZ
T7Yw7QwIKvPXwiuzBHaPWMbzEZMFPQp2Fam4m3Ne4DgRTaX6JqaFvXXB3SHXrjLn
4KIJoxti7MwoJbBCjW8F0JELnA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:56 2026 by rpki-client