
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier: t4OTQrH3XTsXvEH9uKGOJkwvaJhSzlkHDkBgUCukgFM=
Subject key identifier: AC:1E:3C:41:7E:FC:C6:6A:C4:F4:C6:80:37:14:2C:C0:8B:0E:F1:8A
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number: 0197
Signing time: Mon 02 Mar 2026 02:00:13 +0000
Manifest this update: Mon 02 Mar 2026 02:00:09 +0000
Manifest next update: Mon 09 Mar 2026 02:00:09 +0000
Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: xZoSaG/Gg1f3m8FTifvCo77egXLJUih+FbSpxPSzvhI=)
2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: 7GYFX9zfoc6Ic/v+6arBIHYZDYEJRKqui7KSMW9xKbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Validity
Not Before: Mar 2 02:00:09 2026 GMT
Not After : Mar 9 02:00:09 2026 GMT
Subject: CN=69a4ef2c-77d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:44:d2:78:99:3e:64:4c:15:2c:03:b9:b3:
40:f5:ad:8d:2a:10:19:be:09:c0:52:8a:3a:97:b2:
c7:f3:93:fe:62:01:bc:8a:6c:99:50:f0:ad:6c:9f:
63:84:dc:c7:22:46:f6:69:59:84:14:7a:05:4e:5f:
a4:16:6c:9f:06:e1:71:1c:4d:53:2c:21:08:c9:fd:
87:13:89:1b:7e:4e:6f:ff:82:6b:ae:a1:1d:03:e4:
eb:5b:e1:15:01:dc:0e:1d:6f:04:20:da:f3:ba:b0:
a5:c1:cc:3c:05:99:a1:a9:b9:b0:6b:42:eb:13:5a:
f4:3b:2f:55:b3:08:f2:66:f3:59:48:9d:91:ed:25:
28:a8:4c:18:98:48:73:d8:35:15:a4:da:a4:fe:d2:
58:a6:d3:4c:b6:57:db:8f:f7:96:06:b3:14:73:20:
81:30:5f:e5:9a:27:90:f4:89:87:49:cb:f2:7d:5b:
39:f4:bb:9e:a5:d0:4d:bc:80:62:61:c3:62:70:33:
30:17:f7:7b:92:0c:fe:09:3f:d7:d8:b7:fe:6f:95:
ef:8a:3e:b7:66:6c:5d:c3:43:2a:ac:d9:af:68:f5:
f0:0d:f9:f4:e3:f0:0a:92:51:56:4f:2e:ee:58:e5:
9a:e7:93:b3:75:df:03:7e:24:d5:29:bc:de:dc:b9:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1E:3C:41:7E:FC:C6:6A:C4:F4:C6:80:37:14:2C:C0:8B:0E:F1:8A
X509v3 Authority Key Identifier:
keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:85:68:28:9c:31:43:86:73:5f:c4:5d:59:39:28:33:e9:cc:
de:47:aa:36:68:be:a8:57:b1:cb:d5:8d:5c:e5:29:7e:b8:74:
39:fa:14:b9:14:90:d5:42:b1:c5:93:e0:56:73:25:31:02:5d:
39:d4:73:2f:c7:70:04:45:70:f7:ca:19:a8:f2:80:13:be:23:
54:29:e1:20:ae:46:9f:98:69:9a:83:3c:8b:f9:9a:85:f8:31:
84:7c:3a:ca:ca:fe:52:ae:54:41:bc:44:e6:ba:10:54:97:33:
92:4a:45:05:97:65:6d:1e:9f:cb:0e:de:ac:d7:88:10:4c:7d:
7d:dc:7d:35:b4:36:b8:d0:f3:e9:61:d9:fa:23:73:a9:e8:2b:
6c:75:95:98:f9:53:db:83:6b:f7:39:4e:d9:9a:72:97:68:57:
f7:f1:8e:73:81:cb:27:63:03:ff:28:21:2f:f9:f6:fe:a3:bd:
d8:b1:1a:d7:2a:b6:55:4d:d6:01:62:f8:32:a8:68:85:a8:24:
90:c4:b3:c0:3b:e4:a6:dd:05:f5:4f:c8:6c:47:48:d4:69:5f:
6f:ed:8e:82:1b:74:d6:c6:31:14:21:c5:2f:ca:54:a9:89:62:
2d:b4:44:c5:3d:1a:c4:c5:78:5b:f2:b4:57:4e:a3:cb:f8:c4:
07:d7:37:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF
QTY2RTA0RTQwHhcNMjYwMzAyMDIwMDA5WhcNMjYwMzA5MDIwMDA5WjAYMRYwFAYD
VQQDEw02OWE0ZWYyYy03N2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1tE0niZPmRMFSwDubNA9a2NKhAZvgnAUoo6l7LH85P+YgG8imyZUPCtbJ9j
hNzHIkb2aVmEFHoFTl+kFmyfBuFxHE1TLCEIyf2HE4kbfk5v/4JrrqEdA+TrW+EV
AdwOHW8EINrzurClwcw8BZmhqbmwa0LrE1r0Oy9VswjyZvNZSJ2R7SUoqEwYmEhz
2DUVpNqk/tJYptNMtlfbj/eWBrMUcyCBMF/lmieQ9ImHScvyfVs59LuepdBNvIBi
YcNicDMwF/d7kgz+CT/X2Lf+b5Xvij63Zmxdw0MqrNmvaPXwDfn04/AKklFWTy7u
WOWa55Ozdd8DfiTVKbze3LlvaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwePEF+
/MZqxPTGgDcULMCLDvGKMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB
M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVIVoKJwxQ4ZzX8RdWTkoM+nM3keqNmi+qFexy9WNXOUpfrh0OfoUuRSQ1UKx
xZPgVnMlMQJdOdRzL8dwBEVw98oZqPKAE74jVCnhIK5Gn5hpmoM8i/mahfgxhHw6
ysr+Uq5UQbxE5roQVJczkkpFBZdlbR6fyw7erNeIEEx9fdx9NbQ2uNDz6WHZ+iNz
qegrbHWVmPlT24Nr9zlO2Zpyl2hX9/GOc4HLJ2MD/yghL/n2/qO92LEa1yq2VU3W
AWL4MqhohagkkMSzwDvkpt0F9U/IbEdI1Glfb+2Oght01sYxFCHFL8pUqYliLbRE
xT0axMV4W/K0V06jy/jEB9c3ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:50 2026 by rpki-client