
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier: MCap333YiXkXSj7k5VJ1AHT/2xeTAyhscrJFLvhY9TU=
Subject key identifier: AB:F2:F2:78:33:85:A6:05:B6:EB:23:28:A3:26:18:A8:4F:46:DA:37
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial: 0B99
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number: 0B8B
Signing time: Wed 22 Jul 2026 19:28:53 +0000
Manifest this update: Wed 22 Jul 2026 19:28:52 +0000
Manifest next update: Wed 29 Jul 2026 19:28:52 +0000
Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: Jv2++U0tvmWZto1CDNyrinQzntJd0X+B1tmIAqsaJCw=)
2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Validity
Not Before: Jul 22 19:28:52 2026 GMT
Not After : Jul 29 19:28:52 2026 GMT
Subject: CN=6a6119f4-14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:25:7d:b4:9c:74:52:34:07:bd:31:8c:84:
0a:76:1b:ac:20:99:77:ab:f6:b2:c0:0a:58:ca:f6:
54:d0:cc:b7:4c:ef:ce:dd:a3:b7:8d:0c:97:4a:50:
87:b0:4c:c8:b6:e1:72:ce:45:2d:92:b7:23:27:81:
98:6b:e6:7f:34:c7:fa:e5:bf:08:34:a3:e1:91:6b:
d1:21:f5:27:17:b7:c1:e6:2b:87:fd:76:5a:43:1d:
c0:bf:40:c6:a0:95:cc:2a:70:06:d6:47:a4:c7:dc:
ce:a7:da:09:74:77:fd:b5:e1:77:79:24:36:7f:e1:
a6:5f:67:8f:c9:ec:42:3b:69:0b:e3:6a:3a:8a:a2:
06:b4:68:22:4c:91:8f:ce:33:d8:33:0a:cb:9e:f3:
8e:c1:36:4c:35:51:81:0d:00:af:1d:c0:95:16:79:
38:32:ae:9c:a1:6a:d2:16:54:52:e7:66:f0:83:fd:
af:4a:b6:03:fc:8a:4f:b6:2a:79:c7:3e:3e:7a:5d:
cd:5b:84:4c:9a:17:7d:e1:da:ec:45:6d:b2:2c:ad:
fb:c5:51:41:d6:8d:e7:52:83:ed:f5:26:1b:b9:9c:
08:90:ee:36:08:92:2c:ba:9c:69:7a:b9:63:fa:c6:
01:c9:11:8c:89:36:40:40:57:09:34:18:1b:61:27:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:F2:78:33:85:A6:05:B6:EB:23:28:A3:26:18:A8:4F:46:DA:37
X509v3 Authority Key Identifier:
keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7b:5c:9f:c6:d9:28:0c:35:61:80:5c:04:6b:93:34:26:5f:
8d:76:b3:ad:c2:8d:57:92:10:08:a3:64:87:9d:29:fa:c3:be:
b3:fd:c7:cb:47:6b:b6:53:45:40:dd:1e:2f:00:db:8a:e3:f9:
60:20:08:67:44:3e:98:3f:cf:1b:58:6d:10:5a:a1:4d:e0:b5:
ff:12:38:fb:44:9f:7d:a0:da:f7:36:40:e3:76:04:60:5d:bc:
a9:ee:ff:3a:5f:9a:98:26:8f:4b:37:e4:55:f6:30:5e:86:05:
64:a7:fd:28:6d:09:b3:20:5d:06:4d:f0:0c:fd:5a:4e:35:d2:
a4:d2:70:b3:71:54:fc:05:a8:df:b5:29:b2:97:7d:17:37:bf:
0f:e3:4f:90:6b:f6:c1:b6:e5:81:45:96:fb:aa:cc:07:8e:f2:
7b:c7:1c:9c:ab:1d:cc:02:eb:58:00:82:00:c1:9a:a8:6d:51:
6c:1c:c4:d7:76:14:4a:85:28:a6:ff:ae:c0:73:88:be:45:87:
39:10:64:0d:ab:7a:ed:15:e0:1f:3a:cc:93:42:3c:4a:f8:d9:
23:08:cd:46:ac:7c:1f:91:0a:1b:fc:d5:9e:99:d1:f3:f9:b3:
7d:04:f7:a4:05:5e:45:b2:ab:10:54:81:b7:8c:02:14:99:49:
9d:94:aa:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1
Q0RDOTkzQUEwHhcNMjYwNzIyMTkyODUyWhcNMjYwNzI5MTkyODUyWjAYMRYwFAYD
VQQDEw02YTYxMTlmNC0xNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwd0lfbScdFI0B70xjIQKdhusIJl3q/aywApYyvZU0My3TO/O3aO3jQyXSlCH
sEzItuFyzkUtkrcjJ4GYa+Z/NMf65b8INKPhkWvRIfUnF7fB5iuH/XZaQx3Av0DG
oJXMKnAG1kekx9zOp9oJdHf9teF3eSQ2f+GmX2ePyexCO2kL42o6iqIGtGgiTJGP
zjPYMwrLnvOOwTZMNVGBDQCvHcCVFnk4Mq6coWrSFlRS52bwg/2vSrYD/IpPtip5
xz4+el3NW4RMmhd94drsRW2yLK37xVFB1o3nUoPt9SYbuZwIkO42CJIsupxperlj
+sYByRGMiTZAQFcJNBgbYSf8+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKvy8ngz
haYFtusjKKMmGKhPRto3MB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0
NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR
QXRTUjBUeGNpTTVjM0prNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvXtcn8bZKAw1YYBcBGuTNCZfjXazrcKNV5IQCKNkh50p+sO+s/3Hy0drtlNF
QN0eLwDbiuP5YCAIZ0Q+mD/PG1htEFqhTeC1/xI4+0SffaDa9zZA43YEYF28qe7/
Ol+amCaPSzfkVfYwXoYFZKf9KG0JsyBdBk3wDP1aTjXSpNJws3FU/AWo37Upspd9
Fze/D+NPkGv2wbblgUWW+6rMB47ye8ccnKsdzALrWACCAMGaqG1RbBzE13YUSoUo
pv+uwHOIvkWHORBkDat67RXgHzrMk0I8SvjZIwjNRqx8H5EKG/zVnpnR8/mzfQT3
pAVeRbKrEFSBt4wCFJlJnZSqJQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:58 2026 by rpki-client