
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File: UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier: 9i7D9DlxQ+87dm5ALDVWVrH5Ny96MxcxEf4tfSuRLa4=
Subject key identifier: C9:E7:EA:65:6D:5A:72:00:9E:84:4B:A5:F2:24:DF:C4:7E:B8:55:C2
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number: 7D
Signing time: Thu 23 Jul 2026 09:40:18 +0000
Manifest this update: Thu 23 Jul 2026 09:40:18 +0000
Manifest next update: Thu 30 Jul 2026 09:40:18 +0000
Files and hashes: 1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: NA8bstXPKpAciOra2YapAp9iO1rniCAdQZk0a6t570Q=)
2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: YGc7kv7ZZdCc5DPV66N241SwkEHthgl6Nrvhn4oZsMs=)
3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: Ol7o3PHS2fJcKJjNIbEjcxAgX88BdxCRDK1NBP+aiIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Validity
Not Before: Jul 23 09:40:18 2026 GMT
Not After : Jul 30 09:40:18 2026 GMT
Subject: CN=6a61e182-d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:6b:be:07:9d:57:d6:28:a9:ed:66:ef:2c:
b9:bf:cc:37:15:61:91:40:8b:f0:89:5a:1b:c7:e4:
a4:7d:81:04:44:aa:89:ce:19:c1:30:66:e2:6c:2f:
39:56:86:1c:ba:2a:0a:a3:6f:c0:d7:de:48:99:28:
6c:b1:1e:fd:94:04:3e:ef:56:4c:6f:0d:f8:ed:41:
ab:1a:f4:42:6a:a3:ad:53:a0:67:93:11:31:59:ff:
bf:0f:f0:ef:da:3f:6e:a3:e2:45:7d:87:3b:14:7c:
2c:69:4f:8b:5a:2d:50:a6:0d:42:5e:54:28:2c:70:
d5:c1:2a:e1:de:53:cf:b5:0f:7c:72:f8:31:18:d4:
d0:f2:9e:23:db:a5:6c:5b:89:0d:a7:ac:cf:57:ce:
eb:21:29:b2:03:30:ac:17:2e:61:30:48:d7:65:f0:
e9:8c:9c:c4:15:5d:23:d3:61:5a:e8:0c:31:dd:64:
f5:14:5c:fe:f0:62:3f:7a:30:30:79:d6:31:95:16:
97:f3:aa:5f:2f:cd:97:c2:01:34:c7:78:d5:42:82:
16:cc:c0:36:ce:c5:17:75:24:3c:f9:3d:cc:14:56:
b4:87:93:17:29:3a:09:6a:b9:8a:c7:f7:4e:9a:59:
6b:6f:2c:b6:ea:6a:5c:bd:cd:9f:0e:9f:32:4f:c6:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:EA:65:6D:5A:72:00:9E:84:4B:A5:F2:24:DF:C4:7E:B8:55:C2
X509v3 Authority Key Identifier:
keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:df:6b:3a:17:34:ab:6f:c5:7c:79:a4:54:6b:92:1b:20:
52:2b:e7:4f:c4:8b:e6:c6:30:8a:99:6b:ad:5a:44:1c:d9:3c:
27:2a:4a:b0:f7:08:6e:26:64:a3:20:e9:c2:be:f0:e4:18:c3:
7d:86:80:54:d5:c1:9d:d5:de:fd:88:d9:67:a5:9b:21:41:71:
26:10:d0:09:b0:ff:3c:69:a9:88:eb:39:eb:83:55:a2:94:a6:
af:3c:82:a9:5f:9f:80:40:83:2b:9f:f0:92:e1:00:b6:63:29:
ed:6d:e0:17:3f:d9:d6:5f:fe:00:fc:14:72:0f:30:e5:28:25:
7a:92:4c:49:a7:98:44:bf:54:cf:d4:2b:14:a8:87:95:44:5a:
12:1e:a3:e2:04:ed:81:ba:8d:13:97:c9:f5:03:56:11:a8:4b:
78:7c:e0:ed:87:a1:2d:73:9c:1d:bf:74:ef:b6:60:e6:e1:09:
50:94:70:20:fa:a7:06:48:c7:a2:50:3f:2f:30:d5:8e:d4:5f:
23:17:fa:d9:4f:d9:53:2a:55:cb:77:18:d8:50:c6:28:70:b1:
24:04:a1:05:b3:b0:99:1a:82:78:b9:44:65:1d:6a:59:6b:e8:
b6:2b:cd:f2:74:24:44:af:a4:0c:37:c9:07:29:85:26:36:dc:
81:fc:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:10 2026 by rpki-client