
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier: Sy0Pdb9Z2FURPOtgIZ0lj9uU+xFbSU3yifLbyo7ES3s=
Subject key identifier: D8:95:DD:0A:46:4A:67:56:A0:BE:6A:E2:8E:04:74:71:DD:67:C6:6E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number: E1
Signing time: Thu 23 Jul 2026 08:28:00 +0000
Manifest this update: Thu 23 Jul 2026 08:28:00 +0000
Manifest next update: Thu 30 Jul 2026 08:28:00 +0000
Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: E7LkyNtR7KOpkmLlH8wQJQPujGiKpbbL1HviJ5uhDFE=)
2: BF01726E6F9211F1935110B76CA30FBC.roa (hash: gMZEnHabfRo33laszE3RJWZJy7WOCeRlZbtsz0VXszU=)
3: DB303ECE6F9811F1B69CA1B570A30FBC.roa (hash: 2i/RmVuau13EAza6ETcekxJOwQ/J9el6roQeii9jaLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: Jul 23 08:28:00 2026 GMT
Not After : Jul 30 08:28:00 2026 GMT
Subject: CN=6a61d090-21c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:f7:4c:2f:85:5a:bd:7b:95:2e:2a:a7:58:
82:2e:cb:2f:d1:fd:bd:d3:54:b8:bb:aa:c1:89:85:
37:48:1b:d6:5e:37:c2:8c:80:ca:9f:e5:f1:0b:e1:
9a:fe:83:bc:90:16:a9:ef:7a:73:09:94:53:a7:a4:
97:38:97:c2:10:84:83:52:67:7d:26:be:63:04:9e:
d2:23:83:69:a8:21:be:49:3c:35:04:67:14:bb:7a:
f7:d0:0f:ba:31:3d:9b:e2:fc:ed:e3:61:af:ad:9b:
be:62:5b:22:3c:fc:93:92:37:dc:ea:8f:c6:77:2b:
c0:51:11:a2:8c:ea:a7:cc:cc:fa:f5:4c:3f:6b:77:
95:81:73:e1:80:b2:d7:2c:8c:30:eb:f7:cd:86:71:
a4:3f:50:0f:25:d8:c2:65:83:52:af:b2:8c:47:62:
df:83:50:9a:e0:39:f5:76:92:20:53:a1:7d:af:21:
af:0b:2c:f5:b9:77:b1:0c:75:51:09:10:70:2f:78:
62:c2:f9:57:ee:f8:f9:03:3c:9e:54:92:b7:15:81:
12:69:15:5d:ab:00:87:e5:12:5d:db:b1:33:0f:3e:
7f:9f:7f:e3:23:ed:b9:09:89:0f:db:a3:51:3b:e5:
e9:c9:6b:e5:11:d5:25:8a:c5:8d:d0:f7:20:12:4c:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:DD:0A:46:4A:67:56:A0:BE:6A:E2:8E:04:74:71:DD:67:C6:6E
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:6b:1a:d1:b9:59:60:97:cd:92:98:7c:d2:8b:36:d8:04:
46:ea:ab:e9:e4:54:25:92:ce:93:ed:31:f8:16:5a:6c:6d:cf:
05:fb:5b:fd:c7:74:85:01:84:11:53:ba:8f:b4:a5:f0:c8:60:
b0:18:08:ba:07:7c:67:ec:7e:29:1d:73:67:04:f3:f0:29:c8:
62:f5:b8:ea:4f:5c:7d:3b:fb:fa:8a:f5:ba:3e:73:b2:c5:b1:
26:b9:37:f3:91:97:19:4a:9c:68:d6:e1:08:71:fd:27:65:01:
02:9d:79:aa:20:7d:d8:c0:b4:bb:bf:64:d5:ca:9b:06:90:2e:
f6:01:52:94:3b:5f:20:72:fb:75:cd:98:a5:cf:5e:d1:f4:fe:
ea:2a:2a:d5:7a:5f:c6:05:d8:e9:21:5c:51:be:9e:43:17:22:
2d:f1:f4:57:cc:cb:49:97:03:c1:69:d6:95:d1:33:bb:0f:a6:
11:5a:e4:46:d8:02:b7:99:f0:f2:74:d0:fc:94:27:63:f0:e4:
cf:ae:fc:ea:f0:ca:fe:69:60:3c:bc:99:58:16:e8:03:b7:02:
58:2e:a4:c3:81:8d:bb:1a:27:fd:5e:9f:7f:aa:3d:af:8d:47:
58:72:1b:69:0d:e4:93:5c:42:12:b5:ce:fa:4f:88:7a:1a:c1:
da:4c:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:30 2026 by rpki-client