
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: GjyNNWYQhvA/Stk05r5gUVHNDkBstNIb2tTqk02hxSk=
Subject key identifier: 7E:0A:E2:4D:0D:A4:DF:FF:D6:21:E5:CA:37:9D:FC:71:8E:5A:08:D2
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 020D
Signing time: Wed 13 May 2026 03:06:33 +0000
Manifest this update: Wed 13 May 2026 03:06:33 +0000
Manifest next update: Wed 20 May 2026 03:06:33 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: qAfun+gVW1TCs301HqIeTDCSwCqMaPY4apJAnCA3Nkw=)
2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: May 13 03:06:33 2026 GMT
Not After : May 20 03:06:33 2026 GMT
Subject: CN=6a03eab9-93da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:3a:a5:5d:b3:06:25:09:b3:cd:ba:94:f4:
97:7a:fd:32:57:e3:44:62:28:0c:b1:91:40:7e:39:
c9:30:73:7d:0d:07:22:d1:ce:4e:bb:1f:94:28:c7:
da:bf:80:d0:81:75:0f:08:fc:bf:2a:d9:7b:7a:56:
aa:55:21:17:bf:51:59:ea:9a:ca:53:a6:9a:38:dd:
f0:3f:44:42:fa:0b:6c:13:27:0c:45:d3:42:46:e9:
c0:80:3d:7c:a3:aa:0f:f0:71:18:76:22:55:c1:eb:
6b:84:97:78:fc:6c:f9:21:80:70:36:77:86:f7:ec:
95:3e:3c:c9:8d:f8:45:c7:58:3c:c9:fb:ab:da:c8:
79:6d:e0:9a:29:1e:6b:39:aa:8f:18:53:cf:3b:61:
22:0d:6f:27:49:d4:c5:07:65:ec:68:c4:1a:c4:cd:
b1:c4:91:66:8e:52:a0:ce:94:20:7a:25:b9:f6:ae:
00:59:65:9e:c9:f4:cb:ce:f5:15:7d:86:40:82:c0:
20:78:a6:b9:24:56:d1:65:ce:8e:0d:70:90:86:1a:
da:32:d0:30:99:f4:2d:75:08:74:e3:07:3b:3e:2d:
da:e6:2f:55:2f:23:b3:8a:d7:79:80:8b:39:e2:62:
0e:c4:cf:29:62:10:26:24:95:6b:7c:51:80:96:11:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:E2:4D:0D:A4:DF:FF:D6:21:E5:CA:37:9D:FC:71:8E:5A:08:D2
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:40:6f:b2:3a:50:61:2a:02:8e:ec:47:be:08:61:14:b1:b5:
12:3e:25:3d:ab:9d:59:9d:0d:04:e0:ef:52:1f:c8:a0:f3:a4:
ec:92:be:9b:6f:ce:66:34:d9:a6:69:8c:88:57:4d:a7:21:b3:
77:f2:cc:5f:3f:b6:09:b8:87:f0:fc:32:ac:75:c0:20:fa:6d:
fe:a4:be:52:ec:ce:fb:2c:4d:ea:e2:c6:3f:af:3e:ed:47:53:
a3:1e:54:c8:27:7c:11:f8:44:7a:94:5a:be:61:5b:60:60:6d:
d3:97:be:8a:6d:5c:f2:c6:49:c0:13:72:c5:e7:45:ef:72:e1:
9a:5d:97:fb:54:cc:81:af:5a:7b:8e:3a:44:d8:bc:ae:81:dd:
2f:ff:db:32:91:87:aa:de:ee:f6:55:45:1c:8a:4c:0e:56:ad:
ea:f1:8c:92:a9:4b:e4:69:5e:e1:f9:de:3f:9e:e4:11:bd:1e:
9a:e3:44:bf:f3:f0:f5:a8:8a:f0:75:3c:87:4e:d6:e6:92:18:
cf:fa:1b:35:26:9b:4b:40:00:f6:c1:39:1f:ed:76:24:b6:6a:
ce:e1:f4:d2:c1:f4:05:04:22:91:dc:02:a1:78:ee:02:e4:7c:
cf:f3:78:83:eb:2b:cc:0a:32:7c:9e:5e:e8:6e:ea:6f:cd:e9:
02:2c:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:55 2026 by rpki-client