
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: AZ17N1DkbK5F9ZSJQuPbct1BosLhuBeSkwYQsPOpjF4=
Subject key identifier: C1:76:B0:5D:5C:BA:A8:39:93:36:B2:28:29:85:C3:67:A5:9F:CD:8A
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 01F4
Signing time: Wed 25 Mar 2026 02:38:11 +0000
Manifest this update: Wed 25 Mar 2026 02:38:10 +0000
Manifest next update: Wed 01 Apr 2026 02:38:10 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: 0c4lj9U/2ve3lysRwseV++cefPQReSVGuvnLzF44SXY=)
2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Mar 25 02:38:10 2026 GMT
Not After : Apr 1 02:38:10 2026 GMT
Subject: CN=69c34a93-6413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:98:90:e7:08:ff:54:1e:bb:9b:65:c2:60:
d8:5c:38:dd:1f:0c:87:34:66:75:68:53:93:24:28:
d5:e9:92:d8:86:f1:90:ea:66:02:44:49:42:7b:84:
1c:3a:fe:ec:0f:1f:1b:08:f4:92:82:4c:66:b8:5f:
b7:d3:b7:5f:c0:5d:ac:27:50:1c:d2:7b:71:1e:98:
80:23:71:6d:0d:af:c2:df:24:8a:33:13:72:2c:71:
10:00:9d:50:a3:e7:b8:a2:cf:6a:2a:80:51:92:82:
ed:aa:7d:7e:01:c8:04:8d:5f:58:11:9e:8f:1c:73:
5b:47:c2:33:02:6f:d5:18:83:04:42:f6:bc:de:22:
55:40:9a:49:40:6e:30:29:4e:8c:7c:8d:ed:d7:8d:
8e:a2:18:cb:30:ec:de:dc:04:09:c0:32:ca:71:86:
ec:53:78:b3:3e:58:10:56:09:46:8c:1e:9d:17:46:
66:60:59:d3:6e:55:23:53:f4:fa:60:18:45:f0:6c:
5e:a8:8d:12:0d:0e:96:82:0c:ce:b3:01:91:3d:4f:
0f:2c:58:78:5b:3e:a1:63:24:f3:11:47:c2:50:20:
ee:91:af:d0:ab:95:aa:66:8c:d0:8a:b2:c4:94:e9:
68:c1:cd:44:c8:10:27:50:e1:00:26:4b:c7:2b:d4:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:B0:5D:5C:BA:A8:39:93:36:B2:28:29:85:C3:67:A5:9F:CD:8A
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:4d:95:e3:3c:9c:f3:7b:57:2d:f7:90:aa:e5:cd:38:cb:
29:f4:e2:8b:85:7a:da:b9:66:aa:6e:47:0d:ef:5f:99:3e:12:
8f:9e:c6:2b:dd:e9:e3:0f:d7:25:ad:2f:97:6d:a3:b7:07:13:
e8:2c:8c:ab:71:0d:a2:a8:2e:75:0e:34:ed:a7:0f:66:83:53:
4e:de:c6:90:81:85:e2:27:0d:c1:47:56:cc:31:90:82:5d:d2:
7f:f7:67:f3:38:a2:e6:5b:1a:ea:84:b1:19:d2:71:dc:e2:95:
ae:d7:a5:da:50:1e:99:80:07:ba:03:9c:ed:c4:56:95:9a:58:
2b:8f:1c:1a:64:90:70:ad:61:12:0e:6f:6a:2e:19:1b:a1:30:
6a:b4:e7:f9:67:67:bc:67:ae:1a:c6:9f:b7:9c:3d:22:3c:47:
fd:66:56:e5:9e:cf:52:f4:73:3a:e2:a6:a0:2b:5c:5e:e6:64:
55:37:ad:ff:53:65:b1:1f:6a:79:1e:a5:b7:1e:70:a0:14:27:
d0:b5:b6:78:55:c2:45:cb:14:8a:45:4c:44:07:95:31:8a:82:
f3:4d:77:10:04:0b:09:5f:17:bf:3b:05:8b:e9:57:2e:f0:4f:
d6:7f:3a:8a:1e:f5:07:ea:be:21:e8:c5:5f:19:73:0f:67:79:
28:93:8f:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD
NjZFMTJDOUYwHhcNMjYwMzI1MDIzODEwWhcNMjYwNDAxMDIzODEwWjAYMRYwFAYD
VQQDEw02OWMzNGE5My02NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzk+YkOcI/1Qeu5tlwmDYXDjdHwyHNGZ1aFOTJCjV6ZLYhvGQ6mYCRElCe4Qc
Ov7sDx8bCPSSgkxmuF+307dfwF2sJ1Ac0ntxHpiAI3FtDa/C3ySKMxNyLHEQAJ1Q
o+e4os9qKoBRkoLtqn1+AcgEjV9YEZ6PHHNbR8IzAm/VGIMEQva83iJVQJpJQG4w
KU6MfI3t142OohjLMOze3AQJwDLKcYbsU3izPlgQVglGjB6dF0ZmYFnTblUjU/T6
YBhF8GxeqI0SDQ6WggzOswGRPU8PLFh4Wz6hYyTzEUfCUCDuka/Qq5WqZozQirLE
lOlowc1EyBAnUOEAJkvHK9T4XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMF2sF1c
uqg5kzayKCmFw2eln82KMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0
RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3
cnR4WkhfeU56YW5HYmhMSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcbpNleM8nPN7Vy33kKrlzTjLKfTii4V62rlmqm5HDe9fmT4Sj57GK93p4w/X
Ja0vl22jtwcT6CyMq3ENoqgudQ407acPZoNTTt7GkIGF4icNwUdWzDGQgl3Sf/dn
8zii5lsa6oSxGdJx3OKVrtel2lAemYAHugOc7cRWlZpYK48cGmSQcK1hEg5vai4Z
G6EwarTn+WdnvGeuGsaft5w9IjxH/WZW5Z7PUvRzOuKmoCtcXuZkVTet/1NlsR9q
eR6ltx5woBQn0LW2eFXCRcsUikVMRAeVMYqC8013EAQLCV8XvzsFi+lXLvBP1n86
ih71B+q+IejFXxlzD2d5KJOPHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:28 2026 by rpki-client