
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier: MG2N4yW9jM0SL9F3fpiBUuYgJvWbw7ElYOe0lGS9pX0=
Subject key identifier: B8:6F:AA:10:F1:38:1B:CF:96:CD:55:82:31:7F:7C:90:8A:92:2B:43
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number: 074C
Signing time: Mon 20 Jul 2026 22:26:59 +0000
Manifest this update: Mon 20 Jul 2026 22:26:58 +0000
Manifest next update: Mon 27 Jul 2026 22:26:58 +0000
Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: 7rcx0wVtK9c1tXZwFXMla3vDLRVHDb29a+ETrvurvWM=)
2: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: o0I6O5Xq4rEg5rfJCmY1FFzWSbqTGhgq6OD4AMsnRGA=)
3: 682920E8427B11F19D68634EAA833773.roa (hash: nlgcEQsATF1xLHZDPLN6ijW3FN6vydo2+3G7cqMGHLA=)
4: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: RMgMpAILdiB9+DUyceO7qh1W7GyiTWufDuFfVE50Kys=)
5: A44DBD8486F811F0BCE74679C4F9AE02.roa (hash: wu1GVNBE2RhH/V4FcjqlyZJSWhExnhQJ13sV7NrLUBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Jul 20 22:26:58 2026 GMT
Not After : Jul 27 22:26:58 2026 GMT
Subject: CN=6a5ea0b3-bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:90:86:4f:6c:3f:8e:66:c6:07:55:d4:22:
76:cd:b8:5b:e1:f7:71:af:cc:88:7b:0c:eb:9a:99:
ce:a4:48:93:80:fc:a4:dd:ab:98:22:06:ee:38:42:
85:3a:ef:b7:bd:09:0f:c0:43:47:ae:51:b1:ed:e7:
5d:f2:0d:a0:7d:ad:0a:dd:71:3f:b3:f6:b4:ad:a0:
24:e2:43:9e:d8:ce:dc:45:dc:df:f6:01:d9:8c:ca:
a5:b5:c9:1a:7a:d8:3f:a2:7d:f7:b7:03:80:9c:40:
45:ee:b9:dd:d7:10:48:58:da:e1:2c:55:4d:8c:4a:
5d:c8:6a:aa:88:b2:4d:9c:19:10:3f:58:fa:47:17:
55:f6:51:df:3f:e1:2b:a5:0f:fa:ea:fc:98:bf:8f:
1a:1d:5f:c2:6e:ee:93:cd:55:e3:4b:3a:4a:d3:0e:
af:71:ea:75:2b:98:1b:90:6d:17:59:98:f5:23:7e:
8e:1e:72:69:a8:7b:40:64:2d:eb:a5:5b:0c:11:8e:
5b:65:49:b2:e5:1e:34:60:99:e9:68:4b:e6:b8:96:
92:0e:5b:18:7e:22:8f:11:a5:56:bf:6a:19:ef:9b:
e6:40:8b:11:a7:2b:13:5b:a3:cd:ab:4e:e4:ea:89:
9b:35:60:c9:c7:bf:d2:bb:c2:f5:b9:dd:90:1f:8f:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6F:AA:10:F1:38:1B:CF:96:CD:55:82:31:7F:7C:90:8A:92:2B:43
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:cf:76:55:55:f2:69:57:a8:db:df:ec:2a:bc:03:70:27:39:
e8:da:fe:da:79:60:46:14:7b:ff:c5:4f:6e:b3:ac:20:fe:b5:
60:c9:33:c8:29:56:60:aa:32:09:9e:63:a7:70:4e:48:72:28:
91:7f:a3:f5:e7:65:d8:aa:93:44:66:f6:52:a4:ec:69:48:b6:
42:00:e8:02:fa:80:5f:f7:1b:1d:6a:3a:a2:20:68:4b:4e:2f:
7c:58:b5:0c:b1:a3:48:ca:da:e6:9e:46:ed:e6:8a:17:88:dd:
85:70:02:0b:56:de:a2:08:3a:18:8e:da:e1:bc:55:ec:12:14:
7d:cd:4d:16:29:eb:2f:c9:53:b3:25:cb:aa:da:46:7a:6c:5e:
1a:e6:df:8f:1c:78:cd:59:ef:28:91:2f:c1:e7:e1:2a:02:31:
57:96:0e:57:0a:1d:32:74:37:f1:a1:2e:9e:8e:86:fd:51:b6:
70:8f:83:91:1f:b0:0a:c6:5b:e2:f1:07:08:86:f1:28:b8:12:
d9:ed:32:90:ae:8c:54:c4:88:f8:8d:62:10:47:02:31:44:91:
cf:7d:69:be:9d:68:63:69:10:bf:5a:fd:35:5a:04:fe:05:e1:
b1:c8:a1:a9:42:a4:4b:86:58:1c:90:eb:90:39:aa:03:a9:15:
be:08:f9:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG
QURFNUE3Q0IwHhcNMjYwNzIwMjIyNjU4WhcNMjYwNzI3MjIyNjU4WjAYMRYwFAYD
VQQDEw02YTVlYTBiMy1iYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjSQhk9sP45mxgdV1CJ2zbhb4fdxr8yIewzrmpnOpEiTgPyk3auYIgbuOEKF
Ou+3vQkPwENHrlGx7edd8g2gfa0K3XE/s/a0raAk4kOe2M7cRdzf9gHZjMqltcka
etg/on33twOAnEBF7rnd1xBIWNrhLFVNjEpdyGqqiLJNnBkQP1j6RxdV9lHfP+Er
pQ/66vyYv48aHV/Cbu6TzVXjSzpK0w6vcep1K5gbkG0XWZj1I36OHnJpqHtAZC3r
pVsMEY5bZUmy5R40YJnpaEvmuJaSDlsYfiKPEaVWv2oZ75vmQIsRpysTW6PNq07k
6ombNWDJx7/Su8L1ud2QH48rAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhvqhDx
OBvPls1VgjF/fJCKkitDMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw
NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTg4Qi9GMzZCNzlCMDgwNzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhk
QjE5V1FXYnhFZlg2M2xwOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgc92VVXyaVeo29/sKrwDcCc56Nr+2nlgRhR7/8VPbrOsIP61YMkzyClWYKoy
CZ5jp3BOSHIokX+j9edl2KqTRGb2UqTsaUi2QgDoAvqAX/cbHWo6oiBoS04vfFi1
DLGjSMra5p5G7eaKF4jdhXACC1beogg6GI7a4bxV7BIUfc1NFinrL8lTsyXLqtpG
emxeGubfjxx4zVnvKJEvwefhKgIxV5YOVwodMnQ38aEuno6G/VG2cI+DkR+wCsZb
4vEHCIbxKLgS2e0ykK6MVMSI+I1iEEcCMUSRz31pvp1oY2kQv1r9NVoE/gXhscih
qUKkS4ZYHJDrkDmqA6kVvgj5Lg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:52 2026 by rpki-client