
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: 8LFxAX4IfUgl703RkR5pVS5QKdzJtxkvI1sPoejFxYY=
Subject key identifier: 71:A8:40:D0:C9:8B:15:5F:AE:45:7E:BB:AE:D4:28:8C:B1:89:BE:62
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 0914
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 08DA
Signing time: Fri 04 Sep 2026 20:22:55 +0000
Manifest this update: Fri 04 Sep 2026 20:22:55 +0000
Manifest next update: Fri 11 Sep 2026 20:22:55 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: PEY5n1NjSaQNFptSatlEsF+lMfQGEjKtPVSej74AZqk=)
2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: nhO3zldVtz1XPOVGFAZXpKFBjV+eqr/i1obHYupDgR8=)
3: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: PfHDw4DaRqC2ZXMq4ARTCCLzrWQSRZK6GUEI+hjUiAU=)
4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: x0AyEGZhy26k8z246Jc2VasCzp5sbmspaH+OtYNOEWs=)
5: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: LzXgskniQhad+dad7IeMfaGj3PNcVRfdS6IKvp/jtks=)
6: 13EFC134D76A11F0B167783877D3641D.roa (hash: OAkDISp2mNvKJaHX0l4tkxZfgV8Eyg2s2MQ8sT5pfZo=)
7: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: s2NEeRu6U8DeIVUa9m1JE39StaQ7QBWVNUdAUo0eP+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Sep 4 20:22:55 2026 GMT
Not After : Sep 11 20:22:55 2026 GMT
Subject: CN=6a9b289f-224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:68:17:28:84:cc:95:91:82:d5:c8:a3:a0:
cc:43:a7:79:75:ae:dc:87:be:4b:d6:21:45:92:20:
df:9c:39:ae:d6:b4:13:23:1b:78:1d:f3:b2:2c:ba:
3f:62:69:0f:b2:b6:a7:16:2c:8d:2c:4a:4f:4d:81:
cc:2e:b9:ab:1c:36:df:33:24:08:4a:27:8c:05:b7:
c0:44:8c:90:9a:f0:3b:ea:6c:09:3b:08:ac:e0:47:
4e:86:82:00:cb:06:90:24:1f:c8:6f:44:19:38:f3:
c0:a8:fd:96:80:e2:bd:c9:12:85:52:42:72:88:1b:
ca:8e:84:16:7f:42:c1:36:dd:9c:8f:77:27:50:5a:
45:40:89:bf:19:76:b7:fe:ed:fa:4f:16:d5:48:e2:
08:ba:2e:73:44:f7:3d:cf:9b:28:32:2a:2f:95:2d:
b6:76:e3:39:12:0a:72:8d:45:0c:15:0c:bd:be:85:
6d:04:89:bf:6d:9a:10:dc:9f:7e:52:0b:a6:50:47:
71:4d:66:c2:e5:98:a6:66:09:8d:22:59:8d:d4:b0:
14:dd:98:37:3d:3e:6e:cf:63:de:48:6a:99:05:ac:
81:18:1b:24:c6:1a:91:22:c6:2a:9a:44:7a:01:c7:
7a:42:58:ec:6e:2f:10:f0:3e:e1:cc:29:2b:5e:dd:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:40:D0:C9:8B:15:5F:AE:45:7E:BB:AE:D4:28:8C:B1:89:BE:62
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:37:4c:2c:6c:ee:28:57:83:34:20:65:8b:ae:95:d4:e5:
05:9d:17:9f:cb:2e:71:e4:d2:b6:1d:8c:0c:8d:f9:d4:e1:d3:
ec:99:40:d8:98:ba:96:c3:3a:99:40:f2:ad:83:88:4a:48:9e:
45:70:0b:fa:1a:c9:06:0e:a8:5d:c0:db:29:c7:24:b8:c7:83:
d5:db:e1:11:92:e4:4e:90:db:d0:7f:82:28:76:1e:f1:27:46:
93:f7:f3:25:ac:ed:df:eb:61:e7:05:a7:55:51:0f:d4:55:9a:
6b:1b:6f:d8:db:11:15:fb:f5:94:bd:7f:d8:80:27:50:64:04:
7c:43:83:08:b1:d4:f1:73:02:4b:5e:79:89:97:d2:25:57:e9:
f4:33:24:15:bd:cb:23:63:36:e8:0c:7f:53:93:45:89:25:83:
a2:ac:b1:41:13:e4:ef:12:ad:7e:08:93:23:e5:70:12:be:a2:
6a:d9:9b:41:0b:f2:89:88:d2:49:2e:4b:36:f8:82:89:48:24:
9b:be:bb:c3:be:e4:22:df:6f:3d:bd:9c:b5:eb:e7:f9:68:d3:
84:84:4e:3c:20:14:57:cb:42:67:1f:5d:69:3b:71:73:4f:9e:
8b:8f:28:c4:38:4d:67:6b:c8:65:5a:03:c2:3c:96:6a:de:71:
ea:6f:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:57:57 2026 by rpki-client