
$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json)
Hash identifier: 2Pb62J6rouXHk3W6YEwvg/1ALL6XGugCl4GC4dAGfH0=
Subject key identifier: 4C:63:96:2E:F7:C6:E1:D7:04:B7:FC:97:11:54:F2:15:43:90:36:26
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial: 0BF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
Manifest number: 0BEE
Signing time: Wed 20 May 2026 18:53:40 +0000
Manifest this update: Wed 20 May 2026 18:53:40 +0000
Manifest next update: Wed 27 May 2026 18:53:40 +0000
Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: CifPEWaNvhqSTS0wpYEo9nsV+KBkcDBU78ZM2UdqZxc=)
2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: W49IVyiTOvNI7m83jeGXAzGQzjdZ5WO7C0n9YTbs3aY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Validity
Not Before: May 20 18:53:40 2026 GMT
Not After : May 27 18:53:40 2026 GMT
Subject: CN=6a0e0334-0af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:00:08:14:7c:0c:3d:fa:f1:ac:78:6a:4b:
82:9d:c7:0a:f1:49:00:9f:b2:ba:92:4c:4a:77:0a:
da:a2:e1:e2:f1:e6:6b:63:75:76:39:a4:be:e0:78:
ea:a0:c0:57:23:bf:b4:7d:1d:62:80:7f:9d:b5:10:
f4:2a:20:f6:46:70:5a:50:45:a3:6b:f7:4b:6f:72:
a0:51:1e:40:d7:06:00:e2:a2:3f:c6:fd:e7:af:cb:
14:0b:ec:fe:7f:ba:94:6d:40:37:ff:e9:80:a7:34:
f4:da:38:78:ef:11:9c:1a:c9:74:77:ef:96:ec:00:
65:65:83:8f:16:99:38:37:33:87:5c:97:13:50:7a:
1b:ad:6c:13:39:35:d0:7c:5f:ea:6e:33:28:fe:11:
65:fb:63:6a:32:77:a1:7d:c6:31:21:45:c4:59:d7:
8a:26:3a:5a:03:8c:66:37:83:23:de:80:78:40:bc:
18:d0:40:c9:ed:35:6a:ef:4c:f3:17:aa:4d:58:f0:
a7:96:9c:e0:32:fb:1a:ae:11:fd:8c:5b:db:f6:cc:
13:19:82:79:34:9f:c4:ab:52:d1:37:b4:4b:e6:76:
88:17:df:8e:20:11:64:66:d4:1a:d8:e1:5f:7e:f1:
3f:d3:92:59:a9:cc:78:33:57:5d:3f:c1:cf:44:fd:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:96:2E:F7:C6:E1:D7:04:B7:FC:97:11:54:F2:15:43:90:36:26
X509v3 Authority Key Identifier:
keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:2b:76:d2:19:07:3b:1c:95:83:55:83:4d:6e:41:d8:76:
09:0e:e1:9c:9f:72:6e:fe:cb:69:a1:80:42:b1:13:8b:8e:69:
56:ff:76:44:e4:58:b6:28:e5:80:9f:ca:5b:4d:8f:4a:43:3d:
81:f8:63:9c:4f:59:d1:a9:42:dc:d7:20:16:6d:32:a2:f8:01:
a7:d4:1e:98:f1:9b:c4:cc:e3:6a:07:3b:ee:1e:0a:b5:8f:dc:
bd:fd:db:a8:24:55:e5:8e:8e:93:a3:29:48:f1:ec:83:27:1c:
7c:88:36:ea:92:91:40:4b:82:c8:ef:52:ad:3f:58:b2:5e:8f:
e5:09:2b:09:77:ae:6d:26:4a:e6:1b:76:01:f8:25:4c:54:b8:
cc:f9:34:1d:21:de:45:79:6a:b8:80:cb:9a:9e:08:74:9f:50:
bc:6b:75:d2:49:3f:b7:52:c6:cb:9e:63:32:1d:42:0f:a1:f0:
f7:0e:18:c4:86:eb:d8:e8:14:5c:8e:51:bb:a4:5b:a4:dc:e9:
e5:fb:87:26:83:7a:9a:2f:8f:4b:b7:d5:1d:9c:87:29:34:50:
06:fe:bb:11:22:94:cd:b6:66:fa:f7:58:b0:37:e5:30:64:1d:
02:ce:3c:6b:f5:78:47:82:52:b0:78:8e:ef:b7:36:15:bf:78:
8f:47:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:43 2026 by rpki-client