
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier: r4wE1mn2pfZV6FNgn78PsQpSPVd7jgeF4v1RL3MjPrA=
Subject key identifier: 7A:23:93:DD:1F:B8:DF:A4:3B:93:46:6B:30:21:1E:E8:0B:D3:36:7B
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial: 0BB7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number: 0BA9
Signing time: Fri 18 Sep 2026 19:03:45 +0000
Manifest this update: Fri 18 Sep 2026 19:03:44 +0000
Manifest next update: Fri 25 Sep 2026 19:03:44 +0000
Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: B9JU5XjVwZ2j45yey5zpP0Or6UWS0VoRXHGnue7JiKM=)
2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Validity
Not Before: Sep 18 19:03:44 2026 GMT
Not After : Sep 25 19:03:44 2026 GMT
Subject: CN=6aad8b11-ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:77:d4:33:79:0a:45:30:0a:e2:e2:27:74:
6b:64:9e:4e:0b:ca:3c:eb:18:eb:ca:df:32:03:c8:
af:71:61:9b:50:c5:67:e6:2b:af:c3:8f:95:c4:02:
13:7f:75:94:65:08:31:96:1d:c0:ce:1a:60:54:21:
bb:ab:76:03:ff:87:93:96:93:f3:fc:d1:dd:27:53:
11:21:2e:19:27:e8:e2:e6:54:5c:b1:ed:b9:01:65:
7d:62:d3:a1:f1:49:31:0e:e0:2f:55:ff:be:31:7c:
36:b7:63:09:05:6d:db:38:b2:e6:2f:e4:75:be:08:
02:10:77:e5:62:74:16:18:0c:c2:19:9f:69:0b:87:
85:b2:b4:19:d5:74:42:12:6b:81:45:60:8a:60:70:
43:d0:53:62:d4:7c:46:32:75:ab:86:71:03:14:28:
17:fc:62:2f:de:bb:6e:9e:78:6a:72:51:9b:5d:e0:
2e:bf:19:32:de:2e:47:61:be:91:6c:60:da:5e:dd:
77:c4:4a:57:2e:da:58:8c:dc:49:a0:8a:77:95:34:
cf:ed:ff:28:f5:c9:f6:e8:14:ad:9a:8c:ec:58:d4:
f5:2d:e4:91:ac:02:4c:3a:ab:cb:b6:ce:ff:6c:84:
59:d3:cb:cf:33:9a:76:d3:a8:8d:41:cc:26:19:90:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:93:DD:1F:B8:DF:A4:3B:93:46:6B:30:21:1E:E8:0B:D3:36:7B
X509v3 Authority Key Identifier:
keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:ef:c5:5b:db:62:6a:11:28:ac:fa:d0:2e:85:b3:f6:19:
fb:76:49:cc:6c:01:eb:7f:4c:3d:00:44:12:7d:b1:cd:0d:2e:
ed:92:c4:1e:20:1b:0d:8c:71:07:50:10:6b:1b:bd:15:eb:e1:
ff:5b:9a:24:79:f7:08:95:b5:94:90:66:25:c8:83:93:f9:0a:
f0:94:0a:d9:51:a6:1a:4e:4b:7f:74:f4:fa:04:ee:97:14:fb:
9d:bf:72:fa:8c:1e:08:f2:c1:3c:35:fb:8f:21:8d:45:4f:f0:
01:97:3a:78:7e:d0:63:5e:fa:76:be:90:61:be:dc:21:ac:5a:
68:79:6b:98:35:15:08:88:82:ba:23:2c:85:6e:8a:c2:ec:96:
74:78:d2:66:ca:e3:fa:a2:4c:0e:a9:a3:ea:4b:ed:98:da:13:
fa:ac:ae:f1:b9:35:12:d3:a4:14:59:1f:b3:64:77:8e:ba:99:
83:ac:9e:af:6d:a0:37:41:06:db:23:63:a7:de:89:96:6d:9b:
8f:15:9a:5d:97:be:71:62:f0:83:cd:43:62:75:6a:fa:a0:93:
9d:b5:78:9c:e2:4c:22:f0:be:11:aa:73:62:0c:53:c2:90:21:
83:c3:ff:7d:29:96:0b:7c:07:ee:ef:07:b9:92:b4:cf:7b:bc:
db:91:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:03:07 2026 by rpki-client