
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier: zsJMbNf+VWjC1DJKrcI/tSqBkkQWjfD0zSL1t/VAL5A=
Subject key identifier: 74:27:FE:8A:07:04:76:99:AF:D7:4C:73:0E:37:04:B1:90:8F:A5:DA
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial: 0B86
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number: 0B78
Signing time: Sun 14 Jun 2026 19:09:50 +0000
Manifest this update: Sun 14 Jun 2026 19:09:49 +0000
Manifest next update: Sun 21 Jun 2026 19:09:49 +0000
Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: XWyL7Buly0YEcaA30YBO0K5/zXjOxvt+At4Kh66CgtI=)
2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 19:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2950 (0xb86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Validity
Not Before: Jun 14 19:09:49 2026 GMT
Not After : Jun 21 19:09:49 2026 GMT
Subject: CN=6a2efc7d-99e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:f0:e8:65:fc:ea:09:83:8d:e9:bf:29:81:
60:60:e0:ca:1b:11:57:a8:29:0e:1d:24:17:0b:f1:
5e:ed:3e:3d:9c:11:8c:de:45:4e:ea:70:4c:d5:e7:
14:66:d8:cf:59:80:04:9d:5f:f2:45:93:4e:95:1a:
da:de:64:7a:25:09:4d:ec:c0:1e:8c:32:7e:33:2c:
88:7b:d4:cf:25:69:ce:8d:d2:a3:e4:aa:9f:1a:1c:
76:f4:7c:bd:ff:e6:a9:8e:ba:bf:e6:56:0e:90:3d:
4b:d3:b5:11:6e:2f:c9:43:e1:33:2d:b8:f0:92:72:
25:1c:b9:9c:1b:55:9b:a0:1e:b9:12:30:7f:01:ca:
3b:91:a9:75:1f:ed:ad:83:0f:39:cc:a4:15:84:a0:
44:d0:c3:44:94:1e:ff:5e:35:75:b2:a2:29:78:5e:
48:3e:a9:fc:6e:64:87:6b:c8:ed:6d:2a:32:6f:ad:
ac:83:38:d6:62:96:6c:d5:4b:51:74:43:f2:88:52:
b1:eb:0e:b8:47:ea:1f:21:32:83:db:fb:05:6e:c5:
7f:eb:e0:96:60:07:15:42:0b:ef:c9:34:2d:3a:ae:
de:c0:45:2f:fb:44:53:e3:80:bb:53:7f:f9:8b:0d:
a2:22:a5:b1:fc:0b:4e:47:8f:cc:20:8d:8a:39:59:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:FE:8A:07:04:76:99:AF:D7:4C:73:0E:37:04:B1:90:8F:A5:DA
X509v3 Authority Key Identifier:
keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7e:1f:d6:8a:fc:a1:9e:1a:d5:6a:91:a0:eb:e4:86:7b:df:
a4:ef:90:a2:a6:e4:b6:30:76:54:5a:79:53:0c:84:88:53:7c:
08:7d:8b:83:ff:b6:17:dd:2f:74:f1:1e:a5:e8:9a:54:b4:ac:
44:c6:0e:2e:fe:7f:1d:b8:56:75:7a:0a:fe:62:3c:e7:55:ff:
ed:e8:76:ce:70:61:be:2b:20:66:58:cc:8e:af:37:e0:0f:b6:
81:09:bc:b8:b9:fb:9c:2e:52:84:0d:92:41:1b:1e:bd:e2:28:
de:87:7d:72:69:9a:23:b0:40:19:ea:32:a9:14:60:bb:61:f0:
14:84:19:ee:2f:42:19:30:c6:01:95:4a:d5:f2:d0:ed:a7:7b:
21:06:a3:4f:bf:7a:30:f1:dc:3e:6b:f4:d6:c4:7a:03:48:11:
8d:d0:ad:00:d6:87:c8:6e:6c:02:af:eb:00:aa:f2:f4:2a:1d:
2e:58:3e:2d:2f:f9:39:46:2d:0a:25:be:64:f2:e5:83:8a:d4:
97:54:f7:f4:e6:a6:9f:ad:8c:67:73:83:48:dc:f5:ed:ab:2c:
5f:79:50:ab:f7:65:a1:8b:66:36:fb:0c:9f:a9:2f:b3:18:53:
4f:f5:f9:88:2e:50:36:5a:a9:d0:83:5c:3d:5d:04:16:db:46:
ab:b8:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:34:08 2026 by rpki-client