
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier: E98hS8DkUeAgPnteFY2br0c5dR/rj18jt/wwhxL05ec=
Subject key identifier: D6:44:49:ED:12:EC:78:F1:3B:44:1C:E6:3C:46:ED:D5:05:57:54:3E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number: BE
Signing time: Thu 21 May 2026 07:09:41 +0000
Manifest this update: Thu 21 May 2026 07:09:41 +0000
Manifest next update: Thu 28 May 2026 07:09:41 +0000
Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: hzwihSs0rFdV6pXzB6UdxjwhTsMbKWeEa2tJj7Qdkfc=)
2: 21364F844F9C11F1B46382DC98833773.roa (hash: n/OInjim29mwNTmUQyu6+nqP7xx4ud4IopjoPJfXB2Q=)
3: E00442524EDB11F1B57B694D99833773.roa (hash: bxpjndWBJ1ln8/u3+t4VPp+yJvmgyiY62H11DXEea/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Validity
Not Before: May 21 07:09:41 2026 GMT
Not After : May 28 07:09:41 2026 GMT
Subject: CN=6a0eafb5-06df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:16:24:de:74:34:0a:6c:7b:56:3d:df:64:
41:4d:54:76:20:0a:11:39:9f:70:83:e1:2f:c5:98:
f7:5b:9d:8a:28:cb:f0:3e:ec:ce:09:bc:2d:93:a3:
c4:36:38:31:94:a6:ba:be:39:99:f0:d8:5e:cb:93:
f8:cb:57:c7:ab:79:9f:b5:9b:a1:f4:5d:76:95:a0:
77:14:5e:74:d8:90:46:74:71:2c:c6:34:fe:9f:26:
1f:1a:fb:06:0c:5e:5a:46:d6:88:c8:8f:db:c9:17:
09:b2:87:7e:aa:db:7a:04:12:f6:03:63:17:1e:03:
88:a5:a1:54:c7:85:2a:0f:1b:cf:04:5c:74:3d:f9:
fa:39:a7:a0:1d:4a:50:a5:05:3e:df:8c:af:09:d4:
23:cb:9d:7c:0d:4a:01:4d:83:0d:1a:5c:ad:70:f5:
a3:ca:cb:9e:d8:0a:8e:76:65:01:e9:0c:0f:17:8b:
0c:67:a1:30:e7:50:3e:ee:f6:70:e9:fc:32:1e:e4:
cc:2b:b1:29:9b:1f:67:c9:51:48:3f:58:66:53:7c:
42:d3:46:7c:d6:c5:70:58:10:99:5c:4b:55:06:cd:
61:b7:40:7e:9d:67:bb:48:18:b8:5b:03:a4:27:47:
b9:6f:ee:d6:2a:59:bf:35:06:d6:76:e5:ad:3f:6d:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:49:ED:12:EC:78:F1:3B:44:1C:E6:3C:46:ED:D5:05:57:54:3E
X509v3 Authority Key Identifier:
keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:26:62:83:ba:08:06:fa:1e:12:66:d8:76:ee:5a:7e:b7:
c8:6b:72:79:a0:d8:56:8e:3b:f4:17:83:83:ce:67:2c:dc:ca:
81:ee:ef:4d:8a:9d:7b:7e:e9:bd:3c:88:b1:49:5f:7b:f3:0d:
5c:e9:b5:12:16:f1:35:d0:c6:75:d0:da:aa:da:5c:c1:f8:4c:
a9:0b:76:1b:8b:a6:3d:30:21:23:26:68:97:a1:79:4f:fb:92:
88:59:5f:4f:f7:b1:40:51:fb:07:76:a1:68:11:4b:6c:18:10:
d6:34:16:5d:08:b8:4d:25:90:74:6d:0a:d4:fd:5e:c3:d4:4a:
f1:ea:44:f8:f1:e0:b8:6a:6e:b9:8f:b8:f0:81:8e:4e:6a:58:
bd:7f:fd:6c:0c:18:f9:dd:19:b1:f6:91:9e:98:75:95:df:d8:
b4:eb:93:3c:af:fe:22:d3:ed:d6:6a:89:c4:0f:22:c2:eb:20:
02:fe:26:82:d4:c7:64:99:e3:b5:e0:05:8e:ec:e2:89:06:b2:
61:40:b3:00:0e:a7:cb:bc:e4:ee:f9:5b:4f:ba:90:df:8f:81:
b9:39:47:1f:d4:b7:37:36:e6:8e:2e:ed:0f:00:31:aa:89:79:
db:7b:fd:1d:a5:3f:c8:37:93:25:b4:15:bf:c6:7b:10:87:82:
50:fe:f0:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0
MjkxOTU0QjQwHhcNMjYwNTIxMDcwOTQxWhcNMjYwNTI4MDcwOTQxWjAYMRYwFAYD
VQQDEw02YTBlYWZiNS0wNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+IWJN50NApse1Y932RBTVR2IAoROZ9wg+EvxZj3W52KKMvwPuzOCbwtk6PE
NjgxlKa6vjmZ8Nhey5P4y1fHq3mftZuh9F12laB3FF502JBGdHEsxjT+nyYfGvsG
DF5aRtaIyI/byRcJsod+qtt6BBL2A2MXHgOIpaFUx4UqDxvPBFx0Pfn6OaegHUpQ
pQU+34yvCdQjy518DUoBTYMNGlytcPWjysue2AqOdmUB6QwPF4sMZ6Ew51A+7vZw
6fwyHuTMK7Epmx9nyVFIP1hmU3xC00Z81sVwWBCZXEtVBs1ht0B+nWe7SBi4WwOk
J0e5b+7WKlm/NQbWduWtP21cMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZESe0S
7HjxO0Qc5jxG7dUFV1Q+MB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz
RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REU2Qy82QkMzNzVCMDQzRDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5
SzNhRHlyWTloTDVDa1pWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkxsmYoO6CAb6HhJm2HbuWn63yGtyeaDYVo479BeDg85nLNzKge7vTYqde37p
vTyIsUlfe/MNXOm1EhbxNdDGddDaqtpcwfhMqQt2G4umPTAhIyZol6F5T/uSiFlf
T/exQFH7B3ahaBFLbBgQ1jQWXQi4TSWQdG0K1P1ew9RK8epE+PHguGpuuY+48IGO
TmpYvX/9bAwY+d0ZsfaRnph1ld/YtOuTPK/+ItPt1mqJxA8iwusgAv4mgtTHZJnj
teAFjuziiQayYUCzAA6ny7zk7vlbT7qQ34+BuTlHH9S3Nzbmji7tDwAxqol523v9
HaU/yDeTJbQVv8Z7EIeCUP7wzA==
-----END CERTIFICATE-----
Generated at Fri May 22 12:07:48 2026 by rpki-client