
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier: B/IAt1zkH1seHBGKCFK08FZFeh8LUPe2zEyqVMi1btw=
Subject key identifier: 08:E6:D1:40:61:87:FB:CA:F7:0F:C8:34:64:E6:D9:0F:D9:BE:0C:17
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 0738
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number: 071B
Signing time: Mon 20 Apr 2026 21:51:21 +0000
Manifest this update: Mon 20 Apr 2026 21:51:20 +0000
Manifest next update: Mon 27 Apr 2026 21:51:20 +0000
Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: Bah3657Czr6FCeimW07LnPZg8oSIBIK6frwv/xU4DBk=)
2: A44DBD8486F811F0BCE74679C4F9AE02.roa (hash: mmFkgE0L1sreVpQhtYAV83v46s2MaftdRM1lyxnQjlY=)
3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ky5ZB0zmCFJ4ZhtIcZDO2A/tVio+hB2OepjdPThGIFI=)
4: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: rBLmCstaiSTAZIiJ78MwP1Xx8bjB/LfaaqELF4UDGXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 21:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848 (0x738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Apr 20 21:51:20 2026 GMT
Not After : Apr 27 21:51:20 2026 GMT
Subject: CN=69e69fd9-9c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:c9:fc:55:5f:4b:4d:58:ea:7f:4b:77:2e:
92:30:87:cd:d7:bd:c0:24:d3:42:bd:ff:48:5a:c8:
e5:6e:3b:9c:d1:49:42:4d:1d:d5:4d:0d:e8:16:7a:
65:6a:03:8e:97:2c:11:3b:0e:7c:e4:f0:47:d2:9c:
82:a9:e1:fb:c6:d9:1c:b1:24:83:e8:7f:8d:0a:87:
4b:c5:45:fb:48:be:76:9c:b4:20:41:54:db:95:6c:
86:a6:9a:dd:19:54:06:52:41:83:36:69:6f:9f:91:
02:94:4d:b5:8c:a3:ce:0f:99:ae:61:26:b9:ec:20:
16:9b:c7:34:7e:6f:4e:a1:35:f5:86:18:cc:92:14:
f4:d4:02:8d:6b:40:7b:72:f3:57:5f:c3:ee:51:88:
5b:bc:31:46:79:a2:e4:27:0d:83:e4:48:73:ca:b0:
f1:d4:97:b9:9c:a5:ce:01:49:04:a5:32:4c:c8:c2:
64:57:7b:7f:e0:7a:b2:94:7f:28:71:5a:65:79:66:
4d:43:d4:ce:42:2a:9e:4a:77:a7:bb:c3:ba:c7:fd:
83:cb:da:cc:82:a5:1b:1c:d1:34:26:d2:d2:9d:87:
6a:a6:b7:98:db:21:1b:a4:37:76:d5:a2:d4:ef:dd:
dd:58:f9:37:67:08:0b:be:37:71:bf:da:8f:0d:b6:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E6:D1:40:61:87:FB:CA:F7:0F:C8:34:64:E6:D9:0F:D9:BE:0C:17
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e3:19:52:6d:f5:80:a1:18:dd:c2:07:3f:8f:00:51:28:8b:
95:64:0c:ca:04:7c:cd:4b:65:ef:93:0e:5d:8c:7f:ad:09:fa:
31:a5:14:05:ee:42:14:e6:b7:4d:19:e9:2b:cd:5e:92:a7:25:
0f:a3:15:a6:b3:66:f6:26:8d:78:06:16:3a:41:ac:8a:70:8f:
ae:ec:11:0f:c0:36:10:dd:a1:da:08:42:fd:de:91:bb:b9:9a:
ee:80:b9:c8:67:7f:ec:70:4e:4c:88:98:32:83:be:2e:e0:3f:
c9:bf:0a:15:91:a9:f0:c7:07:29:5f:ba:01:1f:e2:68:35:87:
8b:8f:34:8a:3a:b9:16:f8:36:e7:da:56:ce:1e:24:72:7e:ea:
bf:76:ba:bc:53:22:73:9d:9d:86:78:56:4e:54:0c:e6:d8:e8:
5c:1a:92:53:97:6b:be:a5:a1:f7:56:93:39:a8:5d:73:6a:ef:
d3:0e:7a:f6:56:d8:fb:82:b4:04:e8:62:16:53:03:db:f2:e6:
8a:8a:c5:8e:63:98:60:33:cc:b7:cb:f0:fd:0e:7c:51:25:b1:
93:0b:f4:82:0e:5e:8e:f1:50:4b:9c:ba:40:f6:10:07:2b:1c:
b6:7b:d8:4e:5f:e4:9c:64:bf:91:40:75:db:82:da:39:4f:60:
13:6b:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:26:57 2026 by rpki-client