
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: vnm1QuHVf3dct6d71fwnz/gBWlRwTcoEdFBP6plEHHI=
Subject key identifier: EF:A1:54:39:87:30:89:EE:17:4B:15:18:40:1E:18:A0:9B:D9:E7:A5
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 0249
Signing time: Sat 05 Sep 2026 02:18:43 +0000
Manifest this update: Sat 05 Sep 2026 02:18:42 +0000
Manifest next update: Sat 12 Sep 2026 02:18:42 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: qKn4o8u+k8Wzo2Wa4TgABQkqUT5/y5FRvYxJHUHQ410=)
2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: AZUii1T6oGVh2l0OyOK0i0t9NH91aYMJ778UK9MmIlI=)
3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: q5zOvT4EolzxJnpWJZXj87BdcVRbnQ7M7O7aI2ns0Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Sep 5 02:18:42 2026 GMT
Not After : Sep 12 02:18:42 2026 GMT
Subject: CN=6a9b7c02-35f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:d1:15:df:4b:ba:33:a5:28:64:dd:55:99:
58:65:42:e9:24:9b:72:47:6e:43:1f:4e:b1:63:de:
09:64:17:fb:e7:4e:f0:85:ac:a8:06:c5:6e:a0:3b:
2c:6b:98:d4:c0:51:04:8d:fa:68:f6:70:f3:30:20:
f6:ea:44:77:ed:2d:38:e8:db:75:aa:a3:51:f4:17:
f9:cf:65:81:f9:f9:ea:27:ce:1d:30:74:7d:87:4d:
9a:1a:96:03:b8:38:be:8e:57:cc:2f:e4:d9:7a:37:
f9:9e:50:c6:56:c0:5c:e9:ec:c2:c6:36:67:8d:84:
dc:a1:f3:d0:9c:66:7e:11:6b:85:9b:be:34:d8:30:
65:0d:fb:6c:8f:29:00:5a:79:ab:fd:7c:bc:01:02:
bc:0b:ab:43:eb:75:15:17:bf:ff:a2:d0:3e:2a:7b:
d1:69:e0:e4:bf:fc:d8:77:82:37:bd:fc:f8:f3:b2:
9f:4a:bd:55:bc:0e:22:24:8c:4a:81:5d:ca:73:48:
f7:7c:e7:2f:da:e8:90:bc:27:4c:f7:7e:84:bc:66:
93:69:36:7d:09:a9:8e:62:4c:57:4a:35:62:ed:2a:
ba:e5:c1:08:0b:a2:32:3c:d0:7c:d6:b5:d6:c2:a1:
7b:7c:be:77:9b:e4:a7:0e:f4:83:b4:44:b7:e2:d9:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:54:39:87:30:89:EE:17:4B:15:18:40:1E:18:A0:9B:D9:E7:A5
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:1d:c8:ea:a5:5c:55:83:18:38:3a:ea:9b:90:cb:a3:6c:
1c:55:d8:b5:34:61:58:0c:92:05:b7:94:11:45:8e:29:bd:a6:
77:f8:97:27:1f:d5:1d:1b:4a:d6:13:6d:37:f9:72:ec:8c:15:
db:8b:ea:cd:f3:63:e9:28:95:31:1b:70:e8:ed:8d:31:5e:d5:
c0:fd:b3:cf:43:14:c6:a2:47:dc:f9:1f:49:f3:58:1a:37:82:
10:d9:c7:ca:bc:e8:a8:c5:05:e5:30:57:1b:28:35:c1:e9:9d:
bc:91:5f:87:4e:7e:84:96:49:88:72:12:fb:1f:aa:40:42:1f:
b4:53:6e:45:34:ed:fc:00:e6:2e:40:72:e7:13:76:72:8f:d3:
18:97:d8:82:b7:26:ea:95:1f:95:11:4d:ba:1d:15:da:9e:c0:
42:4e:dc:01:81:7f:5d:89:e9:c2:63:aa:e8:32:39:cb:5f:6c:
14:52:b7:57:b8:6d:b8:77:91:58:0a:42:60:d0:84:15:e0:79:
dc:2c:cb:8b:21:37:99:85:e3:7c:94:bb:4f:99:ee:05:c0:c3:
90:b5:c7:a8:cf:d1:71:42:9a:70:06:90:3b:2b:59:07:6a:72:
a9:88:db:ac:0e:61:7f:91:91:22:08:57:4c:a3:af:7b:04:fd:
c2:70:d1:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD
NjZFMTJDOUYwHhcNMjYwOTA1MDIxODQyWhcNMjYwOTEyMDIxODQyWjAYMRYwFAYD
VQQDEw02YTliN2MwMi0zNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdjRFd9LujOlKGTdVZlYZULpJJtyR25DH06xY94JZBf7507whayoBsVuoDss
a5jUwFEEjfpo9nDzMCD26kR37S046Nt1qqNR9Bf5z2WB+fnqJ84dMHR9h02aGpYD
uDi+jlfML+TZejf5nlDGVsBc6ezCxjZnjYTcofPQnGZ+EWuFm7402DBlDftsjykA
Wnmr/Xy8AQK8C6tD63UVF7//otA+KnvRaeDkv/zYd4I3vfz487KfSr1VvA4iJIxK
gV3Kc0j3fOcv2uiQvCdM936EvGaTaTZ9CamOYkxXSjVi7Sq65cEIC6IyPNB81rXW
wqF7fL53m+SnDvSDtES34tnbQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+hVDmH
MInuF0sVGEAeGKCb2eelMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0
RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3
cnR4WkhfeU56YW5HYmhMSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANRAdyOqlXFWDGDg66puQy6NsHFXYtTRhWAySBbeUEUWOKb2md/iXJx/VHRtK
1hNtN/ly7IwV24vqzfNj6SiVMRtw6O2NMV7VwP2zz0MUxqJH3PkfSfNYGjeCENnH
yrzoqMUF5TBXGyg1wemdvJFfh05+hJZJiHIS+x+qQEIftFNuRTTt/ADmLkBy5xN2
co/TGJfYgrcm6pUflRFNuh0V2p7AQk7cAYF/XYnpwmOq6DI5y19sFFK3V7htuHeR
WApCYNCEFeB53CzLiyE3mYXjfJS7T5nuBcDDkLXHqM/RcUKacAaQOytZB2pyqYjb
rA5hf5GRIghXTKOvewT9wnDREA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:35:18 2026 by rpki-client