
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier: QeJeVw3+8lE5aR44SgOmLmihdgjkMMm+PdyEMDWFEUM=
Subject key identifier: 12:C6:E5:5B:E4:69:43:A4:F3:0E:6E:2A:18:49:66:8A:BB:43:A9:93
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number: 0217
Signing time: Mon 01 Jun 2026 03:41:33 +0000
Manifest this update: Mon 01 Jun 2026 03:41:32 +0000
Manifest next update: Mon 08 Jun 2026 03:41:32 +0000
Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: 1NCnGHimCXsOK9aqge9dM6Ca1aNrsCkB3wYwPVFce8U=)
2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
3: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 03:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Jun 1 03:41:32 2026 GMT
Not After : Jun 8 03:41:32 2026 GMT
Subject: CN=6a1cff6d-73d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:b8:a3:77:cf:93:7f:bc:b0:ec:59:02:25:
a7:21:b1:3b:1b:5f:5c:28:9a:ad:f9:3d:60:2a:39:
12:e7:55:7a:fb:83:88:92:9d:90:7c:f1:85:e1:2c:
08:11:74:d1:1a:6e:3b:92:e9:34:2a:c1:02:01:96:
7d:e4:a3:3e:5d:17:98:3e:8d:28:6f:5b:cd:12:3d:
4b:f0:a7:65:14:f1:67:03:ff:ea:a5:3c:e8:27:2f:
fd:0a:1e:7b:a9:93:8e:a1:3c:c8:73:68:04:be:03:
79:72:a4:85:c6:3b:b4:65:5c:e2:3d:6b:61:8c:05:
96:50:c6:f5:16:86:60:cd:6e:97:cc:eb:72:b7:ee:
46:fb:8c:6b:30:53:fe:28:72:eb:1c:81:f1:33:19:
8c:a3:30:ad:d4:52:10:2c:b1:e8:28:54:01:04:aa:
d8:6d:ad:d5:f5:ac:81:4c:3d:78:4a:93:b8:d1:4e:
72:4b:fe:1b:2c:6b:f7:1b:03:76:07:e7:da:eb:8c:
95:d8:70:7e:fa:20:73:bd:dd:75:93:b9:63:23:40:
fc:ba:56:54:5b:16:d3:5a:89:d0:2c:ad:24:92:44:
b6:65:9c:84:5a:0f:62:45:73:82:f0:50:10:84:2f:
6f:fe:97:ab:ed:b6:22:df:a3:92:61:d2:26:f7:85:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:E5:5B:E4:69:43:A4:F3:0E:6E:2A:18:49:66:8A:BB:43:A9:93
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:57:28:ef:15:47:66:09:e5:22:93:b1:ae:a6:83:1c:1d:
99:70:52:78:10:68:f1:26:30:e1:b8:cc:78:02:16:92:30:3a:
ea:f8:70:08:d9:a3:ac:37:a2:aa:26:da:06:37:30:93:1f:37:
11:61:87:6c:76:d8:00:fe:97:d3:12:62:6c:b6:81:b9:30:9c:
fe:ce:61:49:50:0f:02:ff:ed:b8:da:1f:78:6d:bd:33:b9:e1:
08:5b:d3:4b:d2:bb:89:a2:4f:10:54:95:07:bc:36:95:e4:53:
ea:f0:40:27:2b:ab:7a:7d:d5:b5:c5:99:d0:59:7b:ef:30:4e:
f9:4a:1d:64:d4:93:60:af:f2:fd:89:e2:a9:c5:30:30:ec:88:
ca:59:e9:97:5f:67:ff:b1:a1:f2:87:f8:86:69:1a:b6:89:03:
f1:d9:b1:df:2c:57:2f:3d:42:b4:1a:5e:a5:49:7e:79:ac:be:
66:d1:54:1c:13:0d:c9:16:63:97:fd:60:40:8f:2a:c0:99:43:
5f:23:73:99:8a:5c:65:65:aa:11:ab:cf:33:ca:e5:5a:27:4d:
83:76:62:b1:76:d4:d7:97:3e:f7:53:d2:ec:bc:16:ae:c6:f1:
c8:6b:2d:1e:54:ad:c0:0f:1a:18:14:ad:d7:6b:00:5e:0a:92:
2c:d4:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:24:10 2026 by rpki-client