
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier: KPgfCzHNz5iS+V6fxdXZWAyoJ8FU/EqNU51wvPdtxCc=
Subject key identifier: D9:7C:EA:2B:04:8E:C8:52:5A:E9:4E:AB:47:6B:C2:95:32:CB:4F:0E
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial: 0D2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number: 0D13
Signing time: Wed 20 May 2026 18:16:35 +0000
Manifest this update: Wed 20 May 2026 18:16:34 +0000
Manifest next update: Wed 27 May 2026 18:16:34 +0000
Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: 7+DO9yuWrYtc9HlTu+B8SBWN+QSvJngTiB0YOe367lU=)
2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: hBVlKog5sRwEaP/MDsz0qoe8RZcUtfVi0W/VBym4um0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Validity
Not Before: May 20 18:16:34 2026 GMT
Not After : May 27 18:16:34 2026 GMT
Subject: CN=6a0dfa83-44a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:cf:4b:df:f1:bd:92:b8:9d:b2:97:a5:32:
6d:7e:3e:37:5e:25:06:72:d9:35:ab:95:a2:42:78:
c2:a9:fb:93:f1:84:4f:8b:c0:84:3a:fb:c5:d9:61:
d9:77:47:50:4b:9e:cb:26:00:dc:73:3c:63:6d:6b:
d2:93:de:40:8d:48:c1:33:b0:9a:f1:85:55:39:f5:
c9:69:00:ad:cf:a0:af:c2:c2:4c:de:85:22:3e:0e:
74:6a:1f:97:48:9e:2d:56:69:d7:3a:19:87:a6:b7:
6a:3f:66:34:92:be:e6:2a:3b:55:cf:65:1c:50:d4:
94:29:cd:95:44:df:be:ce:c0:44:e8:7c:fb:22:aa:
1b:b7:44:ae:c7:73:f8:a1:73:0f:70:6e:fa:37:d6:
85:f5:ad:d1:e0:a3:d0:f0:4d:ef:eb:2a:3d:dc:d1:
c9:41:2b:aa:a2:b8:4c:77:97:a7:2a:cb:1d:42:04:
74:4d:14:a0:e5:80:fd:14:25:b8:3c:25:9a:d9:95:
54:ab:14:94:66:00:0e:35:61:0e:da:51:3a:aa:54:
76:8c:6c:2a:83:88:7f:28:94:71:31:ee:84:7f:c8:
5f:76:9c:1a:f3:88:05:de:45:68:41:1b:bc:48:22:
c8:13:a0:1c:47:9c:19:c0:74:31:dc:3e:1e:ca:9b:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:EA:2B:04:8E:C8:52:5A:E9:4E:AB:47:6B:C2:95:32:CB:4F:0E
X509v3 Authority Key Identifier:
keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:df:28:bf:ab:9c:a4:06:2b:23:7b:69:03:ac:17:23:a2:
2d:e6:39:c7:2f:b3:26:49:10:c8:42:de:25:22:b5:5f:38:b7:
e8:11:af:f5:4a:05:ac:c4:1f:83:eb:13:16:5a:e4:80:d9:99:
7a:9b:df:c8:ac:31:63:e3:6a:76:af:32:49:c6:e6:a8:65:50:
0e:dd:3e:12:a3:05:ca:21:91:06:ea:71:21:ff:00:48:3b:fa:
27:1c:e4:7c:54:49:2e:95:6a:bf:aa:51:b3:52:2d:98:56:83:
89:64:6c:e6:8d:a3:90:ba:4f:35:5e:4c:3d:2d:d4:27:45:cb:
d8:19:cc:c9:62:d1:43:71:95:e6:a8:af:f9:d0:18:85:7f:2a:
71:6d:cc:85:49:9d:2b:a2:43:65:c3:d8:fb:fa:70:f6:3e:93:
48:b3:2c:dd:cc:ad:57:bb:7c:89:d6:63:0b:4c:12:8f:fc:ff:
c7:89:0b:03:1b:fd:e3:84:66:23:df:b0:b9:1a:31:0b:05:46:
82:bd:4b:a8:de:ef:91:b2:d9:24:bd:63:66:bb:82:63:40:9b:
dc:9c:76:bb:8b:78:1f:cd:47:2f:4f:83:a9:d4:fd:59:5e:2a:
09:d5:9a:c4:8b:13:d1:bb:ff:47:a9:b8:d6:c7:cd:87:bc:41:
47:74:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:50 2026 by rpki-client