
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
File: UkKKuo4K7IH5nXzYknKnEHQIbEY.mft (raw, json)
Hash identifier: YPgEeBhwQaOAbnmMZAuJ6n7QFlpth7Tld2mvVYkK2LM=
Subject key identifier: 57:29:94:BD:24:17:E6:1F:0A:23:97:D7:D6:B2:60:08:AA:47:2E:D4
Authority key identifier: 52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46
Certificate issuer: /CN=A9190E6C/serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
Manifest number: 40
Signing time: Wed 14 Oct 2026 17:53:22 +0000
Manifest this update: Wed 14 Oct 2026 17:53:22 +0000
Manifest next update: Wed 21 Oct 2026 17:53:22 +0000
Files and hashes: 1: UkKKuo4K7IH5nXzYknKnEHQIbEY.crl (hash: aRRqIUj9dHzTm6yQzjbUWvdqMf14uwd75VN3ras0vq8=)
2: 3F551C74696A11F19F0E96FC7847A888.roa (hash: LOeF5oKzX3hsnldQfxTGyeCZaIlHTWbNNaHQcrweuJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl
rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190E6C, serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
Validity
Not Before: Oct 14 17:53:22 2026 GMT
Not After : Oct 21 17:53:22 2026 GMT
Subject: CN=6acfc192-a0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:aa:48:d7:a3:43:d2:56:25:fa:1d:56:43:
b6:a0:4d:93:f3:84:75:d2:89:11:0c:0f:ea:67:70:
e8:f9:28:7d:02:16:9f:cf:69:fc:78:7c:54:59:db:
da:cc:e8:e6:32:52:e6:83:dc:27:0c:fc:50:a9:0d:
3f:e4:49:63:52:ba:29:db:fb:92:cb:46:87:d5:41:
19:ee:ef:b7:96:2a:37:1d:3d:de:b1:5a:f7:09:12:
79:b2:b3:11:f1:0e:da:c4:c1:e0:68:2f:5c:24:8c:
10:e8:03:8f:da:d1:d3:53:33:e2:1f:b4:60:83:7c:
10:87:89:6e:e5:0c:85:87:a0:40:64:d3:33:30:55:
7f:b8:47:07:72:b9:35:c7:53:66:6e:50:bc:6c:e5:
f2:e1:10:b1:fd:e4:8c:25:35:37:cb:b2:b7:31:84:
78:a5:f2:c1:cd:c8:9d:b1:74:05:26:19:e1:df:19:
00:cb:40:52:f6:01:79:4e:70:5d:b8:1c:23:d3:a4:
89:73:61:7d:15:1c:84:a9:cc:6b:c7:da:3f:13:88:
85:35:56:f5:8c:c2:fd:a2:8b:46:01:7f:62:82:ec:
a0:a7:5c:67:98:b9:11:bf:e3:cd:8a:fc:c6:4e:97:
db:8b:00:6c:0b:79:83:cf:37:e6:09:b2:34:05:bf:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:94:BD:24:17:E6:1F:0A:23:97:D7:D6:B2:60:08:AA:47:2E:D4
X509v3 Authority Key Identifier:
keyid:52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f7:2a:e5:1e:f7:fe:00:09:2c:df:c6:63:f9:c7:81:ba:7c:
db:b0:99:df:19:8b:dc:7c:ab:79:4d:70:a5:02:02:4c:93:44:
3c:8f:7c:db:59:d1:f0:e4:0c:a9:20:bd:65:18:01:99:a3:d7:
65:7e:a2:18:41:1c:10:9e:ee:2a:f7:9d:b3:a4:71:75:3a:46:
da:4e:37:f3:e1:99:2d:b7:7d:4d:17:a5:49:ae:ca:e0:bb:56:
72:8d:03:fe:63:a3:59:5f:ea:fa:cf:64:cb:54:24:f6:6e:e0:
05:3a:a3:c5:98:77:c3:60:40:63:04:ad:2a:8d:eb:07:b9:62:
ff:06:95:de:06:b2:53:18:34:0c:7f:85:78:b2:4b:74:b6:87:
e9:c1:c3:4d:43:e1:51:fd:82:f8:cd:ac:74:6c:80:8c:22:7f:
02:94:0c:08:74:0d:ff:98:a1:9f:9f:06:bd:0c:13:6c:86:35:
cc:bb:e1:bc:72:9f:17:f5:31:74:92:85:3b:d8:e7:d7:00:41:
6a:fc:5c:9c:b9:2e:2d:84:ce:9e:02:5d:70:93:17:08:21:f9:
54:37:f4:95:e5:0b:93:31:4f:e2:75:09:cd:27:f0:a4:7a:67:
a3:f9:0a:b8:72:0e:b8:1a:3b:af:5d:3b:12:aa:93:af:0c:bb:
a9:cf:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:14:57 2026 by rpki-client