
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: KC+3r20xiKjbRtKXLP4vqFdC35sWdOYT8bX9XBH0gY8=
Subject key identifier: 75:46:4B:27:06:93:60:EB:5B:64:53:13:FE:58:52:12:E4:D9:1C:23
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 092E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 08F4
Signing time: Mon 26 Oct 2026 20:26:16 +0000
Manifest this update: Mon 26 Oct 2026 20:26:15 +0000
Manifest next update: Mon 02 Nov 2026 20:26:15 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: yNFU21w/vVypE3xN8ypWIcItrirHa14ctgljW4cwqSA=)
2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: nhO3zldVtz1XPOVGFAZXpKFBjV+eqr/i1obHYupDgR8=)
3: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: s2NEeRu6U8DeIVUa9m1JE39StaQ7QBWVNUdAUo0eP+0=)
4: 13EFC134D76A11F0B167783877D3641D.roa (hash: OAkDISp2mNvKJaHX0l4tkxZfgV8Eyg2s2MQ8sT5pfZo=)
5: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: x0AyEGZhy26k8z246Jc2VasCzp5sbmspaH+OtYNOEWs=)
6: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: LzXgskniQhad+dad7IeMfaGj3PNcVRfdS6IKvp/jtks=)
7: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: PfHDw4DaRqC2ZXMq4ARTCCLzrWQSRZK6GUEI+hjUiAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Oct 26 20:26:15 2026 GMT
Not After : Nov 2 20:26:15 2026 GMT
Subject: CN=6adfb768-5a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:c4:ff:0f:41:92:b5:47:c8:c8:08:80:d2:
8b:24:01:e1:3a:ed:de:92:a4:41:4a:3b:9c:af:9e:
5d:58:24:8c:f5:e2:c1:02:c6:a1:94:c6:66:27:66:
73:90:5c:ed:9b:7b:5b:de:13:41:bb:c1:87:83:84:
5f:f0:99:5f:c8:37:aa:6e:2f:fc:9e:78:3a:4e:94:
e3:c6:01:b0:24:d6:db:eb:ea:d3:0d:7a:93:12:ae:
3c:02:7f:54:bc:ad:61:30:da:25:99:15:8a:21:32:
82:04:e3:24:2f:89:11:70:82:10:46:47:1b:4f:f4:
83:99:18:cd:21:b1:17:0a:2e:22:28:03:6a:0b:dc:
e1:6c:89:e4:4f:6c:a5:66:22:52:21:39:f0:e5:42:
66:f1:42:83:0f:46:15:38:bc:7e:30:6e:67:8a:19:
f4:f9:92:c4:8f:77:40:30:11:18:df:96:a8:6a:4b:
82:de:21:10:71:a1:37:e2:22:83:d8:46:d0:65:ed:
eb:75:e0:60:e4:80:b0:e0:28:85:a0:d3:34:c8:35:
85:5a:c8:b2:cb:34:7f:10:0b:cb:6f:71:04:66:1c:
a4:4d:0d:08:1b:2d:20:ff:e1:28:53:8b:cf:2c:a2:
90:c6:bd:5a:e1:c2:0d:4e:57:bf:72:f6:60:ad:23:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:4B:27:06:93:60:EB:5B:64:53:13:FE:58:52:12:E4:D9:1C:23
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:c8:c2:6f:b5:d4:1a:90:27:15:72:39:2f:e0:68:e6:26:
2a:c9:49:3f:5e:b3:f8:59:6b:fc:ab:20:d6:cf:38:fa:aa:57:
09:7f:88:38:19:d2:6a:09:36:4a:ed:74:2e:e6:8b:69:42:1e:
1d:36:78:0a:95:93:49:02:b8:6e:d0:3a:b4:62:29:3c:1b:53:
c5:d7:97:27:2f:a0:5d:cb:c7:99:54:1c:f3:c8:6e:23:42:a1:
a6:6d:1b:3a:27:2c:ca:4a:2b:c1:b5:c0:ae:c7:13:e0:f7:43:
4c:7a:ec:59:bb:c2:dc:f6:00:59:19:3c:3b:36:8f:26:ae:d0:
de:98:23:de:7a:03:5a:8f:2a:a3:b4:59:f8:c3:95:b8:32:00:
aa:45:a3:3d:17:cf:18:a7:9f:c9:7d:87:38:c1:16:86:9c:77:
88:76:44:19:b6:24:0e:9e:e7:77:2b:8b:5b:f7:63:fa:15:4f:
2f:73:b0:14:53:ef:08:71:5c:b8:9c:9b:8e:12:2e:91:7b:17:
33:7b:ae:13:65:ff:3f:5e:94:be:a2:a7:03:b8:b5:e0:47:01:
3c:59:e2:ef:e9:d3:37:18:d9:3f:94:cf:bb:cd:ae:2a:ae:e8:
ef:b0:cd:10:b0:8f:50:2c:26:a4:a9:17:a9:a4:cc:21:ea:b8:
33:c1:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:19 2026 by rpki-client