
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier: hnfaQQT/Ic2hxrPdierpPzrPz6tQGXPbkxBwi3mlcNI=
Subject key identifier: 21:F6:6B:2C:21:39:9C:1D:29:C5:E1:72:67:09:FB:AE:3C:F2:83:00
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 08FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number: 08C2
Signing time: Mon 20 Jul 2026 21:02:45 +0000
Manifest this update: Mon 20 Jul 2026 21:02:44 +0000
Manifest next update: Mon 27 Jul 2026 21:02:44 +0000
Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: 0W4sdz9mDeO0hrFkixPXiJgTUKxjL8gmaSfBYi5Whl4=)
2: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: LzXgskniQhad+dad7IeMfaGj3PNcVRfdS6IKvp/jtks=)
3: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: nhO3zldVtz1XPOVGFAZXpKFBjV+eqr/i1obHYupDgR8=)
4: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: PfHDw4DaRqC2ZXMq4ARTCCLzrWQSRZK6GUEI+hjUiAU=)
5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: s2NEeRu6U8DeIVUa9m1JE39StaQ7QBWVNUdAUo0eP+0=)
6: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: x0AyEGZhy26k8z246Jc2VasCzp5sbmspaH+OtYNOEWs=)
7: 13EFC134D76A11F0B167783877D3641D.roa (hash: OAkDISp2mNvKJaHX0l4tkxZfgV8Eyg2s2MQ8sT5pfZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: Jul 20 21:02:44 2026 GMT
Not After : Jul 27 21:02:44 2026 GMT
Subject: CN=6a5e8cf4-221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:4b:82:7c:c7:4f:66:d2:69:f1:ec:6f:f7:
dd:73:0b:14:36:63:a4:0c:39:be:fb:8c:d0:45:69:
44:64:0f:0e:20:b3:27:66:48:7a:0f:4e:9c:95:42:
ac:79:1d:a5:a3:3b:3a:d0:d5:a7:fa:4d:65:a2:aa:
ee:99:03:69:aa:fd:91:a1:63:3c:65:61:4b:a0:25:
82:40:17:8b:39:16:a5:c4:c8:90:90:59:12:52:39:
97:97:02:26:2b:70:f5:54:93:6b:6c:16:a6:ab:e5:
b6:e8:a8:cf:1c:aa:10:f9:f0:09:d5:77:7d:25:b9:
9c:f4:78:8c:cf:75:47:2a:c8:92:89:36:98:13:bb:
6c:f1:24:3b:f0:82:e1:e9:08:80:18:db:ea:a7:be:
95:92:77:5e:15:f4:e6:c0:ba:27:10:91:1c:75:e4:
60:73:85:eb:64:7e:aa:2d:6a:e3:23:31:c7:11:1a:
56:13:10:2a:9c:37:50:8b:1b:c1:56:04:8f:62:f7:
2e:8a:06:30:dc:25:6c:20:b3:d6:14:c5:6d:9e:ba:
63:41:d1:4f:a0:12:e9:5c:00:33:eb:60:a7:96:c2:
88:a6:3e:eb:88:09:66:4a:93:7d:52:78:f8:62:20:
34:e6:27:63:2c:42:d0:a6:8a:a7:d5:ed:76:59:8e:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F6:6B:2C:21:39:9C:1D:29:C5:E1:72:67:09:FB:AE:3C:F2:83:00
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d2:37:9e:3f:c9:82:48:00:1d:e7:19:b3:49:0a:a1:a6:e4:
c3:51:cd:8a:c3:98:b8:93:20:55:81:67:71:3a:78:f4:e4:13:
19:5b:c6:ac:71:ec:8d:4e:73:b4:78:90:31:71:eb:83:66:7c:
e5:ca:54:0b:98:e1:2e:44:b9:2e:76:b2:0e:dd:02:fe:73:6b:
43:f1:78:c5:61:ef:fd:db:93:41:e7:5b:a3:bd:60:c7:32:07:
b4:ef:c7:b4:20:27:d8:4f:0c:d0:f6:1e:c3:2c:68:8c:c1:4a:
e2:9d:ec:9c:91:ff:d3:72:d4:95:37:d6:0b:45:c6:fa:25:e9:
dd:b0:4c:e1:7f:db:dd:b1:92:27:d9:1b:2f:69:d0:45:6d:99:
10:04:df:7c:7f:3e:b6:dd:2c:3d:01:5d:de:4e:66:96:f3:20:
49:e2:b1:ef:b3:f4:4f:3b:f8:17:29:9b:9b:e1:36:70:48:24:
05:a4:57:4c:0a:1b:a7:9e:30:d4:f0:40:4d:8f:c2:37:51:d4:
71:3a:f3:3c:a4:af:c4:37:bf:38:8d:9b:d5:bd:ab:ea:ec:9f:
af:93:e7:a4:41:03:06:07:26:9c:d1:f9:57:25:d4:17:af:e1:
bd:7b:c2:25:c8:61:92:8c:6d:ac:d6:ff:f2:82:fc:ee:43:a9:
87:98:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:24:27 2026 by rpki-client