
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: cJ4aBLL1ml/hCLxRphPd0vUVDSCHsJiFrEvhPEqAReI=
Subject key identifier: C3:29:EE:BC:5B:B6:56:EE:C3:7B:94:41:20:D6:84:88:05:8A:0B:DD
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 0459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 043B
Signing time: Wed 19 Aug 2026 00:38:25 +0000
Manifest this update: Wed 19 Aug 2026 00:38:25 +0000
Manifest next update: Wed 26 Aug 2026 00:38:25 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: bsqZAMfU8jWuW6B2Wa6rPr5NyTA8Xkx8QI6W4eSYel4=)
2: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
3: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
4: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Aug 19 00:38:25 2026 GMT
Not After : Aug 26 00:38:25 2026 GMT
Subject: CN=6a84fb01-7e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:1b:29:d1:81:f3:cb:2d:ff:1f:e2:28:54:
ad:27:69:31:7a:06:a2:67:7e:fb:ea:d4:17:1f:d3:
5b:bb:d1:98:ae:6b:02:c4:3a:06:27:8f:6d:18:08:
e8:c1:b9:b6:d5:41:19:5e:4f:28:7f:a6:2a:6b:a2:
aa:6e:09:08:af:ef:20:97:8a:16:95:f1:14:7a:bd:
12:76:7f:9d:35:ae:b2:09:d6:50:07:44:bd:a2:aa:
94:bd:b0:73:ce:f3:58:96:cd:bd:34:56:d7:d1:9f:
0c:fa:e2:0e:68:46:91:1c:4b:7a:15:61:d6:e1:49:
c6:ed:c9:20:ce:52:ec:c9:81:3f:5f:4c:bf:5a:09:
77:70:8c:92:80:7e:a8:9b:c1:c0:f9:24:96:01:fe:
74:3d:86:e8:d8:24:06:d9:3f:a3:98:5d:79:0c:fb:
05:12:60:35:c3:eb:a5:78:df:d1:69:4b:5d:d8:00:
23:5e:11:1d:66:10:e2:01:26:7e:3e:93:a3:e3:00:
6c:46:89:2f:f6:af:ba:f8:d0:54:a9:46:a0:8b:c2:
4e:52:b3:5f:60:58:65:aa:62:41:2b:fa:91:54:d2:
3c:d4:81:ed:52:86:e7:04:3f:84:7b:39:b1:a6:14:
32:ff:72:75:32:89:49:d1:49:a9:0c:08:a2:af:6f:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:29:EE:BC:5B:B6:56:EE:C3:7B:94:41:20:D6:84:88:05:8A:0B:DD
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:79:ea:71:d7:34:00:65:1a:98:63:31:4a:99:a0:c8:2c:87:
d4:8e:42:df:ba:17:64:cb:ab:8a:08:fa:c1:1f:6a:a9:d7:b8:
52:e4:45:53:b8:99:cc:26:d6:b3:b9:05:4d:d9:a7:9b:21:bf:
8e:db:b7:3b:fc:55:cf:4c:72:db:98:41:40:99:9f:a4:e9:13:
fe:f5:75:13:3f:ff:3e:63:0c:f1:79:b3:82:a2:b0:bd:18:13:
fc:3e:6f:63:1d:20:16:ec:19:7b:01:62:66:8a:32:45:ae:6a:
ba:07:ac:fa:f8:8d:f2:bd:e1:22:ee:92:11:30:8d:08:a2:4e:
4c:f8:61:29:5e:f8:40:bb:2f:ee:80:a3:c5:0a:17:20:bb:b8:
59:94:27:da:7d:e8:41:ef:fa:9c:58:72:4d:4c:62:e9:34:99:
48:20:3b:aa:8d:1f:bd:84:c5:b4:da:a5:60:ac:ae:45:d2:ae:
d4:61:eb:32:b5:03:9b:62:69:52:c2:80:4a:f7:24:24:4f:4c:
cf:fe:3a:18:60:18:f9:ba:02:ce:88:b4:7b:68:1b:1c:d7:78:
21:64:7c:62:bb:42:28:23:84:12:f7:a3:4b:8e:b7:fd:26:03:
a9:d4:10:65:af:89:75:81:a4:bb:10:84:5d:26:e8:1a:cb:e5:
fd:c8:b4:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG
NDUxQzhDMkIwHhcNMjYwODE5MDAzODI1WhcNMjYwODI2MDAzODI1WjAYMRYwFAYD
VQQDEw02YTg0ZmIwMS03ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAojEbKdGB88st/x/iKFStJ2kxegaiZ3776tQXH9Nbu9GYrmsCxDoGJ49tGAjo
wbm21UEZXk8of6Yqa6KqbgkIr+8gl4oWlfEUer0Sdn+dNa6yCdZQB0S9oqqUvbBz
zvNYls29NFbX0Z8M+uIOaEaRHEt6FWHW4UnG7ckgzlLsyYE/X0y/Wgl3cIySgH6o
m8HA+SSWAf50PYbo2CQG2T+jmF15DPsFEmA1w+uleN/RaUtd2AAjXhEdZhDiASZ+
PpOj4wBsRokv9q+6+NBUqUagi8JOUrNfYFhlqmJBK/qRVNI81IHtUobnBD+Eezmx
phQy/3J1MolJ0UmpDAiir2+PXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMp7rxb
tlbuw3uUQSDWhIgFigvdMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC
MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY
WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMHnqcdc0AGUamGMxSpmgyCyH1I5C37oXZMurigj6wR9qqde4UuRFU7iZzCbW
s7kFTdmnmyG/jtu3O/xVz0xy25hBQJmfpOkT/vV1Ez//PmMM8XmzgqKwvRgT/D5v
Yx0gFuwZewFiZooyRa5quges+viN8r3hIu6SETCNCKJOTPhhKV74QLsv7oCjxQoX
ILu4WZQn2n3oQe/6nFhyTUxi6TSZSCA7qo0fvYTFtNqlYKyuRdKu1GHrMrUDm2Jp
UsKASvckJE9Mz/46GGAY+boCzoi0e2gbHNd4IWR8YrtCKCOEEvejS463/SYDqdQQ
Za+JdYGkuxCEXSboGsvl/ci0xg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:44 2026 by rpki-client