
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json)
Hash identifier: ft3y4+ON8T5Qq2SeOvyhi654CBpUd99qL1oVE7WQSKE=
Subject key identifier: A6:4A:80:CA:D2:14:1F:6E:8B:7D:70:82:A7:6C:55:E8:E9:17:E2:B7
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
Manifest number: 0368
Signing time: Fri 05 Jun 2026 04:13:42 +0000
Manifest this update: Fri 05 Jun 2026 04:13:42 +0000
Manifest next update: Fri 12 Jun 2026 04:13:42 +0000
Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: UpUEnJvAuUoslCT5H7+yi4V9qKYfvdKxZYa+/rsB6gk=)
2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 04:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Validity
Not Before: Jun 5 04:13:42 2026 GMT
Not After : Jun 12 04:13:42 2026 GMT
Subject: CN=6a224cf6-7bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:13:98:f8:d4:3f:6c:12:d0:19:57:71:34:
e0:1e:9d:33:3c:db:e4:0d:42:3d:0c:13:c6:cd:da:
56:b6:8c:9a:16:28:11:c7:da:71:85:91:8f:6b:03:
53:81:76:71:21:36:94:5f:dc:e5:2c:a3:69:20:a6:
06:81:de:40:fb:b1:6a:f4:9c:40:61:b4:9d:e9:73:
86:bc:d2:38:08:40:63:9f:02:77:60:d8:0a:91:5a:
a2:b8:90:cc:b0:b3:00:20:9a:7d:36:7f:77:a2:35:
70:53:2c:04:ab:04:89:fa:6c:74:b3:0f:79:2d:7b:
11:ac:ff:98:f9:60:cf:50:59:8b:53:89:dd:d7:d2:
50:8c:4e:ee:91:ab:5d:9c:ae:55:6c:78:9e:61:de:
a0:f5:74:82:29:26:21:7b:2f:79:76:63:20:0f:50:
81:fc:84:7c:7a:5a:69:00:08:77:84:4d:da:50:14:
ea:bb:57:ae:94:34:ad:19:8b:e5:43:c7:eb:e6:06:
a9:85:e2:ad:9b:04:9b:8c:7f:d9:19:bd:ca:9c:44:
cd:87:d8:16:ee:09:ee:27:c8:36:1e:9d:7c:6e:99:
b6:5d:c4:a3:98:d2:be:35:a2:c5:21:df:4c:37:f8:
47:30:e6:85:aa:b8:7b:90:62:21:0f:70:da:29:72:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:80:CA:D2:14:1F:6E:8B:7D:70:82:A7:6C:55:E8:E9:17:E2:B7
X509v3 Authority Key Identifier:
keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:09:83:69:2d:8e:c5:fe:23:d3:47:53:fb:0b:28:f3:ac:
d3:a5:d5:6a:63:94:92:f2:72:4f:75:a5:fd:78:aa:5c:33:c2:
d0:59:bf:7c:dd:31:33:06:fd:28:c7:fd:b0:7d:a1:23:8a:66:
cb:8e:18:b4:c4:f2:20:77:86:6d:6c:6c:f7:f1:52:c7:80:aa:
72:9a:b0:80:f1:50:5a:51:ac:6f:a7:ff:2f:f4:33:b5:33:bd:
06:41:ed:be:c3:3c:3a:cb:26:ef:ba:07:7b:42:eb:5a:14:04:
9a:58:1b:ca:af:50:22:6c:bb:a8:bd:84:34:6d:b0:5e:fe:5e:
b0:fe:a1:82:95:e5:56:f4:16:c6:1e:7a:57:03:ec:80:20:f7:
90:19:02:02:14:fb:20:e1:9e:86:ad:ee:16:6c:bc:cd:b8:c0:
f5:a2:26:d5:c6:f0:8b:6f:45:3e:ad:59:c0:7a:ea:c7:9c:8e:
31:bd:00:9c:20:cf:25:75:28:b6:a1:61:9b:5b:c3:1a:5c:4b:
cb:a3:a6:5d:e7:f7:e5:b0:d8:7b:a9:ff:11:b9:c0:b9:a3:2d:
ca:8b:98:eb:d5:6a:46:05:3f:22:42:0d:35:8f:71:19:0e:8c:
76:a0:60:dc:ed:07:c9:06:89:ea:1b:e6:12:63:32:9a:b3:27:
5c:b0:b4:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx
MTY5MDhBMzIwHhcNMjYwNjA1MDQxMzQyWhcNMjYwNjEyMDQxMzQyWjAYMRYwFAYD
VQQDEw02YTIyNGNmNi03YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjaoTmPjUP2wS0BlXcTTgHp0zPNvkDUI9DBPGzdpWtoyaFigRx9pxhZGPawNT
gXZxITaUX9zlLKNpIKYGgd5A+7Fq9JxAYbSd6XOGvNI4CEBjnwJ3YNgKkVqiuJDM
sLMAIJp9Nn93ojVwUywEqwSJ+mx0sw95LXsRrP+Y+WDPUFmLU4nd19JQjE7ukatd
nK5VbHieYd6g9XSCKSYhey95dmMgD1CB/IR8elppAAh3hE3aUBTqu1eulDStGYvl
Q8fr5gapheKtmwSbjH/ZGb3KnETNh9gW7gnuJ8g2Hp18bpm2XcSjmNK+NaLFId9M
N/hHMOaFqrh7kGIhD3DaKXJ3swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZKgMrS
FB9ui31wgqdsVejpF+K3MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2
OF91Y3k1elMyRWdSYVFpakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9UJg2ktjsX+I9NHU/sLKPOs06XVamOUkvJyT3Wl/XiqXDPC0Fm/fN0xMwb9
KMf9sH2hI4pmy44YtMTyIHeGbWxs9/FSx4CqcpqwgPFQWlGsb6f/L/QztTO9BkHt
vsM8Ossm77oHe0LrWhQEmlgbyq9QImy7qL2ENG2wXv5esP6hgpXlVvQWxh56VwPs
gCD3kBkCAhT7IOGehq3uFmy8zbjA9aIm1cbwi29FPq1ZwHrqx5yOMb0AnCDPJXUo
tqFhm1vDGlxLy6OmXef35bDYe6n/EbnAuaMtyouY69VqRgU/IkINNY9xGQ6MdqBg
3O0HyQaJ6hvmEmMymrMnXLC0DA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 01:59:05 2026 by rpki-client