
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier: myY1KzzVoP68xAVUD9eyOAxNqMZw2Gbi0qzEDs/4ogc=
Subject key identifier: 4A:82:7C:2E:0E:FE:A7:0F:34:C1:7A:F2:C6:E1:99:82:57:ED:BD:39
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number: 01A5
Signing time: Sun 29 Mar 2026 03:56:26 +0000
Manifest this update: Sun 29 Mar 2026 03:56:26 +0000
Manifest next update: Sun 05 Apr 2026 03:56:26 +0000
Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: RZ/E6sZYH14Y/X2B588W/8i1W9pMF0/VI6GFkjXJaws=)
2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: 7GYFX9zfoc6Ic/v+6arBIHYZDYEJRKqui7KSMW9xKbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 03:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Validity
Not Before: Mar 29 03:56:26 2026 GMT
Not After : Apr 5 03:56:26 2026 GMT
Subject: CN=69c8a2ea-fed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:a2:aa:97:9e:c9:a4:78:f9:54:71:15:a0:
4e:8f:16:ee:f9:a9:4e:33:0b:b6:43:43:17:33:50:
aa:88:69:27:d5:4e:4d:ff:cc:0d:ee:7e:e0:e9:fa:
86:e4:05:02:9e:d6:c0:26:0c:4f:01:f7:e2:e7:61:
d7:6f:e4:8d:a1:20:80:6a:d2:69:a9:e5:e7:b2:8c:
d8:e0:00:df:fb:79:b9:b7:28:5e:b5:ec:e2:c4:9f:
4c:48:0a:b2:b2:db:81:5f:c6:c6:81:59:b3:81:c1:
61:62:07:b4:50:12:07:a9:b7:f7:c9:39:fc:af:6d:
82:37:bb:f5:67:28:60:9a:ea:eb:23:7c:c8:aa:9e:
9c:ce:c0:93:64:44:94:91:46:6f:55:67:bd:93:98:
e0:a1:c8:e8:39:23:cd:43:f0:74:15:de:4b:de:cc:
fc:1c:2d:c8:81:65:91:3a:e9:a4:b4:51:5a:2f:3f:
3d:e3:93:82:55:1b:89:4c:31:11:5b:16:73:f4:3f:
ea:f4:e3:ad:63:d8:cb:75:c0:39:02:c7:33:a7:df:
fe:27:05:bd:53:12:be:1e:15:77:be:69:d1:38:90:
3c:a7:1a:46:b8:1f:90:c3:21:53:4d:80:b8:1c:a4:
88:ab:82:bf:db:c4:75:9b:17:a0:30:41:b0:45:e0:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:82:7C:2E:0E:FE:A7:0F:34:C1:7A:F2:C6:E1:99:82:57:ED:BD:39
X509v3 Authority Key Identifier:
keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:de:a2:b7:a7:bb:af:76:c7:94:38:04:65:24:55:e6:d1:f9:
a1:f0:0a:c7:df:ae:75:e9:b6:f2:57:e9:33:e6:13:e5:5e:8f:
c3:5d:1c:15:cc:18:00:38:d6:66:93:22:86:62:26:07:1e:33:
93:3d:7d:a0:f8:ea:0b:74:4c:97:29:61:7d:a5:96:7a:ec:57:
0a:15:2e:13:ba:1b:5f:4c:37:57:b0:cb:d3:27:05:3d:e2:fb:
11:a5:07:6a:af:31:f6:c0:23:bb:b8:2e:24:27:38:d6:c3:b2:
aa:7d:c2:ef:ea:16:7d:17:44:1b:ee:e8:56:77:1e:ab:20:cb:
af:cf:4d:a9:8a:89:c2:1a:b3:5d:68:e6:9e:62:68:5f:b6:43:
32:53:9f:0d:83:85:1f:29:6c:0a:e3:b6:fa:2f:66:b9:68:2e:
95:f9:b7:34:50:6d:59:ef:84:2b:12:00:a8:28:b6:3b:a9:53:
50:90:26:8c:7a:bb:46:f7:1c:ba:fe:c5:53:a6:c2:48:63:05:
e7:f9:ce:97:cd:e2:ed:0d:81:c1:dc:b7:d9:e7:5a:e0:35:c8:
73:d6:0a:a4:0d:03:85:74:05:a0:0b:79:86:2d:89:dd:53:1d:
35:37:5f:da:37:5f:5f:94:46:d2:b3:2a:b4:3f:d5:15:04:bc:
ee:37:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 22:54:35 2026 by rpki-client