
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier: W9qGEKXtk/ptSz6EKW7qoQVOlP3Y4PTctPcmUl7amUU=
Subject key identifier: F1:85:11:C8:34:A6:EC:C8:D2:BB:81:0D:F9:21:E3:2A:17:63:C3:12
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 09EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number: 09C1
Signing time: Wed 18 Feb 2026 19:35:58 +0000
Manifest this update: Wed 18 Feb 2026 19:35:58 +0000
Manifest next update: Wed 25 Feb 2026 19:35:58 +0000
Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: sV95Y5ZW8sEWdLVXa1U2s8EmdE2+5235NYfeggOe4aI=)
2: A837ACBA072311F1857499832B3D8C67.roa (hash: yctUnSp7RqHzvEarGMz+r5ZGMd5wGo+roiBoOg4lkho=)
3: C60C028205BF11F18BA9BF160B3D8C67.roa (hash: XEN8Ptr3OOjrYnnHCeNNHuFEuscKU0j5EC1jwtz8kcg=)
4: A8B9DDF2072311F1857499832B3D8C67.roa (hash: oTI+1/LNcwiDfWOdPM9D5PfTWaj/rDg4JQMqhGV/kw0=)
5: EF575A8E05B411F1B5F4D87B093D8C67.roa (hash: 6tFMvg9QjxuwK3XPdZL12ytHp1uhm+pTxL61EXDO940=)
6: E350F182060411F192CA7B231D3D8C67.roa (hash: q5ZQk4oiBy1p2PlzdXizUHCuqx46P/q0L/L1xwCHgSc=)
7: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: nXVtsybD/p0SClRwWP9c2+ZIMGXniljjDK2EFaKpa7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2540 (0x9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Feb 18 19:35:58 2026 GMT
Not After : Feb 25 19:35:58 2026 GMT
Subject: CN=6996149e-388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:b2:db:c4:37:01:1c:b9:01:ba:de:c2:e1:
c4:b0:28:3d:fe:4a:06:d9:1e:fb:37:6c:ca:85:19:
d6:24:7d:8c:9f:8b:42:ce:8d:99:f0:a9:95:84:2a:
71:f2:a0:f7:5a:01:c2:96:d7:3a:1f:f3:43:be:57:
8c:f2:d2:c9:0b:8a:e0:ef:3f:27:30:44:5c:1a:00:
35:49:74:6a:5f:18:db:e3:40:94:af:50:2f:ac:b4:
47:08:cf:0c:22:fb:f4:ce:ef:5b:bb:aa:a1:77:e1:
96:4e:d3:87:5c:d9:d6:01:71:07:c6:11:a8:66:0d:
87:ec:3d:33:fd:0a:ec:f9:3d:43:62:c4:17:1b:64:
77:6e:7c:4f:87:a3:cd:d1:57:c4:ec:4c:7c:43:99:
c6:ee:8c:73:54:2e:69:58:f2:85:3b:ac:2c:d0:51:
a1:ae:4e:70:6c:cf:fc:0a:d9:00:f1:fe:44:3b:36:
bf:98:b8:dd:32:10:40:a4:cc:0a:45:94:36:15:3f:
07:4a:52:c0:05:d2:45:13:c9:33:1b:24:15:9e:62:
4e:63:2d:2b:c5:44:10:71:2a:44:ea:d2:58:0d:26:
9c:96:67:c8:11:e5:b2:4f:19:99:6e:cf:3e:c7:6a:
79:27:1c:69:f0:8b:de:3c:6c:41:36:ec:d4:a3:3f:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:11:C8:34:A6:EC:C8:D2:BB:81:0D:F9:21:E3:2A:17:63:C3:12
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2b:62:5e:f4:96:0b:ed:d4:06:75:50:ee:f2:5f:a6:5c:3c:
38:ce:44:46:13:db:93:d7:97:5c:24:82:3e:5b:d3:a7:f9:54:
2e:fe:57:41:fe:2e:88:08:aa:0c:5f:bf:92:db:1e:3f:f5:c2:
85:ed:fb:df:d3:d3:43:41:46:fb:6c:80:a8:0a:36:51:c8:99:
25:52:40:ec:1a:fe:7d:16:33:2b:be:f1:69:d1:d0:f0:a5:7a:
e1:3c:c8:cf:2c:59:6d:43:6e:f9:22:49:09:66:51:83:2e:1c:
5b:5a:fd:91:70:86:0b:8f:9b:0d:72:56:af:9e:c6:d7:8e:3e:
7d:60:7e:e8:12:d1:51:40:7b:f1:a5:f8:a7:44:6e:81:23:82:
c7:6e:df:50:ba:0f:69:6c:ce:1e:ba:da:eb:68:04:66:c1:d8:
3e:e7:9f:41:4b:d1:59:5d:ae:39:5c:89:8a:d6:ff:b0:51:89:
58:76:eb:01:06:6e:a7:ab:76:17:7c:c9:b6:40:ea:c7:f8:82:
0b:32:ce:bf:5f:80:e5:73:48:b0:f0:0f:20:b0:0d:3a:2f:de:
16:81:c5:aa:0d:da:ef:f4:00:ae:dd:12:76:61:93:61:c1:83:
b6:55:04:93:a8:74:f8:0c:ef:eb:d2:f1:f7:b2:ad:51:4e:4c:
5a:08:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:46 2026 by rpki-client