
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier: chmxkJQxJT8tFs1T1SMTb1dDl77nGnXi8hShlY57j7c=
Subject key identifier: D0:A8:F6:53:CA:7C:E6:A9:02:7D:76:15:BC:99:9D:B4:22:65:50:E9
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number: 02C3
Signing time: Thu 19 Feb 2026 00:35:40 +0000
Manifest this update: Thu 19 Feb 2026 00:35:40 +0000
Manifest next update: Thu 26 Feb 2026 00:35:40 +0000
Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: rldeJke3TvwKLjzaq43XBamnFpupW9NzE6E00XC8+J8=)
2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: GTqWZnZ/1TWcrA0Y2PGoMQfWIQwTnq/BPHj2RxJAW6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Validity
Not Before: Feb 19 00:35:40 2026 GMT
Not After : Feb 26 00:35:40 2026 GMT
Subject: CN=69965adc-4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:92:0a:31:35:f1:0c:3b:93:83:09:b9:54:
5c:f1:df:64:4a:11:25:ef:d1:0b:b9:31:5c:94:51:
e5:ab:52:dd:c4:3a:0c:34:0c:f1:31:0c:fb:cc:a8:
41:f5:e3:5d:85:5c:7c:26:65:04:ec:54:67:ea:29:
a3:2b:c2:1d:50:25:86:af:92:c8:70:4e:1d:a3:40:
73:5d:0e:ea:55:12:f1:c4:f5:a3:6b:09:ac:f3:eb:
7c:c1:e8:53:a5:b2:d0:1d:f4:9f:08:f4:68:4a:28:
83:50:47:28:8f:94:e0:7c:7e:db:00:cc:b4:96:df:
b8:c0:72:4f:5f:16:46:26:38:69:63:f1:69:da:01:
e8:0c:4d:b2:d4:18:b5:dc:50:f7:51:40:6b:c6:28:
8c:25:0e:0c:81:31:67:44:3b:5a:22:3b:af:95:42:
da:1e:ff:89:f1:2a:78:ea:4c:71:52:8e:fa:14:2c:
29:33:3f:3b:b4:d1:99:a0:80:86:67:0b:ed:26:e1:
87:bc:49:03:c8:97:c8:83:ab:66:a5:8b:20:d2:8f:
b2:8a:0b:ba:c4:31:96:a4:ba:ab:a8:bc:75:d5:32:
9d:c9:0d:79:64:b9:fa:86:e3:ed:71:73:37:37:a7:
47:db:98:9e:5e:aa:1d:f9:ca:87:36:e5:a3:57:9a:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:F6:53:CA:7C:E6:A9:02:7D:76:15:BC:99:9D:B4:22:65:50:E9
X509v3 Authority Key Identifier:
keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:37:12:ed:09:52:83:f3:7f:94:0a:46:1c:52:f4:1b:8e:0c:
9a:53:4f:1b:7c:9f:c6:5b:b2:c2:d7:9b:f0:fe:28:40:3a:8b:
ff:f6:c2:05:00:3b:4c:96:91:4d:1c:9a:b0:0a:69:8c:66:f3:
aa:96:60:73:dc:52:e1:6f:7a:b6:09:20:d3:2c:f1:86:06:a5:
37:7e:99:8f:af:2f:f8:c9:00:fd:ff:a0:dd:42:9b:af:55:1d:
ce:c0:c6:a8:5a:87:c0:91:6f:fa:3f:11:cb:c3:f4:bb:cd:32:
fa:ae:0b:f5:72:74:7b:7e:9c:e6:59:06:0e:7e:dd:4d:5e:b7:
e6:30:ad:09:cb:b0:7e:95:2f:52:1e:4a:3b:69:3a:31:b8:c0:
aa:3c:4c:cf:c7:5c:49:61:df:bf:4d:da:45:60:f7:1f:6c:59:
de:54:3a:07:03:3a:1f:0e:75:50:22:38:7c:6d:2c:33:29:97:
e2:9c:07:55:8a:e4:52:87:cd:42:94:c9:6c:ff:4f:12:ad:34:
da:ff:05:06:34:5c:7e:23:46:f9:55:a2:ca:0d:d3:e6:e1:2a:
68:a3:dd:be:be:d0:a3:86:54:d3:af:41:b5:d8:a6:12:5a:99:
f9:e6:a1:f1:2e:81:d6:06:6a:69:38:64:26:1a:4f:76:d6:d9:
75:9a:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:26 2026 by rpki-client