
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json)
Hash identifier: pDRbaZQ3qi+F2be5E7X/RmFlUOfdEq/qrISpxf9DEuY=
Subject key identifier: E7:D8:E8:F3:E7:FC:40:21:A2:53:76:E8:0E:90:64:6B:CC:22:34:14
Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
Manifest number: 59
Signing time: Thu 19 Feb 2026 06:24:53 +0000
Manifest this update: Thu 19 Feb 2026 06:24:52 +0000
Manifest next update: Thu 26 Feb 2026 06:24:52 +0000
Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: H6toULviZ4vUUFC6FDgdnEe1cAR5n2QkPG75ZUlrU5c=)
2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Validity
Not Before: Feb 19 06:24:52 2026 GMT
Not After : Feb 26 06:24:52 2026 GMT
Subject: CN=6996acb5-d6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:7c:f1:a2:94:8f:d9:36:55:68:33:ac:1d:
2e:67:e2:72:66:5b:63:38:82:d7:3f:41:2b:26:f9:
e5:e0:6a:13:4d:b0:1d:3c:25:53:41:94:4a:3c:72:
73:76:13:78:31:85:86:ec:bf:6a:6f:4c:4f:ce:9d:
b4:84:45:d5:5b:45:1f:e2:31:3b:47:01:b8:c8:89:
1c:ff:47:a1:60:40:29:90:7c:e1:07:82:8f:2f:ce:
de:14:b2:d3:42:f8:c5:1c:a8:43:03:79:62:46:61:
ff:7d:fd:ce:9d:59:ad:a4:10:93:0a:10:c1:93:d5:
ee:4a:31:d2:ab:57:fc:be:cb:b0:ed:81:49:e7:aa:
2d:6a:3a:3a:ca:bb:6a:43:6f:ee:d0:d7:3c:c1:69:
e0:8c:5c:70:92:16:87:c7:f7:3f:6c:c4:76:5c:bc:
ad:90:44:de:2a:c0:55:7c:8f:7f:38:e0:f1:d2:d3:
28:69:f0:e7:27:95:77:64:e4:36:3e:13:24:54:c0:
31:96:60:d6:4e:da:84:bd:e2:02:d4:02:91:41:0e:
fd:e3:9f:d6:47:f3:d7:81:a8:f6:91:57:7b:46:b0:
40:70:d8:75:74:61:15:03:2a:b3:67:4d:d9:64:c4:
c8:66:61:38:5e:28:63:c8:04:2d:04:d6:ce:3b:aa:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:E8:F3:E7:FC:40:21:A2:53:76:E8:0E:90:64:6B:CC:22:34:14
X509v3 Authority Key Identifier:
keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3b:3f:25:87:f3:50:a9:2d:5d:a1:30:98:90:97:77:eb:ab:
35:fd:6d:bb:c8:30:46:88:be:b9:2b:3f:3f:b8:2c:42:e4:21:
9f:e3:bd:0f:53:f8:dd:bd:93:b9:c0:88:9d:5b:d5:58:a0:b7:
5d:10:b8:a7:76:50:3c:d1:d2:ab:e6:78:b2:65:e1:82:10:9b:
40:6c:7d:38:16:99:ae:f4:04:7a:a4:b3:83:15:c0:e2:d3:74:
c9:a9:a2:7f:68:39:d0:9a:94:65:bd:22:b1:94:24:57:03:2c:
f8:97:2c:6f:ad:53:cf:cd:a4:f0:9d:37:ae:de:50:4c:29:37:
c6:b5:7f:95:89:9c:ff:94:d6:e5:7b:4f:af:0c:f0:e1:5a:a2:
e1:0d:56:24:dc:8b:bf:ab:6c:f8:45:4d:ef:f5:dc:03:33:b4:
33:df:39:e6:d5:e8:77:4f:f1:10:1d:10:7a:24:c4:ab:12:8a:
6d:95:5a:e8:bc:1a:4a:d7:82:05:28:45:b7:55:99:fe:df:3c:
0a:a8:85:58:03:94:22:dc:3a:81:d7:1a:03:36:63:1c:d1:e7:
1d:83:f9:53:f4:b9:db:39:12:67:55:a7:c7:90:27:10:ac:43:
4d:44:9c:62:7c:80:3a:9d:9c:3a:5c:98:e1:95:db:d6:35:f9:
39:c7:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:32 2026 by rpki-client