
$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json)
Hash identifier: xlf2DtosomrwpRYeojvi3k6b1XU5CO9KLPPCsUCNxow=
Subject key identifier: E7:99:15:B7:C4:C0:B9:1F:62:2B:21:E3:9E:E7:A6:9F:EC:D0:FC:E7
Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
Manifest number: 16
Signing time: Thu 19 Feb 2026 07:12:32 +0000
Manifest this update: Thu 19 Feb 2026 07:12:31 +0000
Manifest next update: Thu 26 Feb 2026 07:12:31 +0000
Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: XB6dzY6C/Jynzam6Wwy3QV/Xijht2KVyFj8H50ynLRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Validity
Not Before: Feb 19 07:12:31 2026 GMT
Not After : Feb 26 07:12:31 2026 GMT
Subject: CN=6996b7e0-1e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:ee:19:c1:4b:eb:63:5a:0d:cd:a5:7a:5d:
c0:bd:0e:9c:de:55:7f:31:e1:6f:c3:eb:48:a2:70:
e0:93:ee:91:1e:aa:ff:9b:0e:f9:3c:b1:2d:cd:33:
73:0e:da:1e:b9:61:2e:2b:84:40:b2:b8:ff:17:c0:
0c:36:10:ae:89:35:8f:83:b3:90:cc:93:e5:a6:08:
ae:af:51:aa:f0:3c:3b:a8:8d:69:4b:76:50:0a:b6:
05:6a:ff:70:eb:2a:21:b5:55:09:98:83:52:e4:cb:
31:aa:58:7e:af:2e:b3:4a:cb:96:d9:b3:bb:1e:ac:
27:a9:41:50:9d:53:f4:7b:7e:c3:7d:f8:0b:c7:2b:
51:02:5a:de:17:69:10:4f:dc:8b:46:8a:3d:7d:15:
da:26:ce:a4:49:fa:0e:bf:b7:ef:7c:54:d6:d8:5e:
14:d4:48:fc:52:a0:8d:89:55:c1:16:5e:cb:70:30:
35:40:a6:b9:3c:51:2c:91:23:25:57:bf:12:32:8e:
0d:da:23:c8:d8:93:b3:35:7f:51:5c:53:9d:f4:17:
49:96:7f:7f:b1:02:1d:d0:7a:64:80:cd:7d:d2:17:
e1:1f:91:30:4b:20:c5:82:ec:ca:9b:27:25:63:24:
f4:2b:17:42:b4:7b:bf:13:07:de:19:ad:e6:91:51:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:15:B7:C4:C0:B9:1F:62:2B:21:E3:9E:E7:A6:9F:EC:D0:FC:E7
X509v3 Authority Key Identifier:
keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:31:58:b4:74:3d:1f:e7:f4:6d:ef:4a:c6:95:30:01:eb:8c:
0d:0a:4b:f6:a3:40:5e:17:dc:4c:2b:a5:c6:65:dc:f2:7b:c0:
b3:cf:b4:9c:8b:18:eb:cf:15:7d:3e:c9:2e:2f:6c:ac:8c:dc:
ba:d1:37:62:b0:fb:7d:c6:4a:8b:78:68:53:2f:35:e7:ec:5d:
ca:b5:a4:7b:64:37:1c:2b:28:b6:35:e3:7b:42:a6:ba:83:4d:
08:d3:e6:29:35:26:4d:6a:d2:91:b4:20:5d:2a:9e:eb:88:12:
6b:84:b0:d7:44:9b:fb:17:92:2b:e1:7e:83:57:ca:73:82:28:
fe:d6:36:1e:b6:d5:d8:4c:6d:c2:0c:40:46:a4:13:dc:69:fa:
95:76:2f:33:60:2a:78:0f:d0:6b:f6:6f:89:14:aa:74:a2:0a:
2b:a8:a0:14:a6:a4:78:e2:57:46:d5:be:57:14:3e:57:3c:ba:
12:e1:3a:1b:32:0f:8a:80:c4:dd:44:13:22:e1:14:e1:5d:df:
c3:d6:da:c0:cd:40:89:64:b3:98:06:4b:14:23:6c:4b:96:49:
c4:dc:1e:1b:f0:f0:13:0a:0a:23:f6:b4:31:ef:9b:5d:0e:f4:
60:83:9a:79:93:24:36:80:60:c0:16:c5:83:e2:70:f0:b1:60:
ba:9f:c5:5a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5
NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC
OEM0QjcyRDAeFw0yNjAyMTkwNzEyMzFaFw0yNjAyMjYwNzEyMzFaMBgxFjAUBgNV
BAMMDTY5OTZiN2UwLTFlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWuO4ZwUvrY1oNzaV6XcC9DpzeVX8x4W/D60iicOCT7pEeqv+bDvk8sS3NM3MO
2h65YS4rhECyuP8XwAw2EK6JNY+Ds5DMk+WmCK6vUarwPDuojWlLdlAKtgVq/3Dr
KiG1VQmYg1LkyzGqWH6vLrNKy5bZs7serCepQVCdU/R7fsN9+AvHK1ECWt4XaRBP
3ItGij19FdomzqRJ+g6/t+98VNbYXhTUSPxSoI2JVcEWXstwMDVAprk8USyRIyVX
vxIyjg3aI8jYk7M1f1FcU530F0mWf3+xAh3QemSAzX3SF+EfkTBLIMWC7MqbJyVj
JPQrF0K0e78TB94ZreaRUfV5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU55kVt8TA
uR9iKyHjnuemn+zQ/OcwHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5
RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0
MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn
VWNFQjh5UDhNZGJqRXR5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHExWLR0PR/n9G3vSsaVMAHrjA0KS/ajQF4X3EwrpcZl3PJ7wLPPtJyL
GOvPFX0+yS4vbKyM3LrRN2Kw+33GSot4aFMvNefsXcq1pHtkNxwrKLY143tCprqD
TQjT5ik1Jk1q0pG0IF0qnuuIEmuEsNdEm/sXkivhfoNXynOCKP7WNh621dhMbcIM
QEakE9xp+pV2LzNgKngP0Gv2b4kUqnSiCiuooBSmpHjiV0bVvlcUPlc8uhLhOhsy
D4qAxN1EEyLhFOFd38PW2sDNQIlks5gGSxQjbEuWScTcHhvw8BMKCiP2tDHvm10O
9GCDmnmTJDaAYMAWxYPicPCxYLqfxVo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:13 2026 by rpki-client