
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json)
Hash identifier: L0bmOkNFclF/vEDJUkgu5ljWjSri0Rh5a+7rDpkF1Wg=
Subject key identifier: 91:89:53:70:E1:24:FE:18:2A:E9:60:32:59:4C:03:24:85:83:11:14
Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Certificate serial: 231D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
Manifest number: 22CE
Signing time: Wed 18 Feb 2026 15:42:44 +0000
Manifest this update: Wed 18 Feb 2026 15:42:44 +0000
Manifest next update: Wed 25 Feb 2026 15:42:44 +0000
Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: Gq/YWhhILO4G+21TY8xAVw05JhAIzwnKYhjTxsXLYAs=)
2: 233533AABAE011F09A0D810BC4F9AE02.roa (hash: tvFbBzaDYUotRjgEHrDkKjONeDoR4INE8M3QZSE99/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl
rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8989 (0x231d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Validity
Not Before: Feb 18 15:42:44 2026 GMT
Not After : Feb 25 15:42:44 2026 GMT
Subject: CN=6995ddf4-eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:f7:d7:f5:11:78:34:02:17:ba:dd:da:27:
6d:1d:db:f2:ed:bf:ed:3f:92:21:f4:62:d9:40:be:
0a:b9:90:7c:92:3a:23:3c:76:71:aa:87:d9:ea:ee:
2b:90:be:e9:9d:fd:90:53:2e:a0:c6:01:a3:12:eb:
22:d5:93:2e:96:15:94:5d:58:4c:e9:59:7b:25:63:
8b:64:ce:21:56:46:01:f9:fb:d0:d1:aa:8a:72:ce:
e8:4c:71:49:26:71:16:9f:bc:da:f4:06:54:fe:51:
0e:54:c6:31:2c:8f:2b:79:43:81:e8:fc:51:95:88:
1a:df:64:37:53:f2:2b:0d:7e:02:09:81:0e:16:ca:
9d:a6:83:37:5f:1a:f5:b0:b6:f7:e3:86:d4:49:b9:
ba:5d:57:e3:e9:6a:7c:7f:86:fd:dc:da:cd:f4:e7:
80:e5:12:dc:68:42:e8:f7:a9:6d:a8:ff:8a:45:4a:
7e:2b:06:0b:93:19:d3:0a:9b:57:7a:7e:2c:10:3f:
76:9a:6d:25:92:5a:bf:de:00:56:96:14:92:23:42:
21:92:db:c5:f8:ca:1e:d3:31:39:0b:2c:f9:32:7d:
9f:70:7f:7d:71:f8:2f:83:82:c0:7b:4e:dc:04:38:
3f:a6:33:12:bd:4f:17:e5:5a:75:24:6c:3b:b3:80:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:53:70:E1:24:FE:18:2A:E9:60:32:59:4C:03:24:85:83:11:14
X509v3 Authority Key Identifier:
keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:0e:1b:4f:da:0b:28:b7:34:1a:26:8a:5e:ca:bf:a8:60:
20:ba:e7:fa:fe:b7:69:57:54:ae:0e:84:1e:87:74:5d:e2:e7:
2d:8c:f5:cd:04:ac:05:4d:3d:50:7e:aa:d6:b8:cd:5c:5e:4f:
69:d2:6d:6f:f5:03:b0:0d:97:2d:6c:93:db:3f:46:32:e8:09:
4a:70:9c:19:09:20:2b:f1:36:20:44:dc:58:08:19:5f:5a:66:
98:ca:42:1c:52:36:01:81:0e:f6:6a:6b:28:f4:7e:e4:60:1d:
40:d3:c9:c3:4e:f7:18:df:44:cf:e6:f9:91:67:13:94:e4:53:
92:73:14:cd:31:d9:2d:a1:c5:82:a5:00:1d:89:29:dd:10:c2:
6c:f2:e7:ed:49:03:b4:8a:b5:f6:20:dc:91:53:55:91:07:98:
c2:7b:02:7c:d9:f5:03:35:ac:19:6f:1f:e2:33:9f:68:3b:59:
5a:3e:99:01:89:dd:5f:da:ef:21:95:f6:df:58:63:47:32:09:
c3:f7:60:04:39:4d:05:f0:fe:6a:c2:01:5a:c9:c7:f0:8f:0e:
93:59:15:02:c5:0d:db:49:4e:f1:a2:1b:82:50:9a:c5:aa:0b:
5a:ee:3c:c7:01:50:38:02:52:39:96:c5:ca:ba:45:98:d6:10:
e3:cb:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:55 2026 by rpki-client