
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json)
Hash identifier: kYjA548GSczga0uRweK4qOuKo+wdSZ8ffLXHKOvH6h0=
Subject key identifier: 64:B7:1D:B8:1A:5B:10:AD:46:58:C8:84:46:C6:A1:5D:5B:20:5F:CE
Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Certificate serial: 351A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
Manifest number: 3513
Signing time: Wed 18 Feb 2026 14:48:33 +0000
Manifest this update: Wed 18 Feb 2026 14:48:33 +0000
Manifest next update: Wed 25 Feb 2026 14:48:33 +0000
Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: 0YzqF+d5N583hHB78xRrwEUrplE+RDjC1iQyP1BhZc8=)
2: 796A04A6BA1A11F08C920A83C4F9AE02.roa (hash: XrkdqNUQGwomIdIUUZC2gUbbnUvFxDZ/p2osIbne7lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Validity
Not Before: Feb 18 14:48:33 2026 GMT
Not After : Feb 25 14:48:33 2026 GMT
Subject: CN=6995d141-1e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:3d:11:db:56:47:0e:0b:93:6c:f6:cc:78:
77:96:b6:f1:d7:36:12:d2:8e:d4:cc:35:ba:72:67:
ef:8a:12:bc:95:6f:6b:16:00:02:e4:1b:66:dc:aa:
1d:5e:4d:bf:97:fa:ab:c8:ef:2a:d9:39:f8:8d:c6:
c2:96:14:55:51:e1:ce:47:52:81:f4:b4:9e:db:4c:
0e:b5:d7:93:be:a5:32:4e:cf:98:1f:7e:e9:0a:9d:
06:2e:3a:10:63:ee:e2:01:f6:b4:99:f2:9c:55:32:
23:e2:40:22:35:2a:da:97:07:b5:78:c9:87:5a:ff:
5a:a5:02:0a:cd:e1:94:87:46:28:e2:c8:d5:47:08:
19:3f:90:31:57:ac:94:31:b3:10:8a:69:db:29:40:
2d:0d:77:e8:9f:e3:2b:5b:f0:38:a2:08:48:72:65:
36:4e:38:94:98:33:c0:fb:33:06:70:83:20:ab:fa:
ba:26:5a:21:28:a0:6a:fa:4e:58:2d:cb:48:bb:ce:
d8:ae:a6:36:5a:ec:13:67:cd:0b:b0:fb:a3:55:d5:
7c:61:8f:83:77:fb:35:b2:ed:71:c8:83:ca:80:7f:
57:bf:22:39:f6:a5:ef:fd:d8:31:34:b3:36:c7:b3:
5a:a3:8f:88:07:70:69:fb:e0:2b:cf:0e:84:96:42:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:1D:B8:1A:5B:10:AD:46:58:C8:84:46:C6:A1:5D:5B:20:5F:CE
X509v3 Authority Key Identifier:
keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:62:f6:7f:6d:45:48:13:fc:31:d9:5c:dc:f8:c1:c1:ea:
3e:21:0a:c1:ca:b6:79:dc:bf:15:d2:37:99:50:03:fd:fc:ac:
81:94:58:0f:6b:c3:16:18:a7:3c:78:47:bc:90:e3:f8:34:e1:
96:a7:a7:89:bb:1b:12:f3:d2:6f:dd:d6:4a:95:f2:7c:9c:2a:
a0:6f:2b:d3:93:47:cd:c8:b1:1c:31:56:55:5c:e4:a9:0d:5b:
63:73:dc:2a:ae:d6:16:a8:66:68:e9:c3:cc:28:71:5c:47:b4:
e4:59:e0:1c:5a:36:d1:17:bb:e7:0d:4f:f0:02:10:0b:4b:6b:
a1:ff:c0:0a:e3:ef:d3:69:6e:5d:c8:b4:9d:ed:78:77:ef:02:
a5:50:71:51:7f:ee:06:f4:98:b4:35:1f:3a:10:0c:ad:0d:2a:
00:fc:7c:3c:c8:88:96:d2:0b:86:8b:b4:c3:62:a3:ba:7f:3c:
20:54:6a:fd:0f:94:c7:a2:97:0e:4d:d0:64:1b:1f:25:e5:b9:
04:fd:26:d3:cf:01:c4:79:c9:70:8d:f9:aa:1e:f0:68:42:d2:
0c:4d:ef:03:46:76:62:2e:10:52:e2:e5:18:ba:40:82:d8:40:
12:21:1e:30:e4:8e:0b:7b:15:d5:d5:ef:fc:70:fd:27:1f:1d:
5d:ee:8e:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND
QkMwMzJFRDgwHhcNMjYwMjE4MTQ0ODMzWhcNMjYwMjI1MTQ0ODMzWjAYMRYwFAYD
VQQDDA02OTk1ZDE0MS0xZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnG09EdtWRw4Lk2z2zHh3lrbx1zYS0o7UzDW6cmfvihK8lW9rFgAC5Btm3Kod
Xk2/l/qryO8q2Tn4jcbClhRVUeHOR1KB9LSe20wOtdeTvqUyTs+YH37pCp0GLjoQ
Y+7iAfa0mfKcVTIj4kAiNSralwe1eMmHWv9apQIKzeGUh0Yo4sjVRwgZP5AxV6yU
MbMQimnbKUAtDXfon+MrW/A4oghIcmU2TjiUmDPA+zMGcIMgq/q6JlohKKBq+k5Y
LctIu87YrqY2WuwTZ80LsPujVdV8YY+Dd/s1su1xyIPKgH9XvyI59qXv/dgxNLM2
x7Nao4+IB3Bp++Arzw6ElkKNKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGS3Hbga
WxCtRljIhEbGoV1bIF/OMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE
OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUVBOS9DRUQwQTlFNjFEOTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91
Q2J1UnlyeEVQSXpMd0RMdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZrmL2f21FSBP8Mdlc3PjBweo+IQrByrZ53L8V0jeZUAP9/KyBlFgP
a8MWGKc8eEe8kOP4NOGWp6eJuxsS89Jv3dZKlfJ8nCqgbyvTk0fNyLEcMVZVXOSp
DVtjc9wqrtYWqGZo6cPMKHFcR7TkWeAcWjbRF7vnDU/wAhALS2uh/8AK4+/TaW5d
yLSd7Xh37wKlUHFRf+4G9Ji0NR86EAytDSoA/Hw8yIiW0guGi7TDYqO6fzwgVGr9
D5THopcOTdBkGx8l5bkE/SbTzwHEeclwjfmqHvBoQtIMTe8DRnZiLhBS4uUYukCC
2EASIR4w5I4LexXV1e/8cP0nHx1d7o67
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:45 2026 by rpki-client