
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json)
Hash identifier: ZuD9YfFaR3FTCp0+Fyoy2+XRV3NkA/ZZxoIdvsn507c=
Subject key identifier: 8B:AB:12:D3:D8:AF:55:B7:B0:61:5E:1F:E8:70:55:D1:79:41:8A:9B
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
Manifest number: 085C
Signing time: Sat 28 Feb 2026 21:05:22 +0000
Manifest this update: Sat 28 Feb 2026 21:05:21 +0000
Manifest next update: Sat 07 Mar 2026 21:05:21 +0000
Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: VFD87XBjjC6ZRSnJu5+XgalQXiemBMLmjX5ReUccrJI=)
2: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=)
3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=)
4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=)
5: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=)
6: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Validity
Not Before: Feb 28 21:05:21 2026 GMT
Not After : Mar 7 21:05:21 2026 GMT
Subject: CN=69a35892-4149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:ff:ac:9c:82:9f:03:8c:61:68:c0:3e:f8:
d3:13:90:ec:08:2c:2b:31:0f:9b:a9:d9:18:9d:61:
18:06:76:57:15:fb:70:e1:ed:4e:56:d6:30:38:fb:
4a:d5:ec:f3:21:22:29:aa:93:65:43:f6:6e:fc:5d:
73:59:b2:06:b5:b1:c6:3f:e9:95:af:2e:2b:e1:5e:
89:3d:53:bb:58:ec:aa:44:ea:ee:0a:6e:c3:06:93:
ca:96:52:8e:9d:97:6b:0d:70:aa:2d:21:a5:12:00:
05:fe:c6:59:69:a8:12:52:7f:34:55:e9:32:66:e4:
a8:30:b9:5b:38:a9:1e:e1:16:aa:de:2f:50:aa:d0:
bd:c0:d5:7b:12:a2:5e:86:02:c6:70:12:0d:ba:9e:
82:0b:63:17:bd:62:97:d8:a8:ba:e2:42:26:cf:35:
83:af:8c:56:8d:79:9a:4a:4e:b9:98:28:85:dc:1f:
7a:40:23:16:67:8f:d1:34:41:51:92:4a:90:1c:b8:
1d:49:73:c4:82:81:18:c7:5a:47:1d:74:d6:2c:2a:
17:3e:40:9d:f5:84:9d:19:52:00:57:ab:16:a9:63:
1e:85:f7:c4:65:17:5c:5c:4d:cd:74:e9:37:02:94:
fd:d4:62:bf:5d:9b:30:9b:f0:1f:fc:a6:13:f6:74:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AB:12:D3:D8:AF:55:B7:B0:61:5E:1F:E8:70:55:D1:79:41:8A:9B
X509v3 Authority Key Identifier:
keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:c7:38:67:16:20:06:b8:7f:19:d5:5a:10:07:f5:67:a5:
6d:20:6a:34:e8:fd:ae:11:a8:76:41:aa:72:19:38:5d:bc:79:
fb:c4:c5:3f:21:26:d8:8f:6b:46:61:93:03:fb:23:e0:44:75:
31:7b:92:19:ba:70:43:4f:72:1c:02:5e:07:8b:0f:da:8c:28:
71:ff:4f:b6:fd:f7:12:c4:a6:f3:d7:b1:a9:13:3d:ae:a7:1b:
ea:6e:3a:05:32:5b:ef:86:01:d9:7d:c0:09:6a:a3:08:37:5b:
f2:c8:5d:87:7d:5d:52:ee:a6:ff:ef:7e:4e:9c:e2:19:a6:4b:
1a:3f:ca:4a:f2:14:e5:f2:94:44:d9:29:62:0c:28:90:52:6f:
fe:d6:2b:3b:e6:dd:58:73:1c:48:b1:07:75:09:ff:e7:58:56:
78:a0:43:58:75:2d:e5:75:72:d3:89:ba:ed:17:4c:57:b0:fc:
d8:53:a0:fa:09:6d:c4:e9:d7:c1:e4:15:f8:fc:79:6c:18:ac:
cd:2f:c3:2a:48:65:c2:98:a0:07:11:01:1b:41:2b:3e:4e:50:
8d:06:8a:45:2f:86:15:da:28:64:18:aa:75:da:e9:3c:c9:35:
e0:e1:d7:96:e2:bd:19:de:82:bb:6e:00:27:2e:92:89:18:6f:
8c:58:a9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:39 2026 by rpki-client