
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: ta1ZTA6FxQAEaHPHLS/JNTG0i4r7+WTkX6uhzXZxzSU=
Subject key identifier: 5B:0A:E7:8A:4B:58:B5:CD:E9:64:4E:BE:8E:88:AE:7C:F5:E8:D1:09
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 0333
Signing time: Thu 19 Feb 2026 00:20:12 +0000
Manifest this update: Thu 19 Feb 2026 00:20:12 +0000
Manifest next update: Thu 26 Feb 2026 00:20:12 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: 53LtKiuIHAVVBxdZBAEiuBGtFyA4ieNkFXE67Z1NqVk=)
2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: j8sJFdaGh5hoT/OlB8BepmWR8CssCrYtB82PMaTll9o=)
3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: gPhfTgtKlx4wmH5qoiWguK/Xx1pbfFOHbMckJ1VrL+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Feb 19 00:20:12 2026 GMT
Not After : Feb 26 00:20:12 2026 GMT
Subject: CN=6996573c-3bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:03:fb:ad:fd:ca:21:09:ef:3d:1e:d6:12:
ca:28:0e:60:2f:1d:05:32:b0:00:bc:63:53:13:07:
7a:c0:b3:95:16:df:be:43:fb:40:dd:86:b4:a5:ae:
b2:49:2b:b3:44:88:4d:62:aa:75:b9:f5:05:74:d5:
f5:30:02:d6:56:92:e5:e3:10:76:b8:31:e7:a3:29:
61:14:89:5d:bd:90:5c:10:96:ab:08:d9:75:30:23:
66:82:50:09:e0:81:c2:a0:9e:d6:27:9d:da:48:22:
ad:b8:46:94:dd:14:ac:8a:c4:a2:f5:ce:43:1e:d0:
09:62:fe:35:7c:4e:95:dd:06:7b:9f:e0:cd:82:e6:
ca:ea:6f:7e:eb:25:6a:7d:3d:d3:ca:89:57:30:a3:
0b:28:79:4b:71:81:65:26:7c:b3:90:41:7d:ce:c7:
47:b8:03:ba:52:61:dc:88:27:f4:e8:97:e1:9b:ad:
79:3b:f4:64:fd:74:fe:4a:0c:fb:df:0d:78:19:72:
41:55:f6:43:e4:33:ee:7d:86:e5:ea:f5:f4:56:ea:
11:99:f1:7e:75:fa:d9:d6:88:3c:9d:99:03:37:9a:
7c:1b:26:05:54:ef:07:86:f8:44:be:22:9d:b8:39:
f5:e9:eb:c2:3f:8e:e1:24:e6:b6:e4:3f:e5:9c:88:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:E7:8A:4B:58:B5:CD:E9:64:4E:BE:8E:88:AE:7C:F5:E8:D1:09
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:f5:e6:f4:d7:c5:1d:97:0c:47:bc:86:53:38:e5:d0:2a:1d:
2c:3e:8d:34:ba:e2:f1:48:98:14:52:b9:1d:08:d2:ff:9b:c1:
11:33:74:9f:ab:59:cb:7d:9d:4f:0c:37:15:a3:fe:b0:bf:db:
bf:1e:4d:14:c2:62:02:ae:e2:0c:dc:8c:96:b4:d3:aa:1d:e5:
91:90:39:2c:30:ef:5e:40:a5:1f:77:17:0d:1f:ee:dd:60:be:
df:cf:47:75:7f:cb:dd:11:61:65:2a:b7:72:c1:a1:a6:81:3a:
17:e6:0e:b6:0f:de:8d:3f:99:0e:00:2f:0c:ac:1f:c3:53:54:
a4:4b:fd:69:77:01:4a:ca:67:f7:13:44:b9:3f:14:6a:39:d1:
9d:06:55:e7:bf:10:8d:dc:84:0c:03:31:c1:87:38:58:dc:49:
dd:f9:66:f2:cd:39:79:93:d8:67:db:ce:72:4f:6f:11:9b:ad:
1d:99:c3:19:60:e7:49:32:6c:5a:e2:2f:fd:f3:82:7c:ab:ac:
8d:e1:fd:13:84:08:e3:65:a6:60:2d:81:c9:a0:b5:fb:48:fe:
8d:27:35:76:81:a0:64:98:aa:4c:0a:3b:25:65:c5:e0:d7:68:
fb:b1:f0:fb:d7:b6:55:eb:66:a4:b3:b2:e2:7a:e4:36:80:f0:
af:25:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:33 2026 by rpki-client