
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier: zh5ce2oJPckP06fscv9UA/bo9Sr3IXWAs0diLgsvOQE=
Subject key identifier: 64:55:E0:2B:BA:F6:30:D6:56:DB:D8:00:76:15:73:31:9B:DA:AF:92
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number: DA
Signing time: Wed 18 Feb 2026 22:01:00 +0000
Manifest this update: Wed 18 Feb 2026 22:00:59 +0000
Manifest next update: Wed 25 Feb 2026 22:00:59 +0000
Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: aRceFf9NyWn0IHH0hQfvG5y7Iz7CcoxlzyDiphHcskQ=)
2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: OViblnR/lHFk4KXUmFXJa3gycbDpdzSeFdas4fvP/W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Validity
Not Before: Feb 18 22:00:59 2026 GMT
Not After : Feb 25 22:00:59 2026 GMT
Subject: CN=6996369c-8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:f3:24:57:f2:f9:82:54:67:5c:e0:62:b5:
bc:4c:36:78:05:e0:89:6c:b4:a2:c9:61:a9:5b:2e:
56:8e:9b:bd:64:40:09:a0:a1:5f:86:af:ad:3e:cf:
f4:e6:c7:e0:30:fa:2d:74:e0:e3:30:7d:a4:65:f8:
39:c7:1d:e9:1c:7a:57:b8:26:38:c3:7b:81:9a:a3:
10:57:7c:82:c2:7d:c5:55:33:1b:d4:91:99:14:7f:
a2:a2:a2:96:4b:47:ec:e2:ea:78:7c:2a:fc:8f:55:
71:a8:a2:33:41:21:92:e2:c6:75:09:21:25:1e:04:
d4:d3:e0:21:ca:03:55:84:9a:be:a9:96:a7:18:7f:
dd:45:55:43:8d:16:b3:1e:d7:7e:a7:7d:8b:7a:08:
e2:81:fe:ea:7d:95:a0:db:f4:1e:f7:54:d6:dd:d8:
dd:5b:88:28:52:86:17:b6:20:42:34:73:42:3c:6f:
9f:d6:16:f6:2b:6f:06:25:50:b2:55:f5:6c:8a:7a:
8e:05:51:7c:83:ea:56:50:4c:41:9c:9e:0e:ab:ac:
55:0e:55:2b:c2:24:24:4e:6a:e3:01:3a:5c:64:88:
d0:fe:32:49:51:86:69:71:c7:97:b3:c2:6d:bc:d5:
61:01:78:71:07:6b:3e:14:0e:93:bc:70:22:d4:0e:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:E0:2B:BA:F6:30:D6:56:DB:D8:00:76:15:73:31:9B:DA:AF:92
X509v3 Authority Key Identifier:
keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:ef:2a:e8:9c:9e:52:53:3d:5c:c9:70:71:b5:37:c4:2d:9f:
33:5c:89:1f:8e:e7:6a:a7:14:76:3e:d6:88:e8:0f:a0:e5:c8:
98:7b:09:05:15:6f:d3:92:1b:68:29:0e:da:43:dd:e7:54:2d:
5b:71:cf:cb:3b:ff:29:1a:0e:ff:1a:b4:dc:2f:69:24:a8:32:
0c:37:b6:07:98:94:73:48:da:53:24:04:81:87:15:84:34:5d:
bb:fa:80:5c:b2:ca:b7:75:82:12:8e:23:13:1f:5f:d8:cb:5e:
3e:10:94:0d:6f:6b:ad:45:b9:e4:40:30:1f:2d:02:08:79:29:
ff:5a:05:07:9b:0b:e0:2f:1e:e4:03:ef:14:fe:ff:ef:71:a0:
5e:fd:3d:10:1c:bc:32:31:fe:a3:68:06:cc:87:74:5b:f1:d5:
f5:d1:c5:9f:bb:e4:be:65:17:b5:96:2e:0d:8e:49:7f:3d:31:
1e:64:44:c1:23:8a:9f:e6:c8:eb:59:7c:87:71:5b:94:c1:78:
18:94:43:b1:d8:24:c3:11:a4:51:4e:1a:72:cb:b2:be:23:3b:
68:41:8d:c8:d3:21:f8:ef:8d:e4:21:15:b9:0c:6c:59:55:62:
d1:f6:29:ad:e4:cf:ed:e4:5a:27:58:c2:c1:8b:2f:d8:93:91:
36:64:f4:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBODIxMTAvBgNVBAUTKDY4NDEzRDQxRjYwMDVFMDMxNkUwRTI1NzZGMjI2QzIx
ODhBQTE1NkYwHhcNMjYwMjE4MjIwMDU5WhcNMjYwMjI1MjIwMDU5WjAYMRYwFAYD
VQQDDA02OTk2MzY5Yy04ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjm7zJFfy+YJUZ1zgYrW8TDZ4BeCJbLSiyWGpWy5Wjpu9ZEAJoKFfhq+tPs/0
5sfgMPotdODjMH2kZfg5xx3pHHpXuCY4w3uBmqMQV3yCwn3FVTMb1JGZFH+ioqKW
S0fs4up4fCr8j1VxqKIzQSGS4sZ1CSElHgTU0+AhygNVhJq+qZanGH/dRVVDjRaz
Htd+p32Legjigf7qfZWg2/Qe91TW3djdW4goUoYXtiBCNHNCPG+f1hb2K28GJVCy
VfVsinqOBVF8g+pWUExBnJ4Oq6xVDlUrwiQkTmrjATpcZIjQ/jJJUYZpcceXs8Jt
vNVhAXhxB2s+FA6TvHAi1A4AHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRV4Cu6
9jDWVtvYAHYVczGb2q+SMB8GA1UdIwQYMBaAFGhBPUH2AF4DFuDiV28ibCGIqhVv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi9GNjk5RTM1NENG
MTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhnTVc0T0pYYnlKc0lZaXFG
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0E4Mi9GNjk5RTM1NENGMTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhn
TVc0T0pYYnlKc0lZaXFGVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBC7yronJ5SUz1cyXBxtTfELZ8zXIkfjudqpxR2PtaI6A+g5ciYewkF
FW/TkhtoKQ7aQ93nVC1bcc/LO/8pGg7/GrTcL2kkqDIMN7YHmJRzSNpTJASBhxWE
NF27+oBcssq3dYISjiMTH1/Yy14+EJQNb2utRbnkQDAfLQIIeSn/WgUHmwvgLx7k
A+8U/v/vcaBe/T0QHLwyMf6jaAbMh3Rb8dX10cWfu+S+ZRe1li4Njkl/PTEeZETB
I4qf5sjrWXyHcVuUwXgYlEOx2CTDEaRRThpyy7K+IztoQY3I0yH4743kIRW5DGxZ
VWLR9imt5M/t5FonWMLBiy/Yk5E2ZPTF
-----END CERTIFICATE-----
Generated at Fri Feb 20 03:09:45 2026 by rpki-client