
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json)
Hash identifier: cwGlE62g+vVZi61dIgxDNOC5rMTM1U3atFjNmn/fkvQ=
Subject key identifier: 4F:F5:AD:FE:16:4F:80:00:74:29:02:1C:8E:4E:44:9A:12:02:56:90
Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
Manifest number: 01AC
Signing time: Thu 19 Feb 2026 02:42:19 +0000
Manifest this update: Thu 19 Feb 2026 02:42:19 +0000
Manifest next update: Thu 26 Feb 2026 02:42:19 +0000
Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: QK6oShcK+LLk+Y3L1pihUcEEytQbV70sLKifpytjqOI=)
2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: U4agPWdzg+657nBzmXm8tv0iPCxlt7k7aT6+OWC9ZVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Validity
Not Before: Feb 19 02:42:19 2026 GMT
Not After : Feb 26 02:42:19 2026 GMT
Subject: CN=6996788b-97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:22:34:62:d7:80:e6:ce:47:db:5d:2c:fb:
57:a9:a4:0f:18:ed:df:01:26:a6:18:a7:fa:08:98:
45:28:e7:75:ab:75:27:42:4d:77:3d:6b:2d:fa:d7:
be:17:c7:9d:ff:46:e9:0c:81:1c:2e:4d:e4:cd:15:
62:3d:13:37:9d:c9:e4:90:27:57:9e:08:61:df:3d:
41:54:0a:32:95:d4:97:d1:d7:eb:4d:15:3e:77:f1:
f9:79:29:b2:d2:5a:e9:ea:15:b7:f8:ab:81:32:36:
0b:9f:c8:e7:23:62:b4:99:22:e5:84:21:92:b6:b4:
8a:b3:c2:22:57:5f:a1:eb:db:da:22:9e:30:71:6f:
98:0a:0a:b9:cb:bf:10:6b:60:b4:62:12:86:4d:12:
05:8d:b4:ab:1c:a7:9c:ce:4d:58:6d:ee:70:0e:17:
88:c4:33:13:60:9b:14:9c:e5:f8:88:4e:36:4e:78:
61:7d:0d:52:e8:1c:89:37:e6:b7:d6:fb:04:de:c9:
c2:62:3a:48:0c:11:c0:e4:13:6c:e4:63:b5:78:80:
a5:0a:50:63:9b:6c:54:15:bc:22:a0:01:9f:d0:5e:
d1:a7:c7:00:15:3c:ff:0b:76:f6:f7:6b:62:9f:22:
d7:c5:ba:b4:de:04:6a:71:73:c3:36:9c:af:31:89:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:AD:FE:16:4F:80:00:74:29:02:1C:8E:4E:44:9A:12:02:56:90
X509v3 Authority Key Identifier:
keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:66:8f:fd:e9:0b:35:de:8a:64:6b:92:89:f6:ea:e4:a1:a5:
f3:48:ad:04:cf:03:15:b1:6c:80:24:45:2a:84:b1:d8:c6:4d:
c8:ca:b4:4d:63:6d:01:ef:90:0f:bc:d3:29:a0:87:fe:c8:bc:
db:b1:74:92:59:6a:a7:70:68:5f:f8:91:d4:cd:bf:13:86:06:
b1:82:96:bb:57:7f:1c:af:7b:3f:2b:af:d3:da:8f:23:af:07:
81:f9:12:76:31:29:8a:7d:8f:07:ca:e6:c0:ad:3e:aa:43:11:
7a:b1:42:eb:b7:f0:86:52:76:62:bc:60:c6:e0:73:ab:65:f5:
84:c6:f4:ae:01:cb:4b:b7:0c:fa:e4:73:8a:de:5f:81:ee:44:
1c:bc:0e:4b:e0:87:22:3f:97:8d:b9:4f:22:98:b4:25:d9:bc:
a8:14:96:81:c7:5e:f3:32:b5:ea:5b:39:a4:d9:b6:6c:ac:81:
0f:b8:94:f1:f9:a4:90:6a:0d:29:d7:de:a8:67:d1:19:7c:90:
85:77:41:55:7e:59:16:dd:c6:91:e8:39:1b:fd:31:18:50:4b:
4a:62:31:53:64:9b:4d:62:ef:9a:5a:47:51:90:7d:56:71:2f:
ff:96:53:ec:4f:f5:48:23:28:86:2d:03:ca:42:cc:c9:5e:0a:
61:a7:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:57 2026 by rpki-client