
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json)
Hash identifier: hRTOx3YSCpnBfm+286iFdevpsl78hxbhK5LH6LRm8c0=
Subject key identifier: 64:37:5C:5C:53:FF:29:67:EB:E6:57:F4:4F:E8:E9:2F:64:6A:70:57
Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6
Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6
Certificate serial: 0C7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
Manifest number: 0C77
Signing time: Wed 18 Feb 2026 18:13:50 +0000
Manifest this update: Wed 18 Feb 2026 18:13:50 +0000
Manifest next update: Wed 25 Feb 2026 18:13:50 +0000
Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: qYwn8tHSBboL7L6XTAe2r/SFS4Gtb98DlMjMvB/tcOQ=)
2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: DkIZeAaAkan684ICatRphM4s8owrBwB7oASzcpSzFXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl
rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3199 (0xc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6
Validity
Not Before: Feb 18 18:13:50 2026 GMT
Not After : Feb 25 18:13:50 2026 GMT
Subject: CN=6996015e-25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:26:77:26:42:84:99:83:13:5d:15:d0:9a:
3c:6b:8b:2d:e0:10:10:d3:37:0e:67:86:b9:cb:79:
cc:10:5f:70:78:d6:e4:60:80:25:e7:ff:de:ff:17:
96:e1:7c:7e:a0:40:ab:0c:f2:96:40:66:1f:10:31:
d8:50:4b:c4:ff:b6:58:cf:14:21:5b:08:e4:ee:ec:
e0:62:b4:4f:5d:6f:7a:9e:ed:d2:94:e9:86:55:5a:
63:d6:ca:fa:db:06:e3:3f:e2:f1:84:04:36:d8:f0:
25:15:9b:65:99:d0:c4:13:cb:8b:8a:6c:8f:19:63:
3e:9a:30:0c:23:3f:f3:5e:21:b6:62:0c:c7:7a:6c:
3f:17:fb:db:d3:ca:40:56:1d:77:ef:18:62:87:f2:
09:27:1d:b4:9a:e6:b2:0c:21:7e:d1:92:32:d6:cb:
20:b8:5a:02:65:f3:75:6a:a1:de:2c:4f:23:6d:ff:
65:c6:07:a5:1a:a7:59:ea:b6:64:2c:41:e4:b7:00:
7e:eb:02:e9:53:0c:1b:06:85:4c:7e:55:ac:c6:c6:
40:18:71:9b:49:9b:5e:23:99:ae:cd:8c:21:01:12:
72:24:a9:95:68:29:14:d1:36:db:c1:a2:44:60:04:
29:2e:dc:32:cb:18:24:21:33:ae:ea:1f:6b:74:8c:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:5C:5C:53:FF:29:67:EB:E6:57:F4:4F:E8:E9:2F:64:6A:70:57
X509v3 Authority Key Identifier:
keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:fb:6d:e7:9e:aa:7a:f7:1b:47:c9:bb:9c:25:03:dd:a0:e0:
c5:d6:35:d4:6c:c1:4a:e6:30:51:91:20:dd:f3:0a:34:55:83:
71:60:02:2f:b2:12:88:d1:cf:87:8f:52:c9:bb:3e:5a:5e:8e:
18:4d:1f:1d:20:77:97:c5:d2:0c:49:5f:f9:f1:fb:6a:0b:6f:
71:1d:1e:f2:70:3e:5c:17:2b:a3:45:ec:a4:68:c1:68:f3:4c:
f3:8f:ff:d8:ea:ef:03:bc:5b:d7:77:4c:94:1c:b1:43:6c:14:
29:87:f8:5c:45:39:19:e3:01:15:79:f4:d6:67:7c:cf:51:9d:
5b:9c:77:6a:af:5a:24:b1:aa:28:3d:25:4a:a2:01:c8:5e:83:
bd:3e:28:a8:f8:9d:63:57:f6:50:70:3b:e4:96:e9:23:b7:4d:
de:dc:6d:3f:76:4a:ed:87:92:fd:7b:51:89:be:0a:c7:54:30:
a6:ce:60:e8:d5:12:78:b1:57:56:17:18:7e:2f:38:5a:ed:32:
4c:6b:b9:b0:12:73:1c:b7:1d:fa:7f:e0:76:e2:18:fb:3e:e6:
d7:96:fa:06:98:f2:42:4d:ea:7f:ee:be:4f:74:d4:cf:43:6b:
25:ef:36:0e:3c:01:74:af:5f:8d:68:5f:fe:3a:c4:60:41:4b:
3f:34:5e:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG
RENFRjIxRDYwHhcNMjYwMjE4MTgxMzUwWhcNMjYwMjI1MTgxMzUwWjAYMRYwFAYD
VQQDDA02OTk2MDE1ZS0yNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtikmdyZChJmDE10V0Jo8a4st4BAQ0zcOZ4a5y3nMEF9weNbkYIAl5//e/xeW
4Xx+oECrDPKWQGYfEDHYUEvE/7ZYzxQhWwjk7uzgYrRPXW96nu3SlOmGVVpj1sr6
2wbjP+LxhAQ22PAlFZtlmdDEE8uLimyPGWM+mjAMIz/zXiG2YgzHemw/F/vb08pA
Vh137xhih/IJJx20muayDCF+0ZIy1ssguFoCZfN1aqHeLE8jbf9lxgelGqdZ6rZk
LEHktwB+6wLpUwwbBoVMflWsxsZAGHGbSZteI5muzYwhARJyJKmVaCkU0TbbwaJE
YAQpLtwyyxgkITOu6h9rdIybbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQ3XFxT
/yln6+ZX9E/o6S9kanBXMB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1
OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ
ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr
VkcyV0tmUWh3M2I5enZJZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQ+23nnqp69xtHybucJQPdoODF1jXUbMFK5jBRkSDd8wo0VYNxYAIv
shKI0c+Hj1LJuz5aXo4YTR8dIHeXxdIMSV/58ftqC29xHR7ycD5cFyujReykaMFo
80zzj//Y6u8DvFvXd0yUHLFDbBQph/hcRTkZ4wEVefTWZ3zPUZ1bnHdqr1oksaoo
PSVKogHIXoO9Piio+J1jV/ZQcDvklukjt03e3G0/dkrth5L9e1GJvgrHVDCmzmDo
1RJ4sVdWFxh+Lzha7TJMa7mwEnMctx36f+B24hj7PubXlvoGmPJCTep/7r5PdNTP
Q2sl7zYOPAF0r1+NaF/+OsRgQUs/NF7a
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:04 2026 by rpki-client