
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier: WSweMW0OYn4KlhoIv9vTbpSHjDRD+2RhMEAtLnauuZQ=
Subject key identifier: B0:B9:A0:32:25:28:38:03:01:72:B8:40:70:71:12:D7:A9:A7:30:53
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial: 1199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number: 118F
Signing time: Wed 18 Feb 2026 16:57:29 +0000
Manifest this update: Wed 18 Feb 2026 16:57:29 +0000
Manifest next update: Wed 25 Feb 2026 16:57:29 +0000
Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: kh0OsnovlpL0Q4FLOgZq3vcfaXgCGg8QxjVJ//osK+o=)
2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: EsICdDI/f2T7+aUXSRJuKGq/JA27xtHkCXqw8t/ob1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4505 (0x1199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Validity
Not Before: Feb 18 16:57:29 2026 GMT
Not After : Feb 25 16:57:29 2026 GMT
Subject: CN=6995ef79-85d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:73:8f:ac:01:a5:c3:92:2d:d7:a2:b4:48:
e3:f8:0f:59:74:22:a0:bb:4c:a3:de:eb:e7:9c:ad:
3e:39:f0:70:f6:4f:46:04:25:8e:2a:5a:72:16:67:
f9:f3:f0:00:51:83:cf:6e:fd:f2:ce:4f:cb:53:50:
c5:51:90:ad:c6:d0:2b:b3:74:58:d8:69:90:4a:d0:
aa:9e:28:ad:83:a0:c5:35:9c:ba:08:fb:fa:b6:0f:
df:4e:43:a9:6c:33:af:e8:69:28:3f:7f:15:61:71:
40:bd:69:30:f8:a6:49:58:96:64:bd:27:73:7b:e4:
e0:d3:10:4f:cc:93:e1:e3:ad:38:55:d0:e0:42:26:
df:18:53:66:05:17:3d:a1:a0:e4:14:17:05:d7:0d:
28:d5:63:86:a0:2a:e5:14:6d:67:76:19:f6:f6:fd:
fb:04:ed:6f:83:a5:63:6b:94:b8:c4:0a:39:23:78:
65:08:30:50:9a:72:0d:a0:0b:3f:37:d5:89:22:88:
17:3e:e7:5b:b6:ac:78:ce:44:c6:87:e8:ec:ff:a2:
8e:b1:87:72:b4:cf:f5:dd:5e:a0:81:22:a7:56:66:
f3:9a:5f:25:50:97:df:95:39:a1:41:3e:40:99:9a:
18:fa:51:a9:4d:14:bc:21:65:32:e1:15:3e:ab:8a:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:A0:32:25:28:38:03:01:72:B8:40:70:71:12:D7:A9:A7:30:53
X509v3 Authority Key Identifier:
keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9f:5b:5c:77:aa:8d:3c:ff:af:b2:fd:e3:bb:2b:b3:56:82:
1b:92:49:10:22:8c:d1:99:7a:7f:7d:12:b7:1d:d7:77:97:be:
ae:c1:e1:aa:67:91:c2:19:0e:df:5d:0b:3a:bb:0b:0d:e9:e6:
f7:28:5c:30:a3:dc:f3:e0:50:e7:32:5e:70:e7:74:85:00:cc:
5e:71:02:f5:76:74:94:86:63:23:64:c9:cc:b8:f2:06:30:95:
06:52:3c:ff:4f:36:9d:56:c9:e7:5a:80:2e:f9:ab:d8:a1:b4:
65:d4:13:d8:05:12:ff:68:94:90:3d:d4:ca:ff:53:ac:c8:a0:
fb:9b:3b:d6:27:d0:89:84:d2:0b:de:2a:57:7a:9c:64:fa:b0:
e0:c3:3a:1c:9e:c9:29:d8:cb:b6:02:d1:12:50:73:fb:0e:ed:
f9:4a:14:19:da:a2:12:55:23:71:e7:63:2e:3c:80:e3:4f:3a:
f5:a1:bc:c1:58:9b:9d:7b:d6:a8:35:a8:d2:d6:e1:13:ff:f4:
49:a6:b7:d5:54:9d:67:14:34:62:89:25:e7:7c:27:a6:ef:9d:
8b:ff:1a:44:56:30:17:91:3b:f4:53:00:fd:5d:21:2a:e5:68:
f3:dd:e7:f1:8f:8b:9f:22:17:04:d2:b7:2b:c6:6a:a4:ca:ad:
9c:e8:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:18 2026 by rpki-client