
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
File: 2lexkcVbszGevZGC3A1Oau8-Ddg.mft (raw, json)
Hash identifier: b3Jw/rw7qeInK/aLuC/7cs5SE3xYo32ghVfV/YLg3Y8=
Subject key identifier: 02:A4:5D:08:0E:15:C3:31:46:81:82:87:87:B5:57:3F:7D:1E:A3:62
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Certificate issuer: /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
Manifest number: 0211
Signing time: Thu 19 Feb 2026 01:41:24 +0000
Manifest this update: Thu 19 Feb 2026 01:41:23 +0000
Manifest next update: Thu 26 Feb 2026 01:41:23 +0000
Files and hashes: 1: 2lexkcVbszGevZGC3A1Oau8-Ddg.crl (hash: cIWVqhZCjLG0yIsaKzYcjuBjfemulKoFbgU3hhPSZhM=)
2: 7DA38A8E727011F08682A20EC4F9AE02.roa (hash: Wwngk0PhTjjlaVWZbm+erGU8S4svzLGsMCsoXoSIiNE=)
3: 5181F33CE8C011EDADA54A23C4F9AE02.roa (hash: Rkwm42Vb05Pye3RGHBOFC1rkc6+xEeMKra2X3IcXiEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A31E, serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Validity
Not Before: Feb 19 01:41:23 2026 GMT
Not After : Feb 26 01:41:23 2026 GMT
Subject: CN=69966a44-fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:e7:13:35:86:74:74:e2:b6:56:71:58:fc:
77:bd:0d:17:dc:62:a6:ba:68:70:2f:79:a1:bb:a8:
25:10:d2:9f:70:92:86:01:84:aa:2b:e8:91:9a:c8:
23:22:da:6a:44:ce:97:62:88:59:11:8a:66:44:73:
17:d4:1f:e3:ce:7b:47:10:30:1f:dd:60:cd:9a:79:
89:24:4a:10:2a:49:bd:77:59:0d:5c:2a:8f:54:43:
df:f0:5c:98:70:a8:6e:3c:59:29:40:14:f8:f3:0b:
c9:48:12:97:8c:a5:0e:42:2e:11:61:ef:21:08:a8:
12:f5:1a:9d:94:1e:94:59:e3:ca:d8:a5:ae:11:50:
d9:5c:96:d0:15:65:b1:3b:e2:8f:1d:3a:a6:42:58:
df:b4:1e:56:80:3c:99:68:71:94:3d:9d:c9:72:26:
15:05:79:7d:45:54:9f:65:00:b1:01:77:bc:3e:74:
38:61:4f:34:69:55:59:50:3a:fb:1d:19:42:1c:71:
be:5f:10:59:ec:92:29:23:36:94:f3:c5:e8:7a:35:
28:10:ae:d4:aa:7d:e3:54:a1:49:3f:26:a7:1e:59:
0b:f6:95:cb:3a:94:5f:76:6e:9d:39:de:33:ad:ae:
0d:dd:a5:47:af:05:dc:f5:f8:51:ee:67:f5:78:af:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A4:5D:08:0E:15:C3:31:46:81:82:87:87:B5:57:3F:7D:1E:A3:62
X509v3 Authority Key Identifier:
keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:f8:98:f5:bb:5c:a0:a1:d0:37:5b:50:72:6b:e6:96:42:f8:
85:96:2b:e1:74:56:8c:2d:25:6c:cd:d2:8e:4d:11:c3:f9:51:
db:c1:3b:68:21:57:f9:d8:e7:9f:c0:15:1e:c0:ab:5f:58:ec:
a1:a9:4b:89:7b:b7:78:a7:d6:e9:d3:a9:6a:76:ff:42:cd:4a:
91:9c:0b:ec:97:0f:09:b1:ef:16:c0:01:f2:60:3c:b1:ea:3c:
f2:f9:76:e6:25:5e:d0:43:9b:20:2e:06:d1:5d:6d:fb:ac:02:
46:c3:ad:b4:3e:55:06:8b:a7:25:c0:0c:7e:1b:59:65:a4:0a:
0d:9f:3b:97:21:7b:4a:2b:b5:7e:27:8a:aa:2e:d6:6f:5c:25:
83:64:93:46:1c:f1:db:22:c1:0b:05:09:ec:a0:d3:84:70:09:
c9:6b:8f:c4:2c:54:5d:8c:79:ce:8c:a8:94:f9:3c:ea:28:52:
46:19:a8:19:5f:78:47:92:7b:24:8b:f5:57:5a:8a:29:31:bf:
84:6b:f3:8b:60:76:ff:fa:47:a2:dc:d5:ed:3d:3c:87:53:ce:
30:0a:7f:28:1d:07:b2:b5:2b:9c:d3:64:4e:3a:2c:e4:b0:ba:
23:56:2e:21:a1:45:ce:d4:a5:eb:6c:6f:45:22:7f:f6:dc:79:
2f:b6:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:13 2026 by rpki-client