
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json)
Hash identifier: 4r9Bn0JEmQeLMDtG+FIM8uLaSLnbpiTFTis0cRwVDZc=
Subject key identifier: 33:21:59:04:EC:A1:78:67:F6:10:1F:C0:3A:96:95:03:72:27:67:3A
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
Manifest number: 020F
Signing time: Thu 19 Feb 2026 01:41:11 +0000
Manifest this update: Thu 19 Feb 2026 01:41:11 +0000
Manifest next update: Thu 26 Feb 2026 01:41:11 +0000
Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: bhxA2oEwIhmESwJrSD+Ka1rlwBvqZ4HdXBLxUKRVasg=)
2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Validity
Not Before: Feb 19 01:41:11 2026 GMT
Not After : Feb 26 01:41:11 2026 GMT
Subject: CN=69966a37-2feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:a7:55:23:94:24:a3:84:f1:84:36:c0:ea:
11:51:95:b3:db:db:c4:01:c5:59:e8:c4:7b:8d:21:
bb:29:56:8a:6f:2b:07:45:77:2c:df:68:69:e2:ce:
68:9c:ad:e3:89:3a:57:8d:ca:0f:c5:5c:7a:41:ee:
4f:5d:e0:d0:d5:9d:73:9b:89:16:38:23:5d:e8:15:
78:19:54:dc:bf:95:96:63:01:70:45:e2:40:05:58:
2b:b7:b2:dd:0a:54:3f:c8:a6:48:37:d8:67:bb:ef:
53:a5:24:18:a4:0c:56:76:b2:b8:e9:98:34:12:fb:
59:64:47:87:a4:90:80:a9:db:46:2f:4f:51:33:5d:
7f:8d:ba:79:28:74:76:b8:37:ff:b9:f3:ef:a1:7f:
36:23:fc:7f:39:2d:23:5e:04:cc:36:32:7b:aa:67:
50:05:36:57:4b:cb:16:df:f2:ec:b7:37:5e:dd:f4:
4f:55:cf:33:1b:c7:57:29:58:6f:7c:97:be:14:ad:
ca:69:d3:53:73:00:bb:6d:67:6f:56:f2:6e:f5:71:
7b:dd:83:e4:d2:f1:24:6d:7f:e7:a3:c6:ea:06:1c:
8f:02:64:6b:3e:d9:32:41:b3:83:19:1d:2d:93:51:
63:31:66:dc:34:2f:a7:02:53:a8:d2:f5:d8:86:42:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:59:04:EC:A1:78:67:F6:10:1F:C0:3A:96:95:03:72:27:67:3A
X509v3 Authority Key Identifier:
keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:ec:fe:62:f6:04:88:0f:95:a7:76:5e:84:43:0f:71:4d:
3a:28:20:92:e7:b6:f2:46:43:c8:cf:14:50:88:c6:5e:ff:b5:
97:59:47:99:85:29:55:b8:bd:6f:32:4b:ef:74:06:fe:1b:43:
4c:42:33:31:66:a2:50:cb:5a:14:18:bd:9e:1f:49:ce:5c:17:
20:ed:50:7f:77:98:9d:38:61:8e:5a:42:42:6c:df:a4:2a:21:
9b:6f:05:a5:a2:7f:a0:7e:98:0e:be:0a:2a:af:2b:3a:6c:c6:
fa:03:b5:63:84:ec:48:0b:b1:9a:7c:f9:a0:77:33:47:32:d5:
f7:73:df:ed:18:d0:93:9e:74:d4:29:f8:3b:d3:1e:af:bd:c6:
04:97:55:2f:86:3a:4d:46:9c:e1:0b:a3:74:96:f9:c1:3a:ce:
09:a0:82:0f:a1:12:e6:b1:0c:7b:d2:b9:7b:b5:67:a1:76:93:
7a:b4:7a:0d:d6:94:25:aa:9e:10:c5:04:90:ee:c5:5e:a2:45:
a3:17:8f:80:2f:24:5e:89:8f:dc:df:23:9c:53:f6:a1:cc:68:
49:68:2e:4d:63:23:4d:d3:0f:4f:8e:e6:4d:3f:eb:85:a1:ce:
a6:3b:b6:83:3c:d2:b9:f4:02:1c:9f:d2:41:db:78:0f:2a:18:
5b:d4:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:33 2026 by rpki-client