
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
File: BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json)
Hash identifier: u3tWoQ5pKf8eK9TaUi7zgLsE+Lme3Lf00TvPdhDzDcA=
Subject key identifier: 36:D0:5E:BC:9F:79:38:44:C3:D7:39:2B:79:94:43:BE:95:4D:20:5F
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
Manifest number: 0141
Signing time: Thu 19 Feb 2026 03:46:18 +0000
Manifest this update: Thu 19 Feb 2026 03:46:18 +0000
Manifest next update: Thu 26 Feb 2026 03:46:18 +0000
Files and hashes: 1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: 8+Y5VuoFmliLZEr4p+qTLB2WKOHMBmeTH64ltUMkJMM=)
2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: KgWGTanyX6yUWjTf/f+n7HM6qpw4Ft2mJJiD1oMoEsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Validity
Not Before: Feb 19 03:46:18 2026 GMT
Not After : Feb 26 03:46:18 2026 GMT
Subject: CN=6996878a-e252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:3f:ec:53:09:16:d5:f1:7a:29:0f:59:4b:
a6:dc:ea:ab:60:4e:d9:ae:e7:08:ce:6a:7c:ff:30:
75:cc:0b:29:19:f8:53:9b:63:df:20:04:08:bd:75:
c5:3b:08:a6:74:ec:8f:8a:6e:47:22:40:2b:0f:4d:
2e:d1:a2:b0:c6:fc:f8:d6:ea:3b:bc:0d:b6:f2:e6:
f3:30:08:fb:42:2e:b1:b6:0e:2c:eb:07:db:60:70:
6f:74:ee:d2:cb:9e:a3:ae:7e:73:19:db:85:a4:28:
14:d5:e0:76:40:c6:0f:5d:35:c9:8c:de:3c:ee:d7:
fe:7f:a5:48:16:75:7c:1f:f2:b8:0c:64:07:a4:55:
2e:10:29:01:93:21:0d:cf:bc:22:9c:f1:bb:1f:51:
21:41:66:66:4a:e2:5c:8e:aa:ad:5b:91:1d:fe:7d:
5e:db:5f:61:3d:be:80:03:04:9f:79:71:ed:ad:f3:
39:9f:0f:63:5d:84:55:72:ca:c0:e6:fc:b7:ea:e7:
c9:7c:3f:2c:64:6c:de:bf:12:5b:26:25:77:aa:d2:
2f:8a:d0:89:fb:02:51:7b:e2:cc:00:5f:a9:35:c1:
1b:1f:bc:b7:c6:0e:e4:b3:16:ec:84:48:1d:ae:26:
5d:3e:ba:5e:a5:51:25:16:38:40:f3:1a:d4:e9:1c:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:5E:BC:9F:79:38:44:C3:D7:39:2B:79:94:43:BE:95:4D:20:5F
X509v3 Authority Key Identifier:
keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4d:ac:74:f6:87:bc:4b:10:b5:11:a1:fe:cd:d4:0b:45:b7:
c0:65:c0:df:6a:73:b2:a5:f7:9f:b5:00:7a:40:72:d6:b6:8f:
5b:49:15:71:f0:3e:f7:07:21:b6:e8:4d:68:7d:af:e6:b3:38:
47:29:71:ae:58:e5:80:70:ee:2c:ad:67:b4:da:fa:ad:06:50:
09:51:fd:5b:d0:34:34:27:21:b1:0a:5d:08:5e:da:c9:3c:86:
d8:02:e1:bd:c3:e1:5d:79:de:ea:f6:4f:f3:12:0b:a9:f8:74:
bb:5b:4e:b7:37:aa:3e:14:d1:8e:e1:01:7c:f9:f5:62:72:2b:
88:d4:51:9f:a8:e2:da:01:02:0c:64:71:21:61:d6:af:f2:82:
7e:44:99:85:27:22:a2:3f:c0:4f:60:c9:c1:f3:47:ca:68:81:
39:76:44:e3:3d:4f:5a:0b:9c:d8:93:ad:95:53:7b:b3:02:fb:
b7:d8:b7:cb:6c:b9:01:56:04:78:c2:d3:d9:ef:13:eb:c6:87:
d9:25:f9:50:d0:36:8a:ba:c9:6d:22:2d:0c:95:87:8d:b1:c8:
1d:4e:2c:71:08:a6:58:1e:35:53:a0:b3:90:fa:85:64:e3:14:
bd:1b:68:9d:06:f4:46:70:3a:b4:eb:35:42:0d:93:e2:0f:57:
52:ac:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:21 2026 by rpki-client