
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json)
Hash identifier: 6vSN5gL+ryv0bEGY9bNVmnNDlZuDOKDQHF5jlFuLwDg=
Subject key identifier: 8C:EA:A4:96:CA:67:95:0C:09:00:8B:41:F4:68:FB:5A:5C:B2:FE:C5
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial: 03ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
Manifest number: 03D1
Signing time: Wed 18 Feb 2026 23:51:45 +0000
Manifest this update: Wed 18 Feb 2026 23:51:44 +0000
Manifest next update: Wed 25 Feb 2026 23:51:44 +0000
Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: frV7Ik52D3zbecdilo4Dej4FiNRS3Rtzuuq4+IhXdl4=)
2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: 7hic6UONO0B455KhpL0YJRnN6Tw5oyNjErH5A+IJRxA=)
3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: L2Pd8jB/i+ABeqpyLFwMSDyc47P9cj5jXqAEMCEAC1Q=)
4: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: TGtBMLjAQZMZJ1khWN0b0rXwvGwxupeZB+kuz4CTJXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Validity
Not Before: Feb 18 23:51:44 2026 GMT
Not After : Feb 25 23:51:44 2026 GMT
Subject: CN=69965091-dc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:ec:99:13:5e:03:1e:9a:25:71:9a:6b:86:
b8:8e:99:9d:66:b3:cf:68:68:46:d3:6c:fe:5e:86:
dc:0e:bd:b6:80:d6:f2:44:aa:b1:b2:06:52:c9:0e:
63:5b:bc:1f:59:7c:69:18:1c:c4:9c:70:e9:c3:e0:
24:a6:df:10:83:d9:82:7c:10:fb:55:ff:4c:11:19:
b7:4f:bc:27:ab:39:62:f0:ae:02:4d:a7:04:2f:ec:
6d:50:00:9d:f8:6c:77:41:e7:9b:aa:1f:fb:2e:b4:
e3:82:0f:2c:6b:10:39:5f:02:61:fe:d0:06:72:d3:
54:73:d0:be:46:d6:44:df:19:5d:94:65:bc:65:be:
34:40:62:9d:8e:dd:58:06:ba:f3:f1:48:da:72:21:
5d:73:db:c9:b6:87:cd:c5:2d:b9:47:de:30:cb:e4:
94:c8:ed:52:37:52:4f:1b:21:bc:6e:2d:5e:19:7a:
6a:2c:a8:8e:8f:a8:9f:c1:10:f5:4c:c5:c4:f8:52:
e7:15:93:d7:32:b0:9d:16:61:a9:c6:f4:06:96:37:
d1:34:d4:66:c6:17:e8:28:f7:cf:65:57:9c:28:ea:
1a:78:e9:57:19:38:51:85:0a:d4:7e:5d:b1:a7:2d:
1f:7d:c2:5c:4f:55:86:07:87:c1:46:03:07:8b:76:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EA:A4:96:CA:67:95:0C:09:00:8B:41:F4:68:FB:5A:5C:B2:FE:C5
X509v3 Authority Key Identifier:
keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5a:8c:13:30:c9:88:cc:af:43:85:f7:8e:3e:34:1e:09:0a:
49:62:d6:47:00:74:99:ec:c6:a1:b9:85:d0:a0:b5:e3:a9:a6:
94:58:1b:d0:66:2b:12:52:b4:5d:8b:c1:da:6c:d9:7e:4b:dc:
3a:64:35:12:04:8c:f2:89:16:17:06:48:ad:3b:bd:a7:3f:e4:
8c:e3:6b:07:b9:3e:97:19:fa:ca:2c:b0:f4:76:da:31:2b:8d:
4a:3e:72:75:1c:50:f7:58:43:34:de:66:20:2d:e2:2a:42:41:
51:bd:f3:b8:f2:06:db:fe:5d:5d:a1:8a:4b:f9:cd:3f:6f:2f:
e6:16:d5:f3:b4:60:7c:d2:68:76:06:a0:fa:21:15:82:11:87:
9b:94:71:66:84:df:49:95:ec:6d:04:20:72:f4:04:b7:bf:47:
71:f4:dc:2b:fc:6d:d1:68:7f:4c:25:33:06:3f:bc:62:75:42:
8c:5d:b3:df:c0:dd:fd:3c:db:8c:e6:04:a5:c8:d8:d9:e8:04:
8c:96:f1:8e:5c:bf:37:a3:9d:5d:31:9d:8d:7a:9b:96:69:61:
80:e9:12:f2:7f:ba:72:d6:48:73:8e:f8:b8:49:7f:00:45:46:
b4:76:2f:17:de:5e:92:d1:7d:28:45:06:27:10:1e:fd:0f:a4:
b1:5d:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:56 2026 by rpki-client