
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
File: D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft (raw, json)
Hash identifier: VVIzT/kiOJBwYhzJcxQG+VQKzydPOI/OXGoTBdtT99Y=
Subject key identifier: 4E:88:27:5C:C4:98:05:38:3C:BF:47:21:9E:5C:99:C1:E9:AA:51:FD
Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
Manifest number: 01F7
Signing time: Thu 19 Feb 2026 01:54:44 +0000
Manifest this update: Thu 19 Feb 2026 01:54:43 +0000
Manifest next update: Thu 26 Feb 2026 01:54:43 +0000
Files and hashes: 1: D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl (hash: z4oqwkkxWZ5+BfHMLhyEpVeYT9kU8SleJ0DHTqNU0IY=)
2: 075B4CC80AC511EEB25A152AC4F9AE02.roa (hash: oHGClGt0Y+/Ca/fTjOnKQ8pJUUYEh+Yq1JxoBHlpH4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl
rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Validity
Not Before: Feb 19 01:54:43 2026 GMT
Not After : Feb 26 01:54:43 2026 GMT
Subject: CN=69966d64-16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:38:d3:8d:67:1a:70:4a:fc:83:56:ac:12:
95:61:6a:af:36:05:dc:03:8e:33:27:61:b3:e0:2c:
b4:bf:81:68:19:77:0f:1f:74:08:3b:dd:d7:b4:3b:
08:13:96:f9:54:e5:86:3d:96:1f:f3:f8:ec:73:98:
0a:64:32:86:ce:9b:32:ac:8f:32:34:49:4e:88:f1:
09:7a:f8:9c:e4:13:70:47:97:35:b6:45:dc:db:85:
db:2c:33:6e:29:04:f8:2a:7a:93:06:17:a5:4c:9c:
af:20:e4:dd:18:0e:da:7c:3a:f6:3c:71:50:13:f6:
62:32:a5:94:62:c2:90:1d:10:99:c6:e2:ca:4e:d0:
a1:78:19:96:6d:9f:73:fb:55:eb:c2:16:dc:87:95:
96:f6:2b:2e:c1:67:7d:81:bb:04:fa:b1:cb:14:5a:
56:3a:e3:43:4c:fe:8c:3c:75:2d:b4:1c:b8:c3:7c:
ef:f4:3b:b6:7e:2a:c9:ae:ff:00:d6:10:02:d8:b5:
49:2c:c3:0e:5b:d1:ca:25:0f:9b:37:d4:a8:f1:ec:
5c:44:85:ae:af:87:59:b3:3c:74:dd:05:8a:cb:98:
60:51:42:bf:9a:05:21:a2:79:31:96:3b:d3:2f:00:
77:fd:40:31:f2:d5:f0:7a:9e:94:0c:1e:d4:db:8f:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:27:5C:C4:98:05:38:3C:BF:47:21:9E:5C:99:C1:E9:AA:51:FD
X509v3 Authority Key Identifier:
keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:09:d1:ea:fe:35:2e:6b:31:8b:9c:f6:20:16:e7:87:29:36:
bf:bb:5b:51:c6:68:48:73:54:25:e5:72:3b:9e:fa:a5:76:02:
87:9a:53:06:20:62:ca:55:44:96:89:f3:6a:07:7d:70:96:9a:
c0:e4:db:4f:38:18:6e:ad:30:36:fd:14:8d:06:ac:bc:c4:76:
8d:7a:35:97:5c:90:93:05:99:e0:90:00:75:16:00:a2:87:e5:
44:eb:d5:07:50:73:fe:09:d9:67:e1:71:ed:cb:ff:72:14:94:
ec:f5:6d:24:65:34:b1:39:45:8b:5e:2c:b4:11:c6:d8:3e:93:
fd:d2:4d:51:c6:17:14:8d:71:1f:d5:25:65:77:cf:f3:52:d9:
ee:79:c0:a0:b0:dd:00:35:a9:bc:a3:a5:99:e9:e7:07:03:af:
5e:aa:67:fb:52:59:d5:50:6f:ea:f7:93:9c:70:74:e0:f1:f4:
5d:70:2d:bc:65:b8:84:47:92:b4:4d:f4:da:5e:b7:57:b2:73:
98:64:72:c6:a6:08:b3:4b:b1:64:58:40:85:4a:06:1a:6c:3d:
7e:5d:39:56:0e:b7:33:97:c4:c3:a4:0b:65:22:2c:28:7d:39:
4d:0a:14:50:1e:dd:c2:ae:7f:25:9a:fb:9c:18:b3:71:6b:16:
61:88:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:16 2026 by rpki-client