
$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier: 1a7TLk9ELPH1Xwn7dm57Ml5L0+95JZkIXxnGSgMPKm4=
Subject key identifier: 15:8F:67:E6:01:C0:7C:0A:A7:80:4B:3B:78:D5:19:36:7E:7B:52:B5
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number: 01D0
Signing time: Thu 19 Feb 2026 02:16:45 +0000
Manifest this update: Thu 19 Feb 2026 02:16:45 +0000
Manifest next update: Thu 26 Feb 2026 02:16:45 +0000
Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: yRwME/qzPKny/JMPMICwAuwXBIlZYpHWg4/rDrPdj1s=)
2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: DLzpWEcNmQ3lrkTMIfDWdISHEaJklyBDn769urmD8Y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Feb 19 02:16:45 2026 GMT
Not After : Feb 26 02:16:45 2026 GMT
Subject: CN=6996728d-2cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:50:34:cb:b1:41:b5:ad:23:8a:52:63:18:
22:db:51:10:46:7f:ca:b1:ca:6e:d7:8f:c7:f4:30:
28:e7:2e:5c:47:5f:e8:d9:21:69:a2:b7:bc:f2:f3:
2a:35:f8:05:bf:af:ac:c0:55:a1:9e:ae:e3:65:fb:
f6:b3:78:17:3b:d7:3e:40:56:0e:e6:48:06:f7:6f:
8d:48:b3:65:e7:42:40:63:7d:34:bb:91:5a:19:35:
dc:5e:c6:97:52:c8:a8:14:13:7e:52:e3:59:d8:ec:
63:cd:a0:e0:0c:28:0d:d2:a8:cc:47:bd:5d:a4:60:
18:e0:09:5c:98:9b:78:19:76:38:66:dc:b3:0d:a9:
86:b5:f7:83:77:eb:b4:b0:a9:9d:f5:67:83:ee:cc:
3e:ef:f5:e9:33:32:db:f6:d2:fa:1d:bd:fc:63:62:
08:5f:b8:b6:e0:1b:e5:8b:7e:dc:44:e3:7a:33:4d:
2a:9a:03:a4:62:fb:0a:27:e8:25:66:de:12:9b:4a:
d6:b9:f6:aa:96:65:49:bd:a6:e0:f5:ce:dd:86:78:
e6:79:4b:0b:a0:47:01:4e:5c:86:de:4a:4b:b0:39:
ec:c3:52:8d:bc:22:95:9a:81:94:4b:57:88:6e:ba:
50:e3:db:e4:35:c3:15:36:f1:59:2b:fa:9c:d6:79:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:67:E6:01:C0:7C:0A:A7:80:4B:3B:78:D5:19:36:7E:7B:52:B5
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:37:d4:7d:19:b1:41:3d:ea:85:44:7c:96:bd:a4:64:b3:94:
7e:c3:4f:ae:c3:14:c7:05:65:e9:10:51:d2:03:2b:77:3d:9b:
d7:31:1c:f2:31:d7:9f:f2:da:6d:7f:55:e4:e3:0b:b6:99:f1:
ae:67:f1:40:89:06:65:85:88:bd:86:d4:e4:c0:07:7a:5e:6c:
7b:12:7f:32:35:40:17:71:3c:c1:9a:e7:cf:79:89:13:53:1d:
53:94:c9:35:20:cb:02:2a:68:6b:13:96:c0:ca:bf:75:4f:35:
e2:e8:93:c9:40:66:7d:9b:b8:31:4c:44:57:0e:db:2d:2a:8a:
bc:e1:61:6f:31:1d:9d:e7:cc:51:06:b6:cb:f2:7d:0f:c0:ba:
f4:9c:97:f5:e4:d8:1b:5f:27:a8:11:b4:af:fd:c0:a7:a4:e4:
82:e0:89:5e:ad:2b:b2:9c:4c:a2:af:d7:d6:f7:05:0d:8d:f7:
2e:84:b7:15:23:11:ca:68:0f:39:59:48:54:c1:65:38:9f:4c:
d2:5e:58:07:d5:11:e7:40:09:23:4f:e7:39:55:b8:8d:ba:19:
99:1f:d3:cc:35:a8:db:4d:d7:ce:d4:a7:f0:e9:3a:59:63:ba:
2d:30:4c:47:0b:bd:4c:57:01:11:f5:a1:04:6f:b6:8b:f8:61:
06:f5:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:39 2026 by rpki-client