
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: oRusihX59GODIYkOCgj5pLUrk5Nqiic2sUGrmX57V1M=
Subject key identifier: 60:29:D8:EB:6E:23:B6:F3:9C:77:09:D4:03:44:AC:63:C5:90:59:D4
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 02E3
Signing time: Thu 19 Feb 2026 00:31:17 +0000
Manifest this update: Thu 19 Feb 2026 00:31:16 +0000
Manifest next update: Thu 26 Feb 2026 00:31:16 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: rGtglcsNuhfAnBwO9g5qgoOGqXtjaGmP6dRsz/c3LVk=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: sMLXclSpaatsjiefCG2CYL97q01e5mLSlbQCKpyYzHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: Feb 19 00:31:16 2026 GMT
Not After : Feb 26 00:31:16 2026 GMT
Subject: CN=699659d4-fc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:d5:22:6f:e5:e8:19:c7:60:55:ba:b2:a9:
52:3a:80:0d:4b:d3:12:a3:2c:54:0f:98:d0:c4:44:
ca:a4:5d:d3:6e:2e:1e:96:65:b6:03:17:82:27:b5:
2b:72:1c:45:38:2f:07:39:2b:7d:3a:0d:ec:34:63:
89:0e:fd:25:c0:b6:be:5c:5b:17:14:65:cb:6a:0b:
05:26:91:4e:b7:7d:d1:5b:27:d3:e8:8c:37:3d:8e:
90:78:6c:22:04:30:bd:a0:fd:85:e9:8c:e2:5d:06:
60:20:64:c0:d3:7c:e2:0b:e6:f3:10:b0:d6:ae:3d:
4a:0a:2c:45:74:80:be:ef:44:8d:1a:57:a2:91:72:
16:d9:50:14:2a:a1:73:01:71:7d:a4:b6:09:a4:e6:
7f:71:13:33:cb:81:d1:26:1b:a0:83:75:37:cd:b0:
94:62:3a:bf:ed:55:bf:aa:ff:bc:b2:4e:71:e0:08:
bd:81:76:cb:9e:42:b6:58:1e:bf:96:b9:47:38:aa:
96:bd:5b:f5:55:11:89:ab:ac:fc:68:7f:46:8f:eb:
e1:ec:21:b1:31:3c:5b:73:be:8d:b3:8f:53:60:cc:
e2:89:d9:51:ff:28:2e:69:a2:11:39:f8:01:5a:80:
22:a1:a5:80:77:e7:7d:96:bc:ae:69:7d:e0:5a:59:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:D8:EB:6E:23:B6:F3:9C:77:09:D4:03:44:AC:63:C5:90:59:D4
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:92:bc:ce:60:dc:01:35:7d:4b:db:d7:bb:b9:6f:07:09:1d:
94:c6:a6:51:2f:9a:81:46:23:e8:83:7b:d1:d5:cd:8f:ad:27:
bb:77:d0:e6:81:b7:44:bb:b1:42:df:4e:a2:bc:3b:69:4c:cc:
e9:f6:62:f0:64:79:11:9c:e5:e0:4e:01:c1:8f:45:f6:66:ec:
bc:cf:31:8e:4a:75:85:98:84:4e:00:f3:33:d5:96:76:f1:ba:
39:4e:2c:6f:66:70:de:7b:b4:33:bc:99:28:71:d1:db:c6:4c:
58:0c:34:aa:10:67:35:74:92:6f:a4:fb:65:27:66:7f:b4:3b:
b4:b6:a8:d5:f7:f0:45:b5:c6:dd:81:9d:39:ed:80:30:b3:59:
22:16:10:90:fc:fc:71:56:a3:ac:61:04:42:fb:b5:b7:ab:a5:
16:cd:23:e9:94:24:8c:c3:48:fa:9a:fa:92:c9:30:5d:19:32:
43:c6:79:18:ba:83:4a:59:c6:56:fd:55:35:49:03:35:36:45:
55:59:74:36:d7:1d:70:1f:f1:99:e9:80:ac:05:cb:f1:f5:48:
cd:ff:c9:8d:49:95:b4:a8:74:76:9e:2c:be:b9:5a:41:21:10:
c2:5c:62:64:a5:77:72:b0:a0:2d:b4:74:c3:04:23:a8:44:e1:
9b:84:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:39 2026 by rpki-client