
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json)
Hash identifier: PO77K273ZBYZeS66SRmTAHrptST6WbYoVofDSWusnl0=
Subject key identifier: ED:7F:E1:E3:7F:1C:FA:CA:42:D4:A7:72:58:3F:86:67:0E:A1:59:64
Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Certificate serial: 0CF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
Manifest number: 0CEE
Signing time: Wed 18 Feb 2026 17:48:33 +0000
Manifest this update: Wed 18 Feb 2026 17:48:33 +0000
Manifest next update: Wed 25 Feb 2026 17:48:33 +0000
Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: 3WCn6jcAiCku/JzT60DXwBAd1s65pD5/SIUTRb7MYP0=)
2: 44FEC394589711F0B981A181C4F9AE02.roa (hash: czF1g9Ex6VYm+KxfQ/94CmFck1ccrgeMZN09KqEwv5g=)
3: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: 84DuWQA+97cDdeAiob2yXUJKVlhHSu21Cq4u1ZPXmWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Validity
Not Before: Feb 18 17:48:33 2026 GMT
Not After : Feb 25 17:48:33 2026 GMT
Subject: CN=6995fb71-f4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:b1:dc:e3:a2:58:72:05:cd:61:e7:1b:5e:
02:70:bf:23:10:f4:7a:54:aa:8e:d7:46:21:be:dd:
87:83:23:1d:bf:05:f2:0f:f4:b8:a3:2b:d0:af:05:
e4:44:22:52:d0:50:7a:f8:f4:ee:4a:6f:1b:cc:cd:
01:17:e0:0a:13:b2:d1:db:97:a5:cc:82:64:65:7f:
cc:5d:9f:9e:bc:6f:38:cc:52:e0:19:d3:20:a8:73:
a4:14:ae:5b:e5:5f:e2:78:5e:3d:9d:ac:a2:c7:7b:
2a:95:ee:8a:14:54:d2:86:59:50:04:46:6f:f6:d7:
e4:55:7a:ad:dc:71:e1:9a:2c:6a:3e:db:ef:67:7a:
36:3a:7e:7f:ff:0d:ac:da:40:e1:d0:ff:69:ca:b1:
3a:18:0d:97:d5:1c:4c:f8:fc:69:2f:89:cc:b8:74:
ef:9a:25:55:07:76:9e:5f:06:df:3c:3e:a3:19:09:
ae:d5:b7:5c:ad:cd:8d:11:46:86:47:5f:fc:8b:c3:
cf:ad:80:c7:5d:63:da:8f:cd:8c:eb:90:cd:2f:76:
2d:bb:d0:e2:74:ef:8f:8c:a3:e4:12:d2:54:f2:9c:
7f:96:1f:e4:dc:af:c5:65:15:f1:24:ee:0d:5b:1c:
42:91:3e:83:46:aa:21:92:c4:b3:c6:e4:f1:1b:04:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:E1:E3:7F:1C:FA:CA:42:D4:A7:72:58:3F:86:67:0E:A1:59:64
X509v3 Authority Key Identifier:
keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:a5:89:c9:c9:cc:7b:7e:d4:ea:61:df:af:6f:73:d3:00:ef:
79:6d:8d:66:87:f1:51:1c:e0:80:60:ca:8f:c8:bb:aa:1a:90:
cd:01:46:2b:ff:4d:68:f2:19:c3:f5:a2:b8:db:7f:ea:b7:85:
f2:a1:b4:45:15:b0:26:eb:35:7a:7b:3f:04:26:7d:60:e2:bd:
68:26:78:99:5e:d0:51:57:1d:cb:4d:14:50:f1:04:78:2b:a3:
19:d0:9e:19:87:b5:6f:e3:aa:f9:59:68:35:5f:b0:9e:0b:b5:
cf:1c:12:90:cc:f0:53:d3:8e:b5:bc:13:f6:56:9d:17:25:32:
d8:27:75:91:a4:ae:c0:2c:15:85:9a:bd:26:7b:e3:e5:f7:21:
ae:8e:85:54:ed:80:3a:86:0c:26:02:0e:d1:27:0f:e9:32:73:
cb:07:e1:66:e9:d0:21:d9:26:a9:c9:32:c3:6e:d0:45:23:c9:
69:41:36:33:ec:fb:ec:df:21:b3:f7:f2:94:98:36:5a:46:3d:
c7:cc:d4:a4:25:5b:74:55:7b:a2:4d:08:8e:6f:c8:5f:99:97:
c8:2f:86:77:01:0e:e9:51:c5:4f:4c:59:03:df:04:0d:6f:32:
e5:d4:23:26:fc:f4:da:7c:5a:5f:78:7f:89:87:ef:ca:f6:7f:
8b:c8:0e:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC
RDg3QjE5RUYwHhcNMjYwMjE4MTc0ODMzWhcNMjYwMjI1MTc0ODMzWjAYMRYwFAYD
VQQDDA02OTk1ZmI3MS1mNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDyx3OOiWHIFzWHnG14CcL8jEPR6VKqO10Yhvt2HgyMdvwXyD/S4oyvQrwXk
RCJS0FB6+PTuSm8bzM0BF+AKE7LR25elzIJkZX/MXZ+evG84zFLgGdMgqHOkFK5b
5V/ieF49nayix3sqle6KFFTShllQBEZv9tfkVXqt3HHhmixqPtvvZ3o2On5//w2s
2kDh0P9pyrE6GA2X1RxM+PxpL4nMuHTvmiVVB3aeXwbfPD6jGQmu1bdcrc2NEUaG
R1/8i8PPrYDHXWPaj82M65DNL3Ytu9DidO+PjKPkEtJU8px/lh/k3K/FZRXxJO4N
WxxCkT6DRqohksSzxuTxGwR0awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1/4eN/
HPrKQtSnclg/hmcOoVlkMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG
NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS
N1B0b1I2R3dkREs5aDdHZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYpYnJycx7ftTqYd+vb3PTAO95bY1mh/FRHOCAYMqPyLuqGpDNAUYr
/01o8hnD9aK423/qt4XyobRFFbAm6zV6ez8EJn1g4r1oJniZXtBRVx3LTRRQ8QR4
K6MZ0J4Zh7Vv46r5WWg1X7CeC7XPHBKQzPBT0461vBP2Vp0XJTLYJ3WRpK7ALBWF
mr0me+Pl9yGujoVU7YA6hgwmAg7RJw/pMnPLB+Fm6dAh2SapyTLDbtBFI8lpQTYz
7Pvs3yGz9/KUmDZaRj3HzNSkJVt0VXuiTQiOb8hfmZfIL4Z3AQ7pUcVPTFkD3wQN
bzLl1CMm/PTafFpfeH+Jh+/K9n+LyA6y
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:01 2026 by rpki-client