
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier: Rjf3viujdMZEj4t01M3rxv/2evm+ayETgOzjqNmHklI=
Subject key identifier: 3E:E4:10:7B:FD:4D:BE:9E:C5:60:C2:12:D1:4E:21:02:59:92:FA:C6
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial: 0DA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number: 0D97
Signing time: Wed 18 Feb 2026 17:38:13 +0000
Manifest this update: Wed 18 Feb 2026 17:38:12 +0000
Manifest next update: Wed 25 Feb 2026 17:38:12 +0000
Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: WrLwt3SF/RJ0afMcD/ck1/WMQ/fFNdWYQ7XsNvCmDQU=)
2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: /Vmvob4Ba5JT6xBzlUxuOFxxM0jXE2HEf4/pjk43Tpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3494 (0xda6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Validity
Not Before: Feb 18 17:38:12 2026 GMT
Not After : Feb 25 17:38:12 2026 GMT
Subject: CN=6995f904-c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:22:30:8f:61:25:96:0e:36:e8:71:62:4e:
9a:be:db:e5:52:9f:f1:94:f0:68:10:08:1c:b0:8c:
98:4b:12:0d:63:82:b3:8d:17:cf:25:25:53:8e:6b:
4c:72:3e:64:22:5f:6f:bb:8a:aa:c1:cb:bd:b2:c6:
32:c4:07:4c:97:2e:cc:6d:92:86:f6:e6:55:21:eb:
ee:1a:d0:2e:36:51:12:a5:b8:a2:90:6e:3d:a0:7f:
0e:db:6a:34:21:9f:c8:44:88:47:50:00:f2:62:0a:
e5:8e:49:5b:c2:03:fc:e7:84:86:48:13:ba:47:d1:
ca:40:5a:c9:8e:74:6a:7a:c7:68:7f:d5:f9:5b:c6:
41:c4:ae:eb:10:dc:36:9a:96:26:54:f2:e3:84:4e:
1b:6a:c4:bf:c1:82:2a:0d:52:80:9d:9e:d7:a7:31:
6c:7d:21:e9:bd:c3:79:60:72:26:14:1c:b5:d8:7d:
06:d6:de:24:75:51:54:37:f9:ce:62:67:b7:5b:e2:
73:af:41:3b:e3:8e:ca:0a:49:16:42:a7:d2:5f:a9:
de:ce:b1:c9:c6:75:2a:8a:e9:c5:ae:76:50:24:f6:
8a:5d:2d:67:57:cb:48:06:9e:49:9b:58:b5:90:ff:
5b:57:8d:7c:14:a3:b1:35:ee:55:b2:f4:ab:3a:92:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E4:10:7B:FD:4D:BE:9E:C5:60:C2:12:D1:4E:21:02:59:92:FA:C6
X509v3 Authority Key Identifier:
keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c7:e4:8d:1d:f4:fd:a3:29:f7:9d:59:f3:e2:18:7e:05:c5:
93:23:2d:a7:59:8d:83:f0:7d:a1:30:ec:18:b4:31:8c:cc:d4:
12:30:d5:da:b0:a7:63:06:5e:ce:0b:47:3c:16:a2:0d:06:8e:
29:27:35:79:3d:14:6b:78:b5:7b:d5:e9:75:35:76:58:dc:12:
2f:2d:00:5f:58:d4:ef:5d:fc:a5:d1:91:6b:1a:34:df:db:a7:
30:35:2b:5b:24:f7:46:74:20:38:d9:cb:79:c8:57:50:0f:95:
fc:1d:19:ff:27:05:cc:d7:8d:0b:9a:07:92:fe:86:32:cb:2b:
99:bf:d0:32:11:ed:fc:49:17:b8:e7:86:d9:79:c1:c7:55:93:
ed:6f:0d:43:97:8c:f3:ad:88:ab:f9:26:6e:a9:52:73:2b:15:
71:bb:32:74:88:9d:01:93:cf:ff:03:0f:ac:9c:5b:12:1a:8e:
00:b5:94:89:0f:8c:44:b6:37:17:a2:9e:97:62:f8:2d:12:3e:
28:b3:d2:ed:2b:2a:4d:2b:c0:b6:a0:9a:2e:55:54:dd:19:2e:
d1:1f:bd:7e:aa:4b:1c:21:c2:87:96:67:26:43:7e:5d:54:49:
b4:48:6f:94:ef:a6:47:f7:84:76:75:30:1a:78:ed:21:e5:f7:
ae:c0:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:55 2026 by rpki-client