
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier: 9M6uPMUxABiaYRq+EQZXp+gcjeuL1A0II+1ufFsI/0Y=
Subject key identifier: 0B:EE:68:9A:3F:6E:96:1D:8A:AC:17:90:69:71:48:C5:7E:86:27:4B
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number: E5
Signing time: Thu 19 Feb 2026 04:54:53 +0000
Manifest this update: Thu 19 Feb 2026 04:54:53 +0000
Manifest next update: Thu 26 Feb 2026 04:54:53 +0000
Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: 34uYiUOqO1YRg/bXmXbRhEgOXz1W3ta02YD9xhpxY9c=)
2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: OPtqpqRnPLGJpIAYeUv7g54Eop2JkKe6/L6zebgYnmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
Validity
Not Before: Feb 19 04:54:53 2026 GMT
Not After : Feb 26 04:54:53 2026 GMT
Subject: CN=6996979d-149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:70:6e:a2:fb:bc:47:57:24:32:58:2b:d5:
29:a4:01:14:d1:5e:34:62:2b:5c:06:15:fe:f4:07:
dc:19:d5:89:e9:48:87:6d:68:02:49:01:2f:d7:8e:
50:d0:b1:63:96:16:7f:ee:3d:79:22:ec:48:0a:87:
0c:c6:7c:28:c6:ec:d4:ad:11:09:86:68:57:cd:52:
69:09:01:b1:75:3a:b2:78:6c:40:39:e6:8e:65:01:
94:0d:3c:8e:88:ea:58:33:c6:d4:93:75:f7:a0:5f:
eb:15:eb:d2:bd:a3:a6:f7:1b:82:58:63:f9:4b:b3:
1d:bd:ef:12:97:97:08:60:2a:c6:31:44:b9:ea:e8:
0f:bb:36:e9:c1:6a:48:88:9f:0b:d1:4f:43:05:f7:
0b:c3:b7:cc:99:ee:0e:f2:71:7f:24:e4:5e:2f:82:
7e:98:b3:51:ca:22:f9:f3:fe:46:b4:1f:7c:60:2e:
f9:f1:fc:8b:02:49:30:88:2b:d5:b6:d1:9a:07:46:
ee:37:bb:bd:64:0a:13:c8:6f:e0:8d:32:9d:88:2c:
9a:36:98:11:af:94:16:35:63:c6:6e:b6:ee:db:ce:
f0:01:2e:3f:ba:ae:9c:0f:fd:26:da:8e:af:70:85:
1e:46:69:d8:7b:02:62:6a:37:78:62:5e:63:0b:86:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:68:9A:3F:6E:96:1D:8A:AC:17:90:69:71:48:C5:7E:86:27:4B
X509v3 Authority Key Identifier:
keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ef:4c:b7:b3:50:36:74:2e:9e:e2:5d:64:70:d0:80:87:e8:
43:64:b1:b5:13:58:06:dd:fb:f5:5f:fb:a9:3c:84:c5:c4:8c:
28:1c:e8:86:c7:f5:2e:de:d8:5e:8b:07:fb:0c:74:50:68:cb:
8e:26:75:46:52:08:31:7c:88:44:8d:85:18:17:f0:5b:ed:5a:
27:6b:9d:9d:7a:35:71:c5:87:df:fe:3f:9d:aa:02:66:1f:61:
e0:61:61:fe:e4:ed:85:19:2b:f1:6c:e0:5f:76:c5:40:41:c7:
c1:82:5e:0d:6c:5e:8c:c9:f0:3b:9d:9c:36:10:23:ab:b2:91:
a1:d2:48:21:5a:6e:a2:c7:38:20:2b:20:54:b9:41:aa:02:5e:
f3:34:87:2b:81:d7:d3:3e:63:21:d8:a1:d5:c1:c4:58:97:e9:
d7:b2:78:6f:de:85:39:f4:6a:48:1a:38:05:ff:21:ad:c1:e2:
ee:0c:6a:32:fc:ba:a0:05:40:ab:b3:51:ea:76:49:d1:92:6c:
12:a0:56:18:38:1d:9d:ac:40:db:4c:2f:da:b0:0c:79:28:b5:
e1:67:3f:ca:27:c3:5e:d8:db:5e:e1:3c:ac:08:ad:c0:0a:4c:
fa:df:b1:07:f5:71:5a:a2:89:2b:f7:3a:fb:71:aa:51:16:15:
59:06:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:18 2026 by rpki-client