
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier: DDbjiuhLxHkMvHpi+BJkUrXX8ZAeX5GOWxcZ60Ny2Ac=
Subject key identifier: 86:64:39:57:00:C0:2A:BB:B6:6A:90:1F:B6:B1:67:DB:51:90:F2:E8
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial: 3522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number: 3518
Signing time: Wed 18 Feb 2026 15:01:56 +0000
Manifest this update: Wed 18 Feb 2026 15:01:56 +0000
Manifest next update: Wed 25 Feb 2026 15:01:56 +0000
Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: xhlOaRSwDav0vKEdAQUrj4fuPJX854O1thE6W3TqZY4=)
2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: JhBlCdse37bUv/gVZipzEykF5bWTjoKirJc9dxySSLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13602 (0x3522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Validity
Not Before: Feb 18 15:01:56 2026 GMT
Not After : Feb 25 15:01:56 2026 GMT
Subject: CN=6995d464-d987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:ac:33:cf:75:06:ff:08:43:4e:82:22:b2:
dd:8c:27:5b:71:ae:58:68:63:0e:3b:ef:8a:03:35:
6a:fd:16:c6:46:95:3b:e8:7f:4c:d9:28:1e:7d:8e:
d3:ca:ea:2b:90:82:91:a7:cc:91:f4:ad:1a:8e:c6:
11:0a:f7:d8:f9:75:d1:4d:c0:bd:91:40:65:a0:19:
a4:9c:10:98:b0:97:f0:47:6e:05:86:26:2a:80:a7:
74:38:06:11:34:0e:d0:06:a6:63:8e:35:b3:c2:e0:
b8:2f:fd:f5:7a:85:dc:f7:f7:92:57:26:10:e4:95:
cf:54:30:a3:0a:19:b6:f3:d5:6d:79:15:bf:17:09:
5f:1c:d4:61:d1:0f:b0:fc:20:38:0e:2c:12:72:0f:
5b:11:b1:8e:aa:13:31:43:98:70:a4:77:cf:62:87:
ef:09:65:ec:33:14:c1:4b:ce:d1:b2:b5:65:6c:a2:
53:2c:59:92:df:69:87:3b:90:9b:f1:49:2d:51:ff:
04:7c:e5:34:6a:75:e7:92:b2:d4:14:ea:47:0f:d1:
22:51:cd:91:7f:44:a4:d7:ac:b6:03:91:55:96:13:
12:63:9f:de:85:33:f6:38:c8:ff:63:50:ac:1e:d0:
e7:e6:a2:ce:b3:a9:cf:3a:b5:a0:9a:7f:b1:b8:36:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:39:57:00:C0:2A:BB:B6:6A:90:1F:B6:B1:67:DB:51:90:F2:E8
X509v3 Authority Key Identifier:
keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7a:fe:6a:fc:e2:d9:09:78:d5:56:3a:c9:2a:fb:77:9f:b3:
b7:f1:8c:e0:f6:8e:e4:c6:fa:f6:9c:d1:dc:af:26:d1:42:86:
23:35:82:50:6f:a4:21:20:41:48:8c:df:87:3e:7a:93:4b:5c:
8f:c4:99:a1:9b:32:c1:4a:17:0a:2f:dc:6d:bb:9a:d6:73:db:
eb:39:26:57:18:28:d3:f1:7a:b0:d5:a5:a2:a3:2a:21:9a:82:
de:d1:ae:77:1a:3a:94:bd:6a:75:6d:8d:1f:6d:2b:a4:74:24:
b1:51:8b:1b:ef:2e:b5:01:bd:84:49:12:6a:2f:f9:44:bc:b6:
3c:5f:b1:2e:2a:2a:51:58:3c:c6:60:b7:c1:84:2b:20:0d:3a:
3b:31:aa:38:de:1f:48:d4:c2:83:e1:c9:20:ef:89:9b:04:ab:
3c:34:ba:7a:2f:22:2e:b2:0e:4d:6d:80:ff:48:2f:c7:91:ca:
d3:7d:6e:83:2b:94:90:3d:78:9a:2f:9a:b9:a1:d5:ce:5d:9f:
2d:4b:46:c9:e0:99:51:8a:6e:59:5b:6a:1b:08:c0:9d:f4:7b:
39:e2:9c:68:db:e7:99:d5:dc:67:61:d8:3a:15:56:bb:83:ce:
47:19:4a:14:48:47:bc:0f:0a:44:42:28:72:c7:1c:d0:bf:6d:
57:e2:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:59 2026 by rpki-client