
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json)
Hash identifier: ostCJw0LbH5gne7WNT0d0WVbzxasUZwuXrzntUKKFS4=
Subject key identifier: 05:B0:E3:8A:57:99:C9:09:B7:CD:1D:03:B0:1A:76:A3:09:B6:E3:96
Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Certificate serial: 0912
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
Manifest number: 08E2
Signing time: Wed 18 Feb 2026 14:42:52 +0000
Manifest this update: Wed 18 Feb 2026 14:42:52 +0000
Manifest next update: Wed 25 Feb 2026 14:42:52 +0000
Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: qOlFst8XdclpNgpuC+0+uONT0y0i0D+VaSPMaidIR+0=)
2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=)
3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Validity
Not Before: Feb 18 14:42:52 2026 GMT
Not After : Feb 25 14:42:52 2026 GMT
Subject: CN=6995cfec-30b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:d0:70:81:e0:0e:e5:ac:b9:f4:97:b2:de:
18:22:4c:88:da:36:76:6b:86:01:77:f4:43:f1:32:
25:d9:41:14:aa:bc:f9:f6:93:07:94:7d:a2:15:8b:
b4:52:31:47:c8:43:af:b6:3f:37:f4:72:0a:77:e5:
5c:a3:a1:90:0b:dd:2a:d2:70:37:ec:7b:e9:94:3d:
30:88:a9:c3:66:a3:f9:69:37:f0:38:db:6e:9f:3b:
1a:f7:98:d7:01:8c:ef:01:3e:f1:21:60:71:c8:6e:
e7:12:33:a9:4e:63:3d:1e:e6:07:54:4d:a3:42:fb:
35:5b:5d:40:c9:c4:8b:0d:71:41:25:cf:69:4f:85:
bf:2c:b3:4d:58:9f:f8:e5:39:6a:ab:15:6c:93:3d:
24:3c:a1:c8:0b:48:f2:cb:46:ad:4a:82:8d:ca:e9:
08:6e:fe:28:03:0c:a4:65:12:b2:c7:12:25:14:9b:
ea:dd:c3:76:37:8c:f5:ae:79:2f:29:e4:89:56:1a:
51:5b:9b:3c:40:16:05:7f:87:09:ec:80:b2:8a:b3:
ac:07:1e:9c:fa:08:7d:0e:6d:cb:6b:38:44:46:06:
aa:cd:a8:e7:83:4f:17:aa:59:9f:51:a5:44:a7:0b:
9f:fa:a8:8c:c3:0d:96:17:46:53:ee:a2:82:8e:df:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:E3:8A:57:99:C9:09:B7:CD:1D:03:B0:1A:76:A3:09:B6:E3:96
X509v3 Authority Key Identifier:
keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ec:8b:c0:de:2c:e7:77:00:3b:a6:24:6a:09:b2:0e:09:a9:
3f:b9:c7:a3:42:3a:dd:a6:83:db:b7:6b:c9:a7:71:6f:4b:8d:
7d:7d:75:3e:82:a3:8e:8b:10:89:ba:57:76:04:87:c3:d0:32:
51:c2:10:12:e6:ec:c3:a5:dd:28:28:c3:3e:9a:e4:bd:74:e4:
a6:d8:b5:f9:16:a7:69:a1:1b:58:04:15:6d:e6:89:c5:fd:8a:
18:5c:bf:57:87:26:68:d8:97:95:f7:30:bf:5e:82:1e:5d:b6:
a3:10:df:02:e7:97:3a:2d:8f:29:74:29:d0:61:2d:2d:7a:9b:
52:8b:36:8c:44:6e:ca:e7:e1:e8:b7:9f:1a:59:2f:1f:c2:a1:
d2:bf:72:ee:9e:88:a7:98:f6:d9:d9:e7:86:20:1f:eb:79:48:
f3:80:9d:54:b6:71:a2:6e:13:ac:ab:99:a7:e7:74:bc:62:40:
02:f2:0c:db:c6:e6:74:3a:2e:af:b5:c2:5f:0f:a9:11:4e:a6:
b5:bd:64:f3:60:22:b4:3f:42:86:78:cb:29:17:91:88:a5:a6:
3f:1c:90:6a:47:14:0a:d8:0a:d0:d0:61:33:60:1d:d3:99:8a:
36:bc:24:7a:f6:21:2c:27:cd:53:87:4b:0b:d8:5d:34:94:04:
fa:32:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:27 2026 by rpki-client