
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json)
Hash identifier: nnNXI7uWLw/zA9lB0wnCcoNgylKRI3sQcH9Dli4/d7E=
Subject key identifier: 6B:76:99:D0:B3:D5:11:59:0A:84:25:A5:35:14:C1:A3:39:65:6F:78
Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Certificate serial: 0DAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
Manifest number: 0DA5
Signing time: Wed 18 Feb 2026 17:36:58 +0000
Manifest this update: Wed 18 Feb 2026 17:36:57 +0000
Manifest next update: Wed 25 Feb 2026 17:36:57 +0000
Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: jsEiEQX8VcoofmyjLAioQq0EKoB5skvH9WpTCSuQcGg=)
2: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: QC75SjGbmRWM75fKvozY3M+N+lG9xWs1cIWZObIwsbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3503 (0xdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Validity
Not Before: Feb 18 17:36:57 2026 GMT
Not After : Feb 25 17:36:57 2026 GMT
Subject: CN=6995f8ba-500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:22:f6:95:c7:b9:2a:9d:fa:2a:43:58:3b:
9f:c3:b9:2f:d6:26:9f:76:de:17:c3:46:1e:5a:83:
9a:25:aa:41:33:1d:60:a4:e7:ac:2e:1e:96:19:7f:
44:54:6c:c8:ab:63:94:12:7f:c1:f2:15:2c:9e:b8:
e3:3c:8e:48:05:d4:39:cd:f9:bb:d1:2e:62:8f:89:
3f:b2:ec:e4:8f:f9:95:5b:59:3c:b7:29:65:ba:df:
1d:c7:23:df:1f:1a:54:94:f5:2d:74:49:b6:6d:20:
e1:78:9c:e2:a9:a0:a0:3e:b5:42:1a:1f:29:06:92:
47:74:25:42:b8:88:f2:d1:eb:a6:3a:72:bb:2b:0e:
d9:c3:33:9d:21:4e:cc:b0:6f:5f:5f:3c:74:9b:fd:
da:5c:c2:5a:09:6d:a6:d7:45:06:dc:c1:07:51:3f:
5f:21:f4:ec:e3:22:0b:ea:4d:70:dd:70:5b:31:4e:
d4:1c:64:63:f0:a3:85:22:bd:2f:50:4d:08:66:97:
45:14:49:e6:78:4a:38:5a:e5:48:74:68:0d:de:08:
1f:9e:34:e0:3c:6f:74:18:86:6f:e3:51:64:a3:f5:
82:c2:98:3b:79:2d:dc:4e:ec:86:21:39:d3:a5:63:
2c:d2:b8:e1:a2:13:3c:22:45:a3:34:fd:37:da:10:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:99:D0:B3:D5:11:59:0A:84:25:A5:35:14:C1:A3:39:65:6F:78
X509v3 Authority Key Identifier:
keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:30:19:64:70:8c:68:c6:82:37:72:15:5f:0e:c6:d9:81:
71:e6:22:6e:16:08:8f:10:01:40:a4:da:b4:b6:a6:ef:01:c5:
ac:eb:df:5a:76:23:34:e8:4d:2a:a9:19:b4:a3:10:1e:e9:00:
57:4c:04:ac:b8:d5:0d:4f:a1:48:a3:23:18:0e:1b:a4:9b:4d:
bf:63:ff:15:d9:59:4b:b7:30:b3:d3:da:15:66:01:e3:eb:d5:
63:b8:7c:5f:c0:32:a9:ec:c7:37:64:9e:79:6f:8c:28:77:dc:
98:8d:e5:f6:cd:e0:e3:ac:96:0e:56:26:d0:0b:2d:37:14:44:
98:45:a5:e7:b8:7b:50:a1:bf:35:fa:0c:aa:bd:2d:ea:46:5b:
a7:61:c4:61:e8:c2:9e:da:f9:5e:28:98:f0:95:65:e3:43:ed:
5b:01:ef:6a:87:ac:b9:58:c2:47:96:2d:d8:ac:ab:25:5f:86:
be:1e:af:99:ef:c2:5c:84:37:ea:fc:89:76:1c:1c:59:b5:ad:
1e:ce:5e:46:62:8c:34:ac:72:41:3c:3b:16:ae:06:05:7c:d8:
5d:ca:1b:cf:2f:7b:42:6e:25:c7:06:54:03:80:4e:c6:fc:53:
f8:a3:cd:4e:af:8c:80:34:08:34:ad:8c:0e:e8:36:c8:2a:c3:
af:a9:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:36 2026 by rpki-client