
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json)
Hash identifier: OpYXXUfj3qC9QiTpWQtIWQJNzwPiaNtVBVHcBsxBweM=
Subject key identifier: F9:20:2D:7D:6A:D7:2E:84:85:DC:82:69:B9:41:F4:B9:E7:E0:57:1F
Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA
Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA
Certificate serial: 1D8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
Manifest number: 1D7F
Signing time: Wed 18 Feb 2026 15:57:17 +0000
Manifest this update: Wed 18 Feb 2026 15:57:17 +0000
Manifest next update: Wed 25 Feb 2026 15:57:17 +0000
Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: ybfdKhWNkay9ZUMR9ui76CK4Zp2caTYMW2ipS8VIIRM=)
2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: 4tdhNCoXuQpi6+LVzEflBnVNgk5q7DhclUHPWv4LN4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl
rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7562 (0x1d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA
Validity
Not Before: Feb 18 15:57:17 2026 GMT
Not After : Feb 25 15:57:17 2026 GMT
Subject: CN=6995e15d-b88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b5:07:ac:7e:14:be:30:59:fb:fa:c9:ef:e0:
37:54:5a:f4:b1:97:b6:fc:7d:c6:4f:42:7d:32:e3:
27:fa:a4:0e:e3:04:13:88:54:c2:ad:b9:1c:cd:d7:
7c:52:dd:4e:0e:8b:2b:37:f1:59:68:f4:3a:f8:92:
48:5b:cf:d0:ea:77:84:1f:4e:5d:90:14:9a:a2:f2:
3c:87:ae:07:96:a4:74:99:e2:c3:9e:75:6c:03:8d:
73:c1:ac:1e:c6:5e:8e:00:9a:32:de:40:a0:4c:db:
23:c0:9a:99:9b:20:95:66:bf:6b:37:df:0d:83:f3:
36:32:7e:07:85:13:e5:e8:77:d7:dd:e1:c3:32:81:
1b:cc:56:6c:fc:73:f2:95:07:99:51:39:0f:93:9b:
fc:28:87:27:64:a3:cf:89:73:ff:3c:14:76:5c:a4:
f9:df:27:eb:35:e9:a7:bf:90:de:e3:cc:d1:26:17:
14:13:9b:48:06:74:8b:c3:18:e7:96:f8:8a:69:78:
6a:ab:34:2b:f3:e4:fe:a1:b9:1d:d1:18:ae:c1:74:
a1:7a:59:0b:87:10:af:a0:77:8d:57:59:c8:42:76:
5c:45:70:92:f5:0e:fe:cf:03:2b:b6:56:78:61:31:
e8:21:35:a5:be:48:fe:0c:09:41:3d:de:45:0c:45:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:2D:7D:6A:D7:2E:84:85:DC:82:69:B9:41:F4:B9:E7:E0:57:1F
X509v3 Authority Key Identifier:
keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:c2:4c:1a:2f:37:af:1e:73:f6:f5:ae:b8:9d:c7:fd:69:
b7:a5:71:39:d1:c8:ed:63:6d:7f:30:ad:28:ca:eb:d8:30:1a:
57:06:f1:38:b0:2c:de:1c:95:56:8f:f9:b5:62:75:bb:b1:d7:
a4:d0:c1:04:7b:6c:f9:47:20:5e:b6:27:78:32:0a:b5:89:f6:
cf:56:8c:ba:b9:91:27:3f:2d:24:c8:f0:d3:cc:6e:48:de:75:
48:79:32:65:e7:ce:68:d1:2a:b9:e2:f5:b8:c1:ff:26:81:f0:
b9:37:55:0c:2f:19:d5:e6:cd:ec:57:74:10:77:a5:8b:8e:3c:
20:f3:ff:e1:db:a7:4d:33:4f:0d:ff:f0:9e:4b:d6:65:62:dc:
fe:d0:d3:4c:68:b1:da:6a:4c:71:60:2e:99:ed:ea:fd:2f:03:
55:f3:89:54:ca:d5:35:25:27:ad:e5:66:a3:cb:9b:5c:95:ec:
0d:4e:35:57:0f:a6:c9:a3:3a:18:89:ef:cf:b8:6f:5f:d5:6e:
fa:08:32:6c:95:86:71:30:c9:bd:52:4a:c2:06:95:27:ce:7f:
d4:65:fb:7b:1d:40:92:68:8f:0c:1b:96:aa:a3:72:16:0a:8a:
ac:90:6d:a5:b5:d7:b0:25:c3:39:1f:7a:78:c8:78:18:41:18:
74:e5:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:39 2026 by rpki-client