
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier: BNW6QAIBaTHWFAnpvWtscXd0UTEt9wRl0806IcZXHZc=
Subject key identifier: 4C:16:74:FC:48:46:09:F3:6C:20:85:76:F1:FA:FA:51:E8:03:86:2D
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial: 1692
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number: 1688
Signing time: Wed 18 Feb 2026 16:29:35 +0000
Manifest this update: Wed 18 Feb 2026 16:29:34 +0000
Manifest next update: Wed 25 Feb 2026 16:29:34 +0000
Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: SZJZ8I1/knWiZuZFrwPDjYwGemIIb5LTAfwviwcIzyk=)
2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5778 (0x1692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Validity
Not Before: Feb 18 16:29:34 2026 GMT
Not After : Feb 25 16:29:34 2026 GMT
Subject: CN=6995e8ee-452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:70:d8:a3:13:42:93:e4:56:d4:42:a5:6b:
04:0f:10:88:bb:5d:15:d3:07:65:6a:f0:3e:c4:63:
67:6b:fb:78:d3:d3:59:db:29:31:3c:0e:3e:10:2d:
7c:da:33:3a:58:82:00:10:84:98:00:01:13:7e:40:
62:19:1e:90:53:97:cc:39:cc:1b:50:31:99:9e:51:
a2:ff:26:33:fa:01:43:95:4d:a3:5f:80:12:af:cf:
7c:8d:76:26:73:79:a9:ec:9d:4a:9d:71:d2:87:b0:
2b:cb:b0:16:87:69:d3:4e:f2:e1:d5:30:64:43:0e:
d8:ee:15:2a:a2:25:cb:c9:d4:e1:ad:f5:7d:64:48:
e4:3e:b3:62:d7:11:1e:19:fe:f2:41:fa:b7:6a:ed:
01:33:9b:d2:0c:bc:1a:31:6f:48:77:87:1d:22:8b:
f7:22:bd:b9:22:db:a0:46:8a:94:44:be:5c:68:75:
ff:b1:5d:dd:88:95:e5:e9:4a:48:dd:ae:63:f8:89:
22:50:04:77:f1:cc:a8:91:a1:73:fe:f4:c2:fe:5e:
0f:14:3f:af:3e:67:51:21:2d:1b:56:4d:27:f1:cc:
e9:eb:7a:25:41:2f:dc:d1:90:27:30:43:dc:4d:93:
e8:3a:d9:fe:88:a0:b2:21:d9:cd:f3:1d:be:52:75:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:74:FC:48:46:09:F3:6C:20:85:76:F1:FA:FA:51:E8:03:86:2D
X509v3 Authority Key Identifier:
keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:43:ed:fe:c3:8d:ad:2c:60:6f:97:9e:bf:2c:d9:24:ef:6f:
30:4c:d3:17:1d:d3:1e:63:c6:e1:c0:00:77:eb:13:df:11:38:
3a:14:a7:5f:71:ed:55:c9:9d:78:95:25:d2:bb:03:f3:17:50:
24:56:a2:b6:46:ab:68:c8:99:56:12:a1:f9:6f:da:af:54:47:
0c:c4:d5:dd:7e:2b:5e:b0:dc:92:cc:bd:28:c7:b8:44:49:b3:
56:5c:5e:55:b2:dd:a2:f3:9c:6b:37:fe:e0:44:a4:ce:33:9e:
ed:10:9f:54:22:45:6a:59:60:9d:20:78:50:87:42:9c:af:c4:
c0:3c:92:22:51:43:08:69:6b:45:eb:f2:59:a3:9a:76:6e:2c:
b3:cd:a6:d4:24:7d:c5:16:f8:64:a4:92:ff:9a:87:af:83:be:
c3:ad:7c:7b:17:84:28:31:03:0c:6a:88:cd:e4:9c:fa:f2:49:
4f:b7:80:a6:1d:f9:80:6a:5e:80:44:f3:30:04:77:c2:4e:f2:
12:ad:62:af:63:9c:64:f0:41:76:df:15:f2:18:dc:8d:b2:97:
df:7a:12:ff:87:58:d7:c0:95:e9:5a:3a:aa:3b:c2:0b:7a:05:
42:be:66:da:3b:d3:e4:b4:70:9e:f7:9e:b4:10:4c:c2:4b:ed:
8f:9e:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:00 2026 by rpki-client