
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
File: 2QhrDfk0LcKwkbrobLd5_GJZvXs.mft (raw, json)
Hash identifier: F6u/CbSMmgV8oJV8zZ20iwVFBz/1T0G610B3Bk/sl24=
Subject key identifier: AC:46:78:08:33:DF:F6:A5:28:AF:A9:3C:39:68:4E:5F:A8:FC:6F:B4
Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B
Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B
Certificate serial: 351E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
Manifest number: 3515
Signing time: Wed 18 Feb 2026 14:54:22 +0000
Manifest this update: Wed 18 Feb 2026 14:54:21 +0000
Manifest next update: Wed 25 Feb 2026 14:54:21 +0000
Files and hashes: 1: 2QhrDfk0LcKwkbrobLd5_GJZvXs.crl (hash: B8Xr+kDqR3UUN45tKhLg52JYL6STvkMUawFSB2ArXQo=)
2: 588BD7269A1211E8B97A623AC4F9AE02.roa (hash: KKbAooYir9kiM+kQeIhamjhStk+gbSQk/A73xTUucXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl
rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13598 (0x351e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F2EC, serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B
Validity
Not Before: Feb 18 14:54:21 2026 GMT
Not After : Feb 25 14:54:21 2026 GMT
Subject: CN=6995d29e-577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:b4:75:5b:d9:5a:06:40:38:90:e8:ae:b4:
ad:b5:bb:d3:a6:0c:1d:dc:cc:4f:b8:19:40:6f:06:
e6:7f:ed:83:41:ba:a2:ea:3a:6c:eb:4d:cf:e3:f6:
22:b6:12:18:ac:df:70:41:01:b5:8e:d6:4d:1e:08:
19:60:0e:9c:2b:28:4c:e9:5a:22:05:bc:c4:76:cd:
66:56:5a:29:d4:91:0c:9b:42:f2:7d:59:08:3c:0a:
16:8f:5f:ad:b8:79:0c:08:79:b5:19:9a:cb:d0:a1:
9d:85:b3:7e:0b:b3:4f:fe:85:86:c2:be:64:70:b8:
de:74:11:41:3d:ee:75:23:af:e4:63:71:9c:5d:15:
34:d0:2f:02:bb:64:e3:8f:d8:c4:ae:59:00:3d:d4:
73:98:14:c6:46:e4:52:59:0e:70:06:5a:97:68:e4:
e2:55:2b:83:3d:61:25:ea:75:6f:ee:e0:94:c3:d8:
4a:1d:8d:16:14:2a:87:77:2d:b5:5d:2f:8a:41:3a:
58:c5:70:5f:68:d8:07:7a:19:f1:db:c4:fa:99:af:
45:7b:15:c7:c3:c2:e7:2c:e9:92:f2:0f:f0:44:01:
af:3a:0f:46:d6:bb:fe:6d:c3:fb:62:29:43:7f:02:
8e:23:88:37:d2:c9:af:de:72:a4:6d:02:8a:3e:5c:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:46:78:08:33:DF:F6:A5:28:AF:A9:3C:39:68:4E:5F:A8:FC:6F:B4
X509v3 Authority Key Identifier:
keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:66:29:54:a1:1f:26:75:ed:1d:63:88:3d:63:a3:b7:3b:53:
43:a1:b1:1e:22:d3:bd:90:6c:05:76:b6:cd:aa:5b:ca:ff:5a:
b4:0d:05:db:31:d8:63:ad:4e:2e:21:86:90:9d:62:45:46:46:
a7:2d:94:91:92:79:d0:2f:45:e8:b0:99:13:82:0f:64:8e:10:
f1:20:2b:ee:54:bd:94:3d:40:d9:6f:46:21:18:b4:17:74:ff:
b9:a8:96:8b:41:1b:cd:57:9b:ec:a2:52:91:a3:51:02:ed:16:
68:fe:32:11:ef:eb:0b:62:52:a5:65:80:65:de:12:5a:ad:79:
21:e1:b8:1e:2a:63:af:37:39:73:b9:dd:b7:68:39:51:46:76:
cc:13:6a:1e:45:40:70:54:1d:ef:50:d4:32:70:6e:80:fa:07:
db:c3:e0:3d:79:74:6d:5a:9e:7f:ed:76:2c:89:cd:cb:2f:91:
fd:ea:64:94:41:bf:20:99:0a:35:12:98:b7:08:aa:58:41:c7:
74:ec:d1:35:ca:5c:b9:b5:f2:24:8a:87:9c:fb:39:70:71:29:
4e:7c:a3:a7:3b:ba:db:4f:f4:4a:76:90:3e:88:cd:d1:06:93:
fd:10:3b:d7:4b:0e:2a:ff:57:15:dc:52:db:15:cd:d1:d4:f5:
76:3d:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:34:58 2026 by rpki-client