
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier: tlVgFFMWlbhg0RXZz6R7MnA9VJUgowMo4sWqnTi/l8w=
Subject key identifier: 31:F4:DD:D8:DE:BB:08:83:5F:BB:05:EA:7D:D2:43:4F:63:17:1A:96
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 02FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number: 02F9
Signing time: Thu 19 Feb 2026 00:26:20 +0000
Manifest this update: Thu 19 Feb 2026 00:26:20 +0000
Manifest next update: Thu 26 Feb 2026 00:26:20 +0000
Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: wuhU/2PmuUwpQBM9L3bgBtNr0Q4sr6xzOkgsf9h/8Rs=)
2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765 (0x2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Validity
Not Before: Feb 19 00:26:20 2026 GMT
Not After : Feb 26 00:26:20 2026 GMT
Subject: CN=699658ac-9b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:3f:d8:5b:65:37:bf:48:9e:f9:26:f4:2e:
97:54:e3:87:7f:e7:36:82:17:fd:de:0f:64:71:7a:
7f:6d:93:bd:f3:b5:a0:b6:f8:be:e7:c7:5b:22:ef:
75:94:f5:46:a6:48:b0:a6:3e:44:46:30:dc:a0:a5:
04:fd:e8:9c:1f:63:cd:3f:52:f2:b5:9e:e8:9f:55:
7a:f2:39:5a:6f:4d:da:cd:6d:7f:df:4b:e8:7a:0a:
4b:9c:8b:cf:87:18:8c:e4:15:bc:70:85:2d:7e:6d:
28:e6:a6:7a:4f:c2:49:8d:bb:93:f8:c5:0d:02:b5:
a7:d5:b7:d8:20:58:13:75:d8:be:7a:46:87:41:fb:
27:97:cf:4d:25:5e:a0:4d:3e:b3:49:6e:63:55:2e:
10:20:4b:b7:a8:11:0f:e9:5a:f1:85:6a:53:5a:b2:
e7:b4:a9:71:fa:38:a5:80:8d:66:bb:1c:e8:5a:f9:
f1:02:4a:53:27:46:da:8a:74:0e:0f:d7:24:2f:e7:
91:27:91:4e:b5:0e:89:7f:9e:6e:58:75:bb:fb:84:
a1:c2:1a:40:3d:e2:6f:94:2e:e2:d1:ea:7e:01:40:
c1:88:20:cb:65:4c:89:72:bf:73:40:92:38:e8:d0:
26:75:b1:d4:8a:98:da:67:9b:67:ad:1a:45:76:9a:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:DD:D8:DE:BB:08:83:5F:BB:05:EA:7D:D2:43:4F:63:17:1A:96
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:82:5d:72:ad:4f:74:e0:23:82:08:12:de:4d:07:ac:6d:77:
46:ad:cb:33:8b:74:47:ed:43:17:75:24:07:f8:cd:f9:58:38:
da:e8:e5:82:1e:ec:65:d7:81:de:5d:05:a0:6f:b0:c3:b6:5a:
61:3a:12:e8:5b:49:4d:c0:05:58:32:e1:36:65:84:e6:85:68:
8a:ba:13:25:73:f8:15:38:c5:89:96:5b:7d:91:42:b4:d7:3a:
ad:bc:95:31:56:af:c8:fd:57:b9:85:96:ee:d1:db:54:54:40:
ee:9d:d0:f8:06:08:90:53:f1:10:c7:7c:50:d2:f3:cc:16:51:
d7:f5:77:a2:27:6a:b5:ac:31:cd:39:d5:04:62:c5:7b:d0:fa:
15:ff:0e:36:e6:11:6b:dc:f3:83:cc:8f:90:25:7c:17:36:ed:
5a:57:77:87:aa:bc:c4:32:52:bc:46:71:d0:78:49:9f:aa:1e:
df:7c:c1:e3:31:83:f6:e7:e0:7e:75:02:5b:57:b2:fa:df:f5:
95:bf:67:b4:76:e3:a3:ec:57:10:7a:b5:f8:0c:b9:70:56:75:
7f:38:b9:e6:93:c8:f0:73:9e:bc:45:4c:ee:1c:de:34:33:ea:
59:cf:c0:a0:b3:17:59:7c:a6:7c:3d:fd:7f:16:88:3b:77:78:
cd:9e:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:40 2026 by rpki-client