
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
File: iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json)
Hash identifier: uAMjsIa3SspPBlH5d040wRRJejsXIwQsYBPY6fO0hFs=
Subject key identifier: 36:A8:D1:A0:41:25:68:59:A5:78:2A:B5:41:32:EB:0B:FB:EE:E7:F4
Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Certificate serial: 3535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
Manifest number: 3521
Signing time: Wed 18 Feb 2026 14:34:26 +0000
Manifest this update: Wed 18 Feb 2026 14:34:25 +0000
Manifest next update: Wed 25 Feb 2026 14:34:25 +0000
Files and hashes: 1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: coiFUYwFzPGUF/C+PcQeOv6NdWkLosM4HkPRNJ9Z218=)
2: 075152B253CB11F09DA22358C4F9AE02.roa (hash: zuQumTbCd8/+WRCpCpTlfL5cCnKF+yOSXxN8EoHEiUM=)
3: 10BC8836509B11F0A1C78F35C4F9AE02.roa (hash: 5P8iz2/f75JawHS84+uOtc39+Wj5fIfZ/CgqWjpJHIs=)
4: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (hash: H2psEBDgMdRvNZgUPZApVJCLqrPQ8EnSpGElYQR9ZLA=)
5: E52708AADFCE11EFBC4CD631C4F9AE02.roa (hash: /pC0o36JZbc/+sMAFn6ZasM1rRw+KC7uxqzujpRX3bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13621 (0x3535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Validity
Not Before: Feb 18 14:34:25 2026 GMT
Not After : Feb 25 14:34:25 2026 GMT
Subject: CN=6995cdf2-885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:c2:e5:61:b2:bc:40:cf:55:c8:e1:66:fa:
b2:59:7e:f4:2e:ef:6a:12:8b:19:bb:c6:87:9e:53:
33:5b:11:64:c0:32:d2:d1:d7:67:d8:14:49:4d:50:
24:0b:6c:cb:80:cc:76:73:d2:c9:ad:77:47:26:c5:
5f:c5:7d:fe:f8:f0:e3:db:f1:25:27:d5:f7:83:87:
ae:dd:bd:e4:c4:d4:e7:75:f2:61:e0:c8:0e:0e:7d:
bf:75:d9:c7:ac:ee:9a:2b:be:d4:5b:af:3b:eb:35:
18:41:27:2b:d9:5b:3b:e2:a7:cf:22:e2:c4:7b:53:
3d:ed:e4:3f:7b:8b:3f:74:73:94:2a:1f:26:58:2a:
d5:c0:86:72:26:c2:43:f8:e5:b1:aa:55:14:9e:a8:
53:ed:fb:14:31:90:ef:db:5a:2b:de:6e:dc:de:91:
cc:7a:83:25:e6:79:10:85:f1:7c:43:57:6b:d6:31:
32:99:7a:bb:81:62:93:14:3d:4c:3a:49:c1:b4:db:
e7:f0:77:85:76:d0:1e:05:59:84:8a:ac:b9:3c:17:
26:8c:9b:e5:53:a4:9c:66:88:53:ec:b0:1b:03:94:
e2:6e:d8:59:3d:7f:a7:c5:02:f0:ad:32:76:b2:f0:
3a:d4:46:ca:d4:55:65:05:53:89:c4:fc:d3:6e:42:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A8:D1:A0:41:25:68:59:A5:78:2A:B5:41:32:EB:0B:FB:EE:E7:F4
X509v3 Authority Key Identifier:
keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:1d:53:95:ff:31:ae:c6:85:65:66:10:71:92:0d:80:ec:8d:
b6:a4:5e:76:16:fa:49:63:88:4f:05:a9:88:e6:60:31:c3:b6:
11:65:7c:18:09:66:73:72:20:cd:03:86:a6:e8:a5:47:74:d5:
0f:70:30:1e:44:d8:5d:8f:4c:04:a8:9f:6a:9a:e2:4c:18:8d:
3e:a6:c6:f1:08:c4:58:7a:e3:b6:22:5c:4b:94:84:0f:5c:8b:
14:9d:b2:a4:ec:c3:58:65:b9:b3:34:e5:83:f6:93:5b:0a:68:
b3:3b:9d:a0:7a:ae:4b:55:ed:a6:ae:72:6a:d8:fd:0d:4b:d5:
ef:92:eb:fa:de:5c:82:0f:57:9c:e6:86:11:72:fd:9a:25:0b:
93:ac:fa:57:48:ed:3c:79:7f:56:fa:63:7c:83:3a:88:28:fa:
14:a6:2c:37:32:01:9b:96:1b:1d:ef:2f:82:22:99:a8:9d:25:
af:e6:ce:cf:f9:f0:8f:40:ef:1e:43:21:5f:fc:9d:c0:a4:10:
72:2c:d9:ac:3e:de:bf:e1:88:7d:0a:7b:cc:4c:05:e5:b4:b3:
43:59:b4:7d:1f:ec:0d:57:50:98:13:1d:d8:ec:c1:9c:65:e4:
42:08:26:08:c7:41:a8:1c:61:9a:53:cb:6b:63:7c:85:70:5f:
e0:da:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:08 2026 by rpki-client