
$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier: iQin549FEhLw+3PrJ7NqyNmFHJSRunhpUgB+FK8sJ5E=
Subject key identifier: EA:A0:9A:47:1D:9C:31:82:B0:7A:2F:9D:E4:8F:29:9F:EE:1F:C6:50
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial: 0D12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number: 0CE3
Signing time: Wed 18 Feb 2026 18:03:00 +0000
Manifest this update: Wed 18 Feb 2026 18:03:00 +0000
Manifest next update: Wed 25 Feb 2026 18:03:00 +0000
Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: C9cDZ57Ff64cMqlNTRHKopj4DMSpX9l+ecVlgInQPvY=)
2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Validity
Not Before: Feb 18 18:03:00 2026 GMT
Not After : Feb 25 18:03:00 2026 GMT
Subject: CN=6995fed4-8557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:25:0a:55:45:c7:79:2f:f6:cf:42:3d:0c:
da:55:da:64:a0:f7:3d:3e:d9:4f:75:ab:b5:bf:c5:
57:bb:23:f3:61:b1:f0:e9:cc:05:f2:1d:48:b2:eb:
0d:68:a1:d5:08:42:91:d4:4b:05:66:9a:ac:1d:8d:
04:f9:d8:2c:86:da:cf:eb:e5:41:a9:76:2a:5b:c2:
bb:66:07:fe:65:ff:d9:60:ac:58:50:77:6c:58:02:
50:4d:93:88:5b:9e:34:a6:7e:42:75:20:cd:5b:64:
62:61:c1:38:a9:c6:b5:e3:bc:83:13:35:2a:42:20:
c7:99:d8:ee:b9:dc:0c:cc:52:56:35:9b:86:ab:35:
e9:9d:39:13:4f:a0:77:a0:bb:2e:e3:d2:1f:af:5d:
81:c9:f5:81:a9:7c:64:c0:38:17:ca:b8:f9:18:dc:
f5:8e:45:88:74:92:f5:55:af:94:e2:6f:39:e5:79:
72:ac:00:a4:6a:d5:b3:62:1d:5d:49:c1:5c:4b:8a:
9f:20:20:db:50:53:83:d1:39:26:a1:73:81:0f:59:
51:83:9a:bb:cf:02:c3:ad:5e:6b:48:6f:9d:6d:b4:
c2:2e:df:73:8b:b8:4d:1f:b7:b2:32:61:a7:65:e7:
06:82:37:be:56:c0:03:0e:7c:67:3d:8a:0e:e0:f2:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:9A:47:1D:9C:31:82:B0:7A:2F:9D:E4:8F:29:9F:EE:1F:C6:50
X509v3 Authority Key Identifier:
keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d3:57:7b:b8:c4:78:90:11:36:aa:8f:28:58:f4:83:2a:7b:
fe:3b:49:f3:4d:00:b3:a7:76:9d:56:bd:75:00:56:56:f3:9d:
79:46:6d:02:62:94:b0:69:86:2b:ce:f2:30:71:c6:a3:37:d7:
ca:52:98:a8:51:bf:35:eb:d2:c6:4e:53:61:2b:58:e9:de:34:
4b:9b:83:1f:c4:c7:e7:2e:e2:6a:0d:5c:43:a6:50:76:19:1e:
f8:1a:60:18:7b:7a:fc:95:63:95:86:a9:e0:66:97:6b:d0:bf:
f8:a6:42:6f:53:80:72:0d:1f:58:77:5b:af:4b:22:07:5e:c7:
87:42:eb:41:51:2f:44:ca:b5:c1:ba:02:b8:75:eb:78:54:cd:
2f:dc:e4:95:18:8c:34:e1:20:c5:29:17:1c:c1:f0:c3:e2:4b:
3f:4d:23:6d:b4:94:37:41:4e:ad:c2:d3:82:57:3a:cc:ae:a1:
73:cb:6d:ca:e3:20:f4:5d:aa:d3:84:d6:bd:10:81:c7:01:30:
06:63:fd:7d:0b:47:e6:5c:a2:fa:7f:0c:7f:6a:9c:91:53:02:
6f:3a:d1:c8:5f:c1:c4:22:6a:57:8f:4f:4b:59:c8:7e:a3:6e:
ee:e2:71:e0:3e:31:fa:4b:96:73:ee:6d:df:d6:75:17:a6:81:
54:25:e5:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz
NkREOENBMzQwHhcNMjYwMjE4MTgwMzAwWhcNMjYwMjI1MTgwMzAwWjAYMRYwFAYD
VQQDDA02OTk1ZmVkNC04NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuD0lClVFx3kv9s9CPQzaVdpkoPc9PtlPdau1v8VXuyPzYbHw6cwF8h1IsusN
aKHVCEKR1EsFZpqsHY0E+dgshtrP6+VBqXYqW8K7Zgf+Zf/ZYKxYUHdsWAJQTZOI
W540pn5CdSDNW2RiYcE4qca147yDEzUqQiDHmdjuudwMzFJWNZuGqzXpnTkTT6B3
oLsu49Ifr12ByfWBqXxkwDgXyrj5GNz1jkWIdJL1Va+U4m855XlyrACkatWzYh1d
ScFcS4qfICDbUFOD0TkmoXOBD1lRg5q7zwLDrV5rSG+dbbTCLt9zi7hNH7eyMmGn
ZecGgje+VsADDnxnPYoO4PIAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqgmkcd
nDGCsHovneSPKZ/uH8ZQMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5
NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo
cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAX01d7uMR4kBE2qo8oWPSDKnv+O0nzTQCzp3adVr11AFZW8515Rm0C
YpSwaYYrzvIwccajN9fKUpioUb8169LGTlNhK1jp3jRLm4MfxMfnLuJqDVxDplB2
GR74GmAYe3r8lWOVhqngZpdr0L/4pkJvU4ByDR9Yd1uvSyIHXseHQutBUS9EyrXB
ugK4det4VM0v3OSVGIw04SDFKRccwfDD4ks/TSNttJQ3QU6twtOCVzrMrqFzy23K
4yD0XarThNa9EIHHATAGY/19C0fmXKL6fwx/apyRUwJvOtHIX8HEImpXj09LWch+
o27u4nHgPjH6S5Zz7m3f1nUXpoFUJeVG
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:11 2026 by rpki-client