
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier: UZ4h13vloWHvoPIYg6HcW05OHdK6cSfAIgPOb+IPh3A=
Subject key identifier: 3D:C4:17:94:EC:37:F0:8B:1E:65:02:DE:D6:A6:E7:7A:EC:EE:0A:EC
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 085A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number: 0840
Signing time: Wed 18 Feb 2026 20:26:28 +0000
Manifest this update: Wed 18 Feb 2026 20:26:27 +0000
Manifest next update: Wed 25 Feb 2026 20:26:27 +0000
Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: WIseDt64R/uqfk2+Quyx4f6BuB3s9biOML38GIWapjk=)
2: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: ndDyR3nARcCpI8M00O5NTsG0TXsMVKolzBW8M2vjJSM=)
3: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: osLoFrVcX54KJqPsQx6xeONXJvxSUThAoJhPVtX+95Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Feb 18 20:26:27 2026 GMT
Not After : Feb 25 20:26:27 2026 GMT
Subject: CN=69962074-05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:8e:62:11:df:69:b6:b6:d8:64:ba:4a:9a:
2b:97:81:67:ea:6f:89:40:96:de:50:0e:d3:5d:55:
a2:fe:f6:a0:8a:b3:44:49:d0:b8:68:39:71:92:8a:
6f:51:df:76:83:20:7b:ae:8d:d5:29:61:63:a2:15:
68:ea:1b:16:10:57:cb:f9:49:8d:67:d1:11:63:53:
0b:8b:96:87:85:e4:0b:ca:6c:53:ae:70:27:cf:89:
16:93:3b:fe:c8:9d:b2:87:9b:41:f9:07:ca:b3:e2:
88:4f:57:df:66:8b:3d:04:ce:a9:18:3b:44:28:2d:
2e:be:1b:49:fa:63:31:2a:d7:cc:02:41:06:72:59:
16:dd:0d:7b:55:67:61:09:f4:4c:28:7e:38:af:18:
d6:7f:e4:c7:ff:84:f2:36:70:b5:64:b6:c1:04:dd:
49:98:9c:86:15:45:61:8e:45:35:76:57:f5:9a:49:
fc:cf:8a:a7:e6:d1:93:f2:62:b9:c9:c9:29:b1:72:
e4:24:42:a5:84:e0:b8:9e:77:f2:be:0e:56:5d:e2:
d6:62:3a:c8:d8:86:74:66:6e:f8:e6:64:11:c7:e0:
8b:7f:40:87:ea:a1:86:d0:d9:cb:6c:1f:80:87:51:
9b:1d:85:1f:b4:d4:34:b7:22:c3:94:06:c3:4a:e7:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:17:94:EC:37:F0:8B:1E:65:02:DE:D6:A6:E7:7A:EC:EE:0A:EC
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:a0:ab:d7:9a:5b:82:c2:01:e3:74:f6:28:2e:a1:0f:0e:41:
05:24:e2:13:92:b0:da:82:fe:ab:fe:82:6c:6c:4d:0e:e8:c0:
c2:47:ea:50:2c:2f:13:4e:5a:21:62:ab:3d:60:e3:40:c7:50:
cc:44:1f:c3:f7:71:89:4f:22:60:dc:38:ab:ac:3e:db:80:e8:
ec:ca:48:89:e6:80:63:c5:90:e7:6e:23:6c:40:bc:79:9b:00:
fa:3d:dd:dd:35:26:e6:56:5b:c6:a7:19:0d:dd:60:a6:20:6f:
64:a2:74:1e:59:62:81:a8:9f:9b:a0:5d:ce:5c:c1:1f:04:7a:
81:42:0a:9e:af:c4:40:ac:b1:dc:99:1c:13:2a:46:3b:af:05:
1d:cf:e6:66:db:ec:02:f7:88:c3:1c:d7:2b:29:6f:c9:06:50:
74:8e:f8:b8:ab:1b:d5:c8:d8:45:4e:dd:fb:a9:20:48:c4:3a:
3e:28:66:98:54:b7:4e:ee:7d:d7:d4:e1:e7:19:06:b4:0d:74:
95:28:86:e8:75:01:46:9d:17:0f:a1:96:db:5f:4a:46:3f:2e:
89:cb:a2:91:9d:24:02:50:2e:27:69:65:ff:35:62:90:aa:57:
87:d4:5b:08:c8:f2:e3:37:67:e0:3d:8d:d8:e2:60:a5:6a:c4:
95:4b:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:27 2026 by rpki-client