
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json)
Hash identifier: g7JcJnTves3F9oNm9n90618MRd3ji4v1ERZ+TRAQLE8=
Subject key identifier: 1E:31:01:07:11:C3:B5:22:C7:A4:C6:C4:43:A2:5D:62:AF:77:C8:D2
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
Manifest number: 01EE
Signing time: Thu 19 Feb 2026 02:13:06 +0000
Manifest this update: Thu 19 Feb 2026 02:13:05 +0000
Manifest next update: Thu 26 Feb 2026 02:13:05 +0000
Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: D2KPww/Jtok1nlqh4X7YbRmnKarqzUQUCFXXKOkIlt4=)
2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: /u8NCBhZqa46y7ManIklohNtYLyLfgCP7Q1YEXf3qAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Feb 19 02:13:05 2026 GMT
Not After : Feb 26 02:13:05 2026 GMT
Subject: CN=699671b2-2c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:db:76:ee:79:9b:fc:7c:93:92:b8:a0:7d:
fa:73:77:ab:b9:4c:4a:b3:a3:fa:02:11:14:3b:81:
6f:40:17:79:58:1c:3c:9b:d9:94:d0:73:fb:68:14:
62:20:cf:49:51:8d:5e:11:bf:2e:45:21:49:3c:62:
03:3e:bf:ec:e8:3e:f4:4d:23:38:64:15:a7:ec:64:
c8:a1:a2:23:c1:3a:f8:e9:64:bc:e2:09:85:90:cb:
80:8d:b8:fe:07:e8:44:9f:e6:b1:cf:68:50:2f:2b:
e8:ec:08:db:7a:23:ec:b2:84:35:2f:3c:e0:7c:93:
ac:58:86:07:38:38:40:f4:31:f3:b9:56:78:c9:fd:
36:2d:48:36:0a:00:c1:a7:4f:cc:3f:a6:d7:9e:69:
b2:51:af:b0:30:0b:f4:c9:6b:20:1a:91:84:26:6e:
58:6c:57:59:e0:8e:21:92:5f:e3:44:84:f8:71:e8:
89:8e:c1:4b:cf:d7:00:5a:7a:b0:1f:28:7b:c6:49:
fe:5e:f2:93:a5:7e:34:e8:f3:bd:83:12:bf:24:00:
ce:a1:3f:43:1e:fe:e2:f2:2b:58:b0:69:94:64:65:
0a:81:6f:ae:71:29:60:22:a8:cc:8a:0e:4d:ec:fd:
40:17:40:77:2c:98:90:8f:ce:50:6d:d5:5b:14:16:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:01:07:11:C3:B5:22:C7:A4:C6:C4:43:A2:5D:62:AF:77:C8:D2
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:6a:00:cb:0e:46:ca:0c:62:49:9e:5d:16:fb:6f:39:05:91:
9d:1d:26:f2:cb:e4:77:1e:45:da:57:70:db:a1:24:90:f5:d9:
f6:5d:bd:74:c2:2f:ae:74:bb:46:c1:a0:96:82:f8:91:9b:ef:
06:a9:f1:ab:52:a4:7c:13:fc:e9:ba:92:99:cc:24:ca:74:08:
98:f2:b6:04:16:42:e8:5e:1e:a0:38:12:0b:30:2b:60:fd:81:
7e:61:99:5e:d7:74:fa:9d:1b:ab:31:3a:af:b3:f2:44:d2:b9:
ad:32:fe:5a:0b:1b:8a:02:da:fa:a6:bb:b4:0d:fb:9d:78:a1:
bd:a9:0e:72:12:b3:46:60:bc:84:fb:ac:77:e9:57:80:ff:70:
2a:9e:bc:4d:b9:c7:bf:84:83:af:d9:90:7d:a8:ca:bd:65:9a:
65:e1:04:ad:ea:2d:ea:db:4c:79:39:ac:77:6a:45:58:b8:7d:
c5:af:34:d6:89:87:91:8f:2f:dd:16:bc:aa:f0:75:1b:22:7d:
9c:be:8c:73:77:23:a8:dd:c2:27:1e:5f:e8:bb:51:b4:44:b0:
7e:82:14:32:0f:9d:b3:1c:27:da:9e:3f:6b:38:32:eb:28:31:
9a:c6:63:1e:e8:0b:45:a8:be:f9:4a:a3:45:be:22:ab:fd:d8:
cb:1b:3f:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz
Q0U3REFDNDQwHhcNMjYwMjE5MDIxMzA1WhcNMjYwMjI2MDIxMzA1WjAYMRYwFAYD
VQQDDA02OTk2NzFiMi0yYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlffbdu55m/x8k5K4oH36c3eruUxKs6P6AhEUO4FvQBd5WBw8m9mU0HP7aBRi
IM9JUY1eEb8uRSFJPGIDPr/s6D70TSM4ZBWn7GTIoaIjwTr46WS84gmFkMuAjbj+
B+hEn+axz2hQLyvo7AjbeiPssoQ1LzzgfJOsWIYHODhA9DHzuVZ4yf02LUg2CgDB
p0/MP6bXnmmyUa+wMAv0yWsgGpGEJm5YbFdZ4I4hkl/jRIT4ceiJjsFLz9cAWnqw
Hyh7xkn+XvKTpX406PO9gxK/JADOoT9DHv7i8itYsGmUZGUKgW+ucSlgIqjMig5N
7P1AF0B3LJiQj85QbdVbFBb0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4xAQcR
w7Uix6TGxEOiXWKvd8jSMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG
ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO
WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZagDLDkbKDGJJnl0W+285BZGdHSbyy+R3HkXaV3DboSSQ9dn2Xb10
wi+udLtGwaCWgviRm+8GqfGrUqR8E/zpupKZzCTKdAiY8rYEFkLoXh6gOBILMCtg
/YF+YZle13T6nRurMTqvs/JE0rmtMv5aCxuKAtr6pru0DfudeKG9qQ5yErNGYLyE
+6x36VeA/3AqnrxNuce/hIOv2ZB9qMq9ZZpl4QSt6i3q20x5Oax3akVYuH3FrzTW
iYeRjy/dFryq8HUbIn2cvoxzdyOo3cInHl/ou1G0RLB+ghQyD52zHCfanj9rODLr
KDGaxmMe6AtFqL75SqNFviKr/djLGz+k
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:14 2026 by rpki-client