
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier: Q4b9cayxC5hxmWC0b8qh0AoGN7F5cRFfW/we/dzrxqk=
Subject key identifier: 94:94:66:3F:26:73:E7:F6:5F:A5:7F:AD:AF:17:26:DD:D0:4F:FE:29
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 2527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number: 24E4
Signing time: Wed 18 Feb 2026 15:37:55 +0000
Manifest this update: Wed 18 Feb 2026 15:37:55 +0000
Manifest next update: Wed 25 Feb 2026 15:37:55 +0000
Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: pAxlUtPj7w0v6j8E8Ja89tmjAfU2YMUP1RNApgV1aKQ=)
2: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=)
3: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=)
4: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=)
5: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=)
6: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=)
7: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=)
8: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9511 (0x2527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Feb 18 15:37:55 2026 GMT
Not After : Feb 25 15:37:55 2026 GMT
Subject: CN=6995dcd3-bdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:44:9c:fb:18:5e:be:a6:b1:74:b1:3b:9d:
17:0f:f9:b3:7f:16:be:e3:c3:60:08:02:91:8e:74:
5d:36:57:fa:cc:29:7c:19:a7:b8:9a:89:a7:19:87:
6c:5d:e9:e8:91:80:03:98:8e:88:01:f8:1f:a4:af:
a5:5b:40:32:9d:cc:95:ee:34:9c:2c:c2:ca:22:90:
a9:7e:fb:49:2b:77:31:26:1e:36:5a:68:b4:03:ee:
69:cd:25:c0:6b:f7:4a:d3:50:f5:f0:9e:41:09:26:
72:65:36:8b:81:36:ef:21:98:13:f0:54:25:4a:1a:
28:f6:f0:d6:c3:05:54:de:81:ff:b1:57:75:14:ef:
da:92:9b:91:c3:9c:d6:6d:bd:c4:9b:25:04:fa:86:
73:0e:9b:27:68:12:55:03:bf:63:1d:0e:87:46:c8:
ca:d5:70:66:66:5a:3d:ff:57:82:aa:17:19:06:29:
87:f3:f7:a9:f3:6f:ad:c3:af:d6:e7:e6:1d:e4:20:
10:a4:ee:2f:6b:84:ce:77:f7:e3:3b:ac:67:25:8e:
4a:31:b7:04:45:d0:36:94:4a:db:7f:ce:76:d4:ec:
3a:8b:0a:1b:fe:2e:e3:88:d4:87:c3:6d:49:30:73:
21:c3:82:bf:55:81:2d:78:4a:3c:9f:9d:24:9f:57:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:66:3F:26:73:E7:F6:5F:A5:7F:AD:AF:17:26:DD:D0:4F:FE:29
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:4e:e0:2e:ab:13:50:ee:09:02:b4:25:62:b2:5e:4f:52:2c:
fb:a0:9f:c6:25:38:60:f1:b3:15:18:31:91:15:ea:8c:e6:da:
7a:8b:c9:29:93:f7:c5:d5:52:fc:b1:fd:46:3e:32:e1:19:53:
60:c7:48:35:04:e4:e0:fc:60:03:b9:39:2a:83:e7:c9:84:ef:
7d:49:51:bc:d1:7b:4b:20:56:1f:43:cc:07:07:15:d6:b0:ac:
36:3b:0c:14:df:0f:8f:76:fb:24:83:b4:c1:9a:2b:32:46:0e:
ac:12:ef:b7:2a:d4:36:4b:c8:5e:eb:e2:69:de:f9:89:9b:86:
0c:8a:b0:7d:4d:49:5c:5b:24:ff:90:7b:3f:33:c9:aa:af:85:
da:93:2b:a7:34:f0:aa:b8:4a:9e:ea:d5:39:00:ea:5a:c5:da:
2b:5e:32:da:47:98:73:a3:3e:15:d9:b5:26:72:68:0e:e1:45:
20:12:85:ae:4a:f9:4d:5f:d2:47:f5:62:a1:77:d7:c3:51:cb:
ac:e1:8a:e5:af:d0:c6:b0:d1:63:2d:4a:75:0f:e9:79:86:f5:
61:4e:db:f9:db:bd:9c:62:9a:ae:74:8f:37:f2:8c:12:2b:7f:
fd:a4:3e:65:c0:a1:d4:ee:5a:7c:e2:6c:77:e0:85:17:fa:02:
bb:68:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:36 2026 by rpki-client