
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json)
Hash identifier: owQkUOnkyfw4mpPV2h2UeyrOWdOzRA6qIcAob2e/z9U=
Subject key identifier: 5F:46:19:CB:91:B4:34:58:45:03:75:67:37:2E:EA:66:4A:AB:25:C7
Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
Manifest number: 0861
Signing time: Wed 18 Feb 2026 20:13:47 +0000
Manifest this update: Wed 18 Feb 2026 20:13:47 +0000
Manifest next update: Wed 25 Feb 2026 20:13:47 +0000
Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: SPdcePGqsbmUoe2SIDqdOusDc+RDhfre5ZKYVwctgSY=)
2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: mDiyXguFaGa3vR8D07iQ+K1O3uq6pL2JeIG9VyLGezQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Validity
Not Before: Feb 18 20:13:47 2026 GMT
Not After : Feb 25 20:13:47 2026 GMT
Subject: CN=69961d7b-2559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:41:5e:52:c7:0e:e2:3a:47:e0:4d:e8:46:
31:9d:5a:bd:60:9d:33:3a:95:5a:40:dd:27:11:bd:
52:c3:27:1c:30:5b:17:b3:f8:ae:75:c6:4e:5c:68:
66:13:9d:33:43:b0:d7:fd:6c:f2:85:d5:4a:c9:70:
2d:8e:44:6b:5f:d3:ed:23:5e:6e:21:82:c6:46:56:
0c:49:26:95:85:e1:b0:95:5c:5c:ea:4d:ee:1b:e6:
d2:bc:3c:c8:13:8b:a3:8d:07:37:bc:15:2c:e5:97:
e8:1f:85:e3:be:d9:16:5f:45:a1:ef:00:b0:cb:55:
2d:d3:51:4b:85:51:b3:ca:79:be:eb:cd:8b:25:cd:
96:17:32:cf:14:57:4c:1f:1e:da:8c:9e:cf:2f:22:
2f:04:bd:d3:60:00:d0:24:16:cb:35:d4:11:7b:16:
ac:dd:19:68:41:8f:ff:d6:7b:18:af:68:c1:c3:27:
b1:b0:33:ec:7f:6f:79:a9:cf:ff:e5:b8:d6:7f:f2:
ab:e9:90:6c:ee:3c:4e:9a:50:a9:01:bd:2b:b5:5f:
45:a0:db:2b:59:c4:94:cb:fc:33:ca:47:9c:53:f6:
fa:ac:df:95:54:8c:d9:fe:4b:46:b2:47:4e:60:a4:
34:a9:d0:e2:85:a0:05:46:bf:8b:cd:0d:23:50:75:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:46:19:CB:91:B4:34:58:45:03:75:67:37:2E:EA:66:4A:AB:25:C7
X509v3 Authority Key Identifier:
keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:8a:5d:9e:1b:85:5c:9c:94:eb:b7:ee:8e:ae:4c:f5:3d:
a9:27:43:61:11:15:01:8a:77:02:80:5f:88:a8:83:b7:73:95:
11:30:31:26:f3:a8:f8:ce:92:43:2f:5b:b9:8e:04:95:0f:7c:
66:9f:8e:9e:44:44:d4:e4:ed:fc:95:53:8e:cf:47:ce:58:25:
58:17:bc:6d:7a:24:ab:8e:a1:b1:07:9b:89:09:67:4c:a1:1d:
69:ec:26:95:fd:2a:46:b8:b1:67:18:ab:c9:43:ba:9b:25:8c:
4d:b9:62:35:c4:cb:70:a4:e2:83:f2:7b:86:fe:16:2f:5e:20:
34:ba:9b:d6:44:ee:80:91:0a:70:c6:17:f2:92:0b:0f:ef:d4:
0e:62:14:5d:c7:18:23:07:ef:c9:93:de:82:b7:60:eb:9b:92:
1a:fe:f3:ae:d3:ef:e9:cd:63:13:a8:0a:76:2b:7b:a4:40:b9:
2e:4e:72:2c:22:be:04:a4:dd:53:0d:1f:2f:d2:b8:b7:4a:86:
a8:41:73:08:fa:ce:af:ec:49:37:f5:0f:4f:b6:49:2e:7d:c4:
16:14:ed:15:f9:7c:f1:d4:84:d8:55:48:6c:6a:3b:c9:87:9f:
16:6d:1b:06:e5:eb:f5:35:c4:dc:af:23:c6:d4:5f:81:29:7e:
53:f2:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:34 2026 by rpki-client