
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier: jfnnwL+6+Ers336wUeiIamvBO9pL1iJ/LfIy5T6W82c=
Subject key identifier: FC:E9:9E:7A:F6:71:0F:F3:37:CC:45:70:76:9E:F0:FE:6D:FD:A2:2C
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial: 02BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number: 02B0
Signing time: Thu 19 Feb 2026 00:38:40 +0000
Manifest this update: Thu 19 Feb 2026 00:38:40 +0000
Manifest next update: Thu 26 Feb 2026 00:38:40 +0000
Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: DjPKAfrEM8s2qYVSxAC7sLBdAVVIF7AYvYBCVbuK+QU=)
2: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: jU5Md8Gh4CBr/ZHApHJnxAlGLX6cvpq9zc86CFRKi+8=)
3: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: pYe0+bHqCYcW1iVEEt6tk6dblnlCH5OApr9vBfmnQiE=)
4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: 60cLUiwIo3OFkat+dtGQ2GzMMVBuPgmzgGRtVgQi3Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Validity
Not Before: Feb 19 00:38:40 2026 GMT
Not After : Feb 26 00:38:40 2026 GMT
Subject: CN=69965b90-a3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:03:4a:fa:02:4e:4f:3e:09:ac:e4:34:0e:49:
1d:39:23:15:f0:ba:47:74:3a:93:6b:07:1f:92:5e:
f6:a0:35:9a:1f:6a:3f:48:8f:79:2c:66:73:90:2b:
fa:0a:ed:d8:1f:27:f6:f7:c8:1f:51:42:de:5e:67:
2b:02:8d:6c:30:39:95:99:83:e1:31:db:c4:d2:c4:
4e:2c:57:f5:f1:6b:36:86:d2:4b:95:a2:6a:28:7c:
7e:60:c4:ff:a1:16:53:24:c7:25:5f:b5:26:7e:01:
a7:fc:e7:b7:58:93:89:70:8d:47:84:ed:96:e3:84:
59:33:0c:1e:8a:bc:ad:5b:00:8b:f1:d4:4f:19:07:
c1:3f:fd:ac:f0:72:be:c8:57:e2:a0:e2:7e:86:96:
b5:89:03:5f:da:f2:50:70:05:eb:70:c6:17:ad:24:
54:a8:d7:d9:53:7a:10:b0:56:d5:20:24:7e:2d:1a:
b4:bd:6f:00:c7:2e:ef:33:35:2d:f8:01:22:c4:b7:
9c:c4:85:0e:cf:d5:bc:39:28:e8:dd:55:26:cb:54:
49:46:b0:36:dd:7b:34:6c:2f:9b:5b:fd:51:93:f4:
ad:77:10:fb:63:67:f9:56:1e:c8:2b:05:1e:58:89:
ab:1f:9a:70:0c:74:ad:1e:6d:7c:d1:57:14:37:29:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:9E:7A:F6:71:0F:F3:37:CC:45:70:76:9E:F0:FE:6D:FD:A2:2C
X509v3 Authority Key Identifier:
keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:da:11:f4:5e:88:aa:7e:85:d0:b4:e3:5b:52:c3:7b:c5:b7:
3c:dc:e2:7e:cf:99:92:3b:5a:28:29:ef:ab:0a:75:39:80:ea:
b9:a7:9f:fc:04:33:ab:87:37:db:8e:43:58:40:aa:10:6f:34:
32:41:69:05:44:f7:e3:50:be:69:e1:45:95:1d:ee:0d:31:52:
a6:4d:fb:a3:b3:b3:5a:b8:c0:e7:1f:09:26:01:2a:35:4c:cc:
5d:98:9a:37:39:f5:66:fd:55:ec:f1:13:dc:16:9f:43:c2:39:
68:9c:3c:21:78:f5:0d:f6:f2:af:f1:fe:f0:29:0f:e7:00:e5:
a9:a6:df:30:69:0c:fc:ca:a4:33:23:8e:e5:3f:ea:74:ee:6d:
a0:3a:fe:1a:07:3a:be:74:5d:a7:70:cf:34:aa:84:43:a0:8f:
83:52:4e:8b:d8:97:6e:cd:3d:f7:3b:a0:41:05:d3:9b:a6:eb:
3d:ea:2b:1d:d7:7a:06:16:c9:da:2f:10:f4:64:d1:d3:17:ab:
c7:75:b9:26:ee:f5:a2:fe:98:27:1e:9a:96:d4:8d:9e:51:d7:
b4:d9:23:89:0e:0f:0a:6a:f7:8f:2c:fd:d8:12:b0:0b:1b:db:
4c:a5:74:23:89:e1:97:87:2f:67:d4:b7:95:d3:74:3e:f6:3d:
51:77:0b:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5
Q0QzRjlCREMwHhcNMjYwMjE5MDAzODQwWhcNMjYwMjI2MDAzODQwWjAYMRYwFAYD
VQQDDA02OTk2NWI5MC1hM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7gNK+gJOTz4JrOQ0DkkdOSMV8LpHdDqTawcfkl72oDWaH2o/SI95LGZzkCv6
Cu3YHyf298gfUULeXmcrAo1sMDmVmYPhMdvE0sROLFf18Ws2htJLlaJqKHx+YMT/
oRZTJMclX7UmfgGn/Oe3WJOJcI1HhO2W44RZMwweirytWwCL8dRPGQfBP/2s8HK+
yFfioOJ+hpa1iQNf2vJQcAXrcMYXrSRUqNfZU3oQsFbVICR+LRq0vW8Axy7vMzUt
+AEixLecxIUOz9W8OSjo3VUmy1RJRrA23Xs0bC+bW/1Rk/StdxD7Y2f5Vh7IKwUe
WImrH5pwDHStHm180VcUNyk6NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzpnnr2
cQ/zN8xFcHae8P5t/aIsMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG
MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q
Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCE2hH0XoiqfoXQtONbUsN7xbc83OJ+z5mSO1ooKe+rCnU5gOq5p5/8
BDOrhzfbjkNYQKoQbzQyQWkFRPfjUL5p4UWVHe4NMVKmTfujs7NauMDnHwkmASo1
TMxdmJo3OfVm/VXs8RPcFp9DwjlonDwhePUN9vKv8f7wKQ/nAOWppt8waQz8yqQz
I47lP+p07m2gOv4aBzq+dF2ncM80qoRDoI+DUk6L2JduzT33O6BBBdObpus96isd
13oGFsnaLxD0ZNHTF6vHdbkm7vWi/pgnHpqW1I2eUde02SOJDg8KavePLP3YErAL
G9tMpXQjieGXhy9n1LeV03Q+9j1Rdwv/
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:15 2026 by rpki-client