
$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json)
Hash identifier: 3Iox41DH2KLl7m8tbgycvB/jvVj901e451XcV2JpROw=
Subject key identifier: 1A:EC:C5:2F:7A:D9:3E:E7:2D:78:B8:29:E8:89:A6:8A:1D:BF:FC:A8
Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
Manifest number: 04C4
Signing time: Wed 18 Feb 2026 23:11:19 +0000
Manifest this update: Wed 18 Feb 2026 23:11:19 +0000
Manifest next update: Wed 25 Feb 2026 23:11:19 +0000
Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: D8Oprm8OxfqgbsdxHd68Qd/Th/YDCzs5QHTxse4VDlo=)
2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: M9+vY+hFN94HdKE9FI6ZDTlRjfa1IPzz7IeGhvfQshE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Validity
Not Before: Feb 18 23:11:19 2026 GMT
Not After : Feb 25 23:11:19 2026 GMT
Subject: CN=69964717-6d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:91:ab:00:72:f7:c2:53:f7:3b:9f:dd:f1:
51:5a:e3:69:5f:68:b8:ce:5d:dd:3f:0f:d5:64:99:
95:cf:9f:6f:fb:32:f3:8f:5d:b2:7c:09:6a:d4:84:
cc:ac:17:aa:0a:7a:0c:3d:01:42:17:44:8f:9d:5b:
b3:e5:23:04:52:4b:bf:a3:83:ae:eb:ae:93:a6:3a:
f9:ee:d9:ff:e9:ef:a8:58:61:64:11:5a:23:3f:90:
95:e8:f9:ec:1a:58:6c:c7:19:a9:0d:21:f9:5e:e8:
f3:69:48:c9:c1:56:a0:2f:67:6e:3a:86:b8:33:61:
87:5c:c8:b4:18:9f:50:3c:54:f9:95:d5:c2:29:ac:
89:5f:40:43:a0:18:a8:fd:a2:98:fa:ed:64:6b:41:
c6:9a:27:fb:b2:33:91:53:de:fc:bf:6a:10:b3:16:
ff:6f:9f:bb:4a:06:f8:33:56:c7:75:ce:18:39:8f:
97:6f:76:3f:f9:cd:cd:56:eb:23:be:8f:d0:d7:42:
17:16:5f:b8:af:13:5a:b5:c7:20:b8:ac:ba:3a:2a:
2a:60:17:a0:54:47:fd:52:e0:09:84:fd:e5:cf:dd:
a2:bc:48:94:8f:26:d3:88:0f:d5:d5:d3:d0:1e:9b:
52:c5:7d:36:76:52:c9:29:7b:6c:37:56:3e:89:6a:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:C5:2F:7A:D9:3E:E7:2D:78:B8:29:E8:89:A6:8A:1D:BF:FC:A8
X509v3 Authority Key Identifier:
keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:f4:05:3b:34:2b:85:3a:33:38:e5:31:a6:5e:6a:cd:ed:
9f:e4:f0:71:2f:13:29:d7:3d:36:12:6f:c4:f7:73:cd:63:3d:
2d:00:fc:64:01:ae:0a:24:83:a3:9b:8f:e0:6f:20:10:91:8e:
3d:53:3d:a6:81:8b:ff:0b:c6:64:13:2b:a0:52:6b:86:15:de:
e8:03:98:db:05:71:41:a1:59:55:95:c6:83:ea:45:14:22:41:
77:43:75:04:b5:62:b8:fd:d5:18:a2:1b:1b:12:64:39:cb:b6:
09:2c:4e:fa:2c:c9:bd:49:18:24:ec:3e:81:27:4b:68:bf:fd:
91:0a:11:16:38:20:29:4d:b0:89:3c:24:35:24:e3:d8:a4:b2:
67:24:9b:f7:57:85:31:06:86:91:6c:5a:54:c4:c8:d8:7b:59:
ec:a9:78:fb:9a:cc:0f:28:26:b4:9b:1f:52:56:ac:9a:a9:f4:
16:89:76:28:d9:39:21:c9:b2:84:ef:2b:8a:f5:fe:46:43:20:
57:60:be:07:fc:96:ee:0e:f7:07:9d:5b:3f:2f:8b:3c:86:e8:
5f:f2:97:0b:4b:94:60:5c:e5:e2:94:ed:35:a0:5b:53:cf:79:
7a:be:45:e9:2d:ce:1d:23:60:1b:ba:fc:b9:31:a3:7a:32:3e:
27:94:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:15 2026 by rpki-client