
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json)
Hash identifier: KYe7A7gjtSD/ko3QbTerfblhv3RnpnSdz1VdxjKUcAY=
Subject key identifier: 36:1C:F7:CD:CA:61:72:BA:C2:D2:13:E1:99:40:51:75:11:B7:4D:3B
Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18
Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118
Certificate serial: 0CA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
Manifest number: 0C9B
Signing time: Wed 18 Feb 2026 18:09:16 +0000
Manifest this update: Wed 18 Feb 2026 18:09:15 +0000
Manifest next update: Wed 25 Feb 2026 18:09:15 +0000
Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: v5aV01b96XjPejRAD6OZa++Jc9XABZPQiLkCS9r9L3U=)
2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: 1qzItKWorYUUOmMK79qcFmJ05vCRXkNln617yx1hDtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl
rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118
Validity
Not Before: Feb 18 18:09:15 2026 GMT
Not After : Feb 25 18:09:15 2026 GMT
Subject: CN=6996004c-221a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:0a:cb:25:c5:3a:26:1d:4b:81:04:56:46:
f5:93:26:ff:7d:51:38:10:67:ae:1e:a7:19:ce:33:
dd:54:be:ba:fa:e3:56:a8:86:f9:7d:da:9d:f3:ef:
18:60:2a:99:50:cf:85:b9:a2:4f:d7:6b:35:2d:a5:
b7:3d:8e:48:05:ac:73:a8:f9:70:17:48:9a:92:a7:
18:54:15:3b:5a:4a:43:a1:e3:a2:e5:e1:4c:59:a8:
3d:d2:1d:03:8a:73:7d:7d:e3:df:80:0a:df:e6:a1:
fe:73:8e:7f:c5:40:60:3b:0d:05:92:59:e4:4a:b4:
2e:97:62:e3:3f:19:29:69:10:3f:50:dd:f5:a7:06:
fc:b4:4d:da:d6:2b:55:90:3e:59:db:b6:ff:f3:d7:
00:13:1f:82:89:44:3c:a9:30:10:5d:65:0c:a3:a5:
31:63:f0:ea:79:a1:0b:73:6e:6b:6f:00:14:18:26:
70:05:00:92:2a:f0:3c:be:ae:ca:e0:d0:54:9a:27:
54:a9:59:e3:c8:dc:5c:f8:6e:6c:42:0c:64:bc:da:
3f:90:e0:32:b6:f4:f5:45:c3:d4:1b:67:62:34:db:
25:8f:1c:46:99:bc:b3:e9:a8:33:cb:cf:81:11:96:
38:35:ea:ab:1f:b5:2d:c3:e3:b0:25:f8:fa:08:6a:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:F7:CD:CA:61:72:BA:C2:D2:13:E1:99:40:51:75:11:B7:4D:3B
X509v3 Authority Key Identifier:
keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:d9:21:5a:c4:75:8a:cb:1b:6d:33:1c:55:14:07:73:13:
88:e0:54:40:e2:41:5d:17:93:da:35:ef:9f:fc:65:8a:2c:6b:
cb:8c:98:48:aa:bd:aa:6a:fe:b4:2e:42:ff:b1:8d:a7:d9:1c:
7e:43:b0:30:87:7c:5e:f6:9a:f4:63:df:0d:6b:d3:d4:85:83:
61:ef:f5:ac:61:35:4b:14:d1:3c:4e:e6:7e:d5:f9:07:f2:e3:
ab:3f:9a:ef:8f:e3:43:4c:42:cb:74:8f:22:47:35:ef:7d:af:
15:ab:48:da:f1:f9:fd:70:04:30:01:31:3a:2e:58:78:1f:a6:
38:e1:73:b1:e3:ec:12:0f:dd:28:39:a8:cd:2b:bf:13:62:4c:
85:71:fc:77:3c:2f:05:3a:29:80:d9:c5:3e:7d:3c:32:e9:ae:
17:c1:b8:8c:ed:70:ae:43:8a:c9:e1:95:2a:cc:90:17:01:61:
62:7e:b8:2c:09:6f:0b:60:84:a6:87:ed:52:68:d6:b1:25:ac:
a7:a8:d9:04:ea:33:ae:a5:1c:5c:09:08:77:18:75:06:3a:fb:
56:f8:82:9b:2a:fd:f3:9f:18:0a:52:00:64:f8:40:d6:f5:1f:
a1:7d:71:e1:7c:fe:5c:55:26:81:57:38:7c:be:ea:e4:50:f3:
be:b1:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:51 2026 by rpki-client