
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft
File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json)
Hash identifier: JFHFVP+oQ4MBLTtlUyPOxmkhT4hOqNrvW/UcOrIffuA=
Subject key identifier: E9:64:F7:9A:2D:B1:88:42:F9:E7:07:D6:0B:F9:AF:F3:4D:29:2A:51
Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B
Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft
Manifest number: 0101
Signing time: Thu 19 Feb 2026 04:37:55 +0000
Manifest this update: Thu 19 Feb 2026 04:37:55 +0000
Manifest next update: Thu 26 Feb 2026 04:37:55 +0000
Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: bYY+P4pC1DyUw7E5Wf5piYPrbJxcKQrN30Up3nOr4kI=)
2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: lCc1zW/fNZMoF/rqNvP9IYJzd9fmXkKhaJc8t7GMllI=)
3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: GV87QmCbUO6E5Ecc2vWq6Yxzh0kKETb8AYCibjv61ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl
rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B
Validity
Not Before: Feb 19 04:37:55 2026 GMT
Not After : Feb 26 04:37:55 2026 GMT
Subject: CN=699693a3-5a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:a8:1e:91:b5:ea:63:01:27:0b:9b:95:34:
6d:8b:2f:1a:1e:7b:4d:f8:30:28:f6:4e:c5:34:59:
43:bd:4c:8c:ca:a8:56:03:a8:5c:9a:e8:cd:f7:68:
c5:56:a4:0a:f0:ba:1f:bb:7b:47:dd:ec:64:d6:da:
30:0a:14:d2:40:fb:1d:54:6c:75:a1:e7:21:79:fe:
54:6b:4a:87:4a:07:19:c9:98:e0:51:7c:b3:06:b0:
36:ef:d6:5b:ac:38:87:56:1f:66:4d:a6:8d:0a:dd:
db:4e:70:fe:8e:4c:28:03:b2:11:b9:c1:02:a2:4a:
4f:53:33:ab:88:8f:c1:c8:9f:2f:73:1a:ff:a9:66:
dc:7e:35:03:33:39:85:3d:7b:45:43:e8:03:b1:cb:
9c:75:6e:10:29:ff:b5:d5:cd:0a:2a:81:3c:7a:98:
d6:54:e8:9e:ee:50:80:a6:f5:51:62:9c:f8:ee:c5:
40:56:5c:a1:55:7e:37:e0:bc:71:a3:2f:88:13:02:
2c:d2:db:4f:6e:82:dd:67:83:65:f3:80:ce:a6:be:
c2:27:18:cc:ff:f2:10:55:88:01:44:9c:cb:61:29:
c5:2a:42:2d:47:f1:93:c4:a6:ff:33:e2:84:6e:f1:
c3:69:39:c0:eb:69:6c:11:93:40:69:c9:8b:c4:45:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:F7:9A:2D:B1:88:42:F9:E7:07:D6:0B:F9:AF:F3:4D:29:2A:51
X509v3 Authority Key Identifier:
keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c7:cf:fa:b0:80:3b:db:4f:dd:98:a5:50:20:1f:e5:d5:9c:
d1:01:f0:d9:cc:64:0f:8d:14:1f:fb:91:85:d7:1a:40:fa:ce:
e3:7e:aa:52:95:16:21:16:da:2f:3b:2f:58:5f:67:28:40:53:
23:b1:d3:c7:a0:55:2a:20:51:8c:65:a3:bc:3a:8c:ca:cf:0f:
64:15:dd:20:b1:39:ad:89:b8:92:27:7b:0e:14:be:2b:5b:16:
e5:e8:f0:63:1f:96:f9:a7:24:ee:e5:18:57:8f:da:13:81:d3:
44:bb:e6:ad:db:a9:75:32:49:93:88:0f:08:86:b8:ce:7b:02:
a7:94:56:19:0b:b7:7a:45:47:9a:6c:0f:b8:79:db:af:02:bd:
e9:7a:c7:70:d3:10:37:41:e6:ef:94:bd:b6:9f:38:48:fd:e9:
53:e5:5a:88:23:29:d2:5a:e8:9f:94:9e:6a:26:9d:28:8f:4b:
64:44:03:84:50:e9:bf:7a:39:13:07:bc:8f:74:26:0e:c1:b6:
de:e0:1d:d2:7a:61:53:66:db:fb:8c:28:4d:ee:34:27:c7:7a:
82:5c:17:99:18:ba:bb:f3:09:f9:0d:f3:c3:9c:71:04:53:47:
d1:4f:33:b2:12:d9:2b:66:00:0b:ee:90:5c:2c:aa:9e:81:a9:
54:11:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:27 2026 by rpki-client