
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier: TzN70xln8mFAzSBgLWqD09FqeCxcHrurZ6CgvOWwCfg=
Subject key identifier: F9:4A:D2:BE:6E:9F:E3:07:2D:CB:02:CD:B7:2A:BF:A1:E5:20:CC:B3
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number: 0225
Signing time: Thu 19 Feb 2026 01:28:57 +0000
Manifest this update: Thu 19 Feb 2026 01:28:57 +0000
Manifest next update: Thu 26 Feb 2026 01:28:57 +0000
Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: gJ8kKKDUm7ogYGCJWStIbBLm196Kg0i05Age6vidWpE=)
2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Validity
Not Before: Feb 19 01:28:57 2026 GMT
Not After : Feb 26 01:28:57 2026 GMT
Subject: CN=69966759-200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:2b:f0:e1:50:23:e6:8d:d2:3e:8f:73:80:
8f:41:8a:b0:ff:45:4f:97:3f:7f:53:38:e2:3c:c4:
e0:b7:58:66:12:1c:75:e8:d9:1d:93:a0:6e:01:d0:
50:fe:d1:24:b9:77:ef:19:fa:c6:d4:06:00:a5:1d:
06:88:80:96:0d:6a:0c:9d:e5:08:ca:d5:1a:fc:e1:
f3:61:44:ab:f8:a2:c2:46:19:88:5d:c9:31:f3:01:
90:db:fb:54:59:2f:d3:e2:b1:7f:e1:5a:73:97:d6:
7d:de:73:4b:db:b0:a7:d3:9b:22:d1:85:26:4f:e9:
1e:15:47:7b:9c:23:23:84:a4:ba:ae:57:f2:10:c7:
1e:c8:85:c7:2b:82:98:3d:96:cf:41:90:7d:91:b3:
c4:e4:f5:bc:76:00:df:be:fe:36:25:65:78:df:73:
53:47:01:8f:c0:03:4c:bc:6a:2f:6f:f4:dc:80:ce:
ea:83:a6:fb:a4:a6:61:3f:80:06:40:3d:a8:5a:34:
e0:d3:f6:be:5a:03:97:07:f3:56:32:0a:b7:fd:37:
74:02:62:9b:f5:51:30:d9:f8:5e:e5:fd:a8:3e:e2:
52:79:02:63:17:28:0d:08:4c:cd:9d:74:3e:6d:ca:
46:bc:bb:90:fa:7f:d7:45:85:2d:d3:c5:bd:66:f1:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:D2:BE:6E:9F:E3:07:2D:CB:02:CD:B7:2A:BF:A1:E5:20:CC:B3
X509v3 Authority Key Identifier:
keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e0:2c:0e:53:c3:58:28:06:cb:73:27:9b:a1:52:f0:d6:d7:
46:fe:6f:49:8b:23:9a:b5:44:83:1d:0f:9a:9d:b1:a2:76:69:
7d:57:82:ad:f1:12:3c:9c:db:c8:03:83:9d:46:00:bd:e3:7c:
ed:99:79:e7:22:7b:0e:5c:fd:3d:bf:3d:f5:27:81:e1:54:c1:
c8:8a:c1:08:c2:f3:86:4e:ec:18:71:9f:af:c9:43:c6:15:d7:
7b:43:b1:a0:4f:ca:78:f5:16:b4:2b:2d:e6:4f:94:bf:cd:7a:
f5:5e:7a:2b:9f:75:2e:6c:37:5e:36:73:23:4a:21:e2:db:ba:
83:60:12:76:d7:1d:64:47:a8:7b:ba:d1:19:26:7e:e8:bb:ce:
a5:33:4a:6a:1a:34:20:e7:c7:b2:e4:a3:e3:45:0c:71:6c:e2:
1d:88:d6:00:ab:6c:15:31:ab:8a:5d:c7:74:98:40:4a:21:85:
15:a4:08:5a:63:35:48:30:38:6a:53:fa:0a:de:3f:d9:f3:21:
a8:9b:82:8f:55:66:92:76:98:92:05:35:46:fd:cf:e7:6f:e7:
97:fa:a6:1d:48:fe:52:36:93:83:21:26:ae:2f:df:1e:ca:e0:
9e:e0:f1:d7:96:e1:f7:89:3f:ab:75:3f:ad:f7:6b:07:e0:e8:
45:6f:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:51 2026 by rpki-client