
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier: 1BgvQK3T0j9VKOCafZSUCh658i+rLkdaF2lD34D/0LY=
Subject key identifier: EB:F2:EE:84:11:0E:98:FB:6B:0C:91:9B:FA:08:9F:EC:D4:4D:C1:CA
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 3636
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number: 35BB
Signing time: Thu 19 Feb 2026 04:11:10 +0000
Manifest this update: Thu 19 Feb 2026 04:11:09 +0000
Manifest next update: Thu 26 Feb 2026 04:11:09 +0000
Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: eWF3CCzbe6UJseQFAMQVv4o7GCWOieuvlt1Sp3l28ZM=)
2: 3229DF800D4411F18F949964113D8C67.roa (hash: BGE2+mb9Le+DQtYnlRkZZN6pA41iPpHgbJy8duqfryk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13878 (0x3636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: Feb 19 04:11:09 2026 GMT
Not After : Feb 26 04:11:09 2026 GMT
Subject: CN=69968d5e-5b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:5d:2f:9c:3f:7e:d3:8c:02:53:04:5f:c3:
8e:97:7f:17:0e:2b:90:bc:65:31:5b:2e:04:5d:a9:
3a:38:6f:e4:eb:43:f2:97:33:0d:71:4c:69:f6:91:
3e:ff:97:31:31:22:45:f2:2c:12:18:61:6f:e6:76:
3a:17:24:c5:44:e7:c2:11:c3:df:3a:0e:77:24:40:
3a:7a:df:c0:73:73:f6:69:84:e5:e8:15:27:d8:59:
e5:20:21:66:91:25:da:f0:22:59:3f:ca:be:4f:54:
c8:18:e1:a6:60:fe:81:0d:c4:5a:8c:9c:f4:92:b4:
38:0d:d6:b3:1d:a1:3d:57:cf:82:ad:49:1b:79:99:
1b:9d:a3:66:2a:cd:40:7c:99:da:fb:35:3b:43:72:
8c:31:98:b0:51:5a:73:06:e7:77:74:4f:fe:ab:de:
b4:5f:e3:97:0a:06:6e:b3:04:98:f2:7e:ff:46:31:
d7:67:ec:d0:d6:58:54:de:53:c0:fc:17:e4:71:17:
aa:90:ed:e2:34:ff:2f:3b:9a:86:56:ba:bd:91:4e:
e3:2f:9e:7f:b7:fb:8d:6e:dd:bf:ed:45:c8:33:3c:
8d:00:e1:69:93:1f:67:e8:3f:43:71:ce:95:e6:50:
49:a6:8a:bd:38:3c:fd:26:06:ad:86:48:b4:92:25:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F2:EE:84:11:0E:98:FB:6B:0C:91:9B:FA:08:9F:EC:D4:4D:C1:CA
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:65:c5:42:2a:ef:fd:14:c8:78:5c:f7:12:dd:d5:fc:f4:42:
87:47:2e:17:ab:0c:93:81:be:50:6a:48:2e:97:e7:fd:04:43:
fd:1f:91:50:4b:1c:84:26:36:68:db:f2:d0:0a:ea:11:04:1e:
f9:12:73:9a:7a:00:c2:5d:e8:fa:7c:73:d3:36:94:73:24:f8:
3e:4d:6f:cd:13:f9:7a:2a:b3:fd:c5:be:a4:43:80:eb:b2:43:
19:77:66:57:17:69:bb:de:35:56:cb:4a:3c:a3:38:55:e6:7b:
a8:af:00:98:88:f1:bf:b1:75:41:27:83:30:2e:63:ce:29:13:
a1:61:5a:26:95:37:ec:5d:29:d3:50:a4:ee:32:01:4c:7c:9d:
94:7f:a4:88:29:c0:6b:7f:98:05:c1:0b:79:2b:5f:c3:a3:61:
20:85:54:70:37:92:67:eb:25:49:a4:dd:05:ff:3f:68:50:2b:
d0:f6:79:00:b0:3d:80:1e:81:d2:3c:e1:3f:e9:a9:03:43:d2:
c7:1f:ab:6a:0f:c6:70:09:b0:4d:0d:1d:8c:3d:44:72:b3:01:
80:7f:80:b2:93:f5:c5:e9:9b:f5:c5:24:66:cd:2f:69:64:61:
87:0f:8d:08:6f:a1:56:6f:89:6c:2d:84:d3:6c:72:7a:22:f1:
36:da:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:03:22 2026 by rpki-client