
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier: dDhntzkAMc380S2SyS6yd0vibV3MCMnrFx2U0qjdUWM=
Subject key identifier: 57:C2:92:50:6E:78:5A:CE:35:1E:29:58:63:A4:1A:56:DA:DA:AD:58
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 3530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number: 3526
Signing time: Wed 18 Feb 2026 14:25:39 +0000
Manifest this update: Wed 18 Feb 2026 14:25:39 +0000
Manifest next update: Wed 25 Feb 2026 14:25:39 +0000
Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: rarThNXbHWfbRrqTuLb0RAFFrtzF7ZSk1acC0nmaVeI=)
2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: /C/TeYf+QYgaRTA9LTGKRIOjHZCHFtEST+Y+0lrs4kM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13616 (0x3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: Feb 18 14:25:39 2026 GMT
Not After : Feb 25 14:25:39 2026 GMT
Subject: CN=6995cbe3-0106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:24:02:7a:fd:75:98:4e:85:2f:b7:d1:36:
4f:a6:4e:df:08:50:d1:08:2c:47:3e:fd:86:c0:66:
e6:66:d8:b4:5d:52:7a:f7:92:d4:0e:04:bd:8f:66:
29:48:7c:da:e7:04:19:0e:0f:54:88:59:62:56:ed:
09:89:29:7b:a1:c6:f8:d0:a5:3b:5d:b5:43:a6:f2:
fd:9a:85:a5:84:26:8c:b0:b2:65:e3:10:6a:c8:a4:
a6:55:78:68:f1:dc:37:37:ca:6a:91:e2:ab:cf:0e:
46:2b:e4:68:2f:8e:3e:74:06:31:66:69:b3:9d:3a:
9f:72:19:24:59:7e:f7:4e:f4:0f:c3:70:c5:0e:b8:
d6:48:c9:44:6e:38:ca:a4:ec:79:29:aa:ee:83:2f:
90:31:8b:f3:8c:a9:6e:9f:77:49:82:63:b0:f5:37:
f1:ee:f8:62:97:b1:1e:69:fc:9d:06:d8:0c:95:2d:
66:34:8a:13:be:c0:94:62:29:c8:b3:45:d4:bc:61:
b6:b0:e0:db:5f:69:68:cf:b5:04:75:40:e0:b8:f8:
b2:57:50:df:4c:4a:6c:d0:a4:55:f9:a3:49:82:36:
e2:bb:00:81:68:27:a8:80:6a:74:36:4d:e8:0f:22:
d9:89:24:32:3f:7b:3f:03:80:6b:26:dd:e1:b1:6c:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:92:50:6E:78:5A:CE:35:1E:29:58:63:A4:1A:56:DA:DA:AD:58
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:c9:5a:81:2d:34:98:61:d7:a7:67:b6:e5:5b:d1:6c:5f:
8c:12:b1:43:55:af:40:fe:46:fe:10:4c:fe:89:fb:fe:76:c4:
62:e4:6b:8f:98:c9:b6:02:15:31:00:50:66:af:5b:88:fb:45:
73:63:b1:73:54:8d:23:31:67:7a:79:0b:3b:46:6d:64:62:a1:
04:96:ed:06:c0:48:46:2e:e1:82:4b:8f:cd:c8:19:a3:33:b2:
80:14:95:28:9d:08:7c:a4:54:7b:a0:f2:7f:61:1d:58:c8:43:
09:c4:f6:50:d1:47:60:3c:1e:fd:b3:92:ae:2b:43:91:7a:ec:
9f:d9:a5:e5:0d:62:32:27:d7:60:62:75:7a:41:0d:4c:60:25:
9f:31:c4:4c:7b:7d:ad:1d:11:29:f5:41:20:4a:95:0b:47:1f:
b4:47:0e:95:53:2d:ba:c1:1c:95:2e:21:bb:3e:5b:33:29:47:
1e:e7:d9:58:ef:6c:67:7c:b0:26:7c:dc:c0:e9:0a:0c:c4:29:
96:3d:a7:9d:9b:d2:3f:5e:cb:75:40:18:70:52:2a:fc:3a:3c:
31:81:0f:a2:c9:a6:0d:68:57:4f:2f:9b:43:75:1f:7f:76:3e:
81:11:c9:cc:1e:17:3d:74:bb:11:ac:05:db:ba:97:5f:fe:70:
d2:0d:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:22 2026 by rpki-client