
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json)
Hash identifier: DiLOyPB7n0DqaWTnWLuRCFpfCxjWSBtYDLR5dADLxTw=
Subject key identifier: CE:14:94:8F:47:D9:0B:9C:1B:32:B7:D8:7F:71:50:0C:E5:1E:3F:F2
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 0426
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
Manifest number: 0421
Signing time: Wed 18 Feb 2026 23:35:40 +0000
Manifest this update: Wed 18 Feb 2026 23:35:39 +0000
Manifest next update: Wed 25 Feb 2026 23:35:39 +0000
Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: urTkfXszqL9yMXCDt8C+WmRwf1zVwhsIjz5KivxZQ+8=)
2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: p2rd5X9PRaHj3dg5SJAK0M8GBgiGK7ul3HPfe5PMkz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1062 (0x426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Validity
Not Before: Feb 18 23:35:39 2026 GMT
Not After : Feb 25 23:35:39 2026 GMT
Subject: CN=69964ccc-9de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:9e:4d:06:f6:9f:3a:28:99:35:f7:c4:e3:
72:89:3e:5d:8d:41:1a:f3:be:4c:d9:ca:30:45:67:
78:45:c6:06:54:48:a6:eb:df:6e:93:16:f9:9c:e6:
2e:2b:cf:80:ab:af:1a:77:0b:68:8c:8c:d7:77:ea:
fe:6d:32:47:56:1a:ae:87:0d:ee:51:da:9e:27:9d:
fd:5a:a0:70:31:e0:48:6d:41:11:02:6e:5c:2a:99:
45:ea:22:36:7c:01:a8:ff:9f:0e:10:3a:22:ee:77:
8d:40:e0:00:48:28:52:c0:14:a1:de:2d:75:ae:0c:
1e:66:dd:e1:ea:08:8c:55:30:77:77:57:0b:cb:c6:
21:25:8b:bc:28:a1:46:f9:39:ee:d2:63:d7:17:8f:
88:1a:11:72:6a:32:dc:a3:b0:e8:3c:e2:99:6e:f3:
60:7f:45:dd:43:48:e6:7c:f8:86:bc:4d:55:1d:5f:
33:27:f6:f8:02:5e:a4:a8:02:64:e9:76:73:b1:c6:
d2:28:34:3c:f0:38:bf:95:cc:43:62:c7:43:39:9a:
59:7f:60:bf:1e:10:ae:76:8f:7b:e3:e5:08:54:2f:
7b:d8:13:d9:18:a0:7b:87:c9:e8:dd:2e:d9:b7:d1:
87:a1:49:be:08:75:f6:d4:99:23:73:f5:53:a6:f3:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:94:8F:47:D9:0B:9C:1B:32:B7:D8:7F:71:50:0C:E5:1E:3F:F2
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:90:7d:bd:1f:08:6d:35:d1:ca:d6:20:24:e5:ce:1e:0f:59:
88:21:45:46:c4:df:ba:d8:a9:a0:79:29:d0:87:c4:05:de:57:
62:ca:ab:1f:78:ad:2c:e4:af:a5:24:df:5b:2c:85:fe:aa:49:
bf:67:db:66:06:f4:22:9b:48:ba:7a:5f:34:73:6a:9a:8c:1f:
5c:15:98:a6:61:be:ed:21:7b:66:a4:b8:a9:96:a1:e4:ff:99:
20:fd:5e:8b:45:b6:cf:73:b3:d0:c0:42:25:e1:1c:dd:58:7e:
d6:d7:01:27:61:a0:a1:bc:af:e5:41:19:0b:07:6c:e3:83:0b:
49:2a:f1:9c:d3:ab:62:fc:5e:ae:19:61:9f:89:02:8e:17:48:
da:25:f2:83:94:d0:4e:e3:4c:40:bc:0b:e7:6d:8a:c3:50:02:
f0:59:7d:67:37:56:2e:cb:24:12:16:af:16:f4:3f:6e:0e:77:
d0:44:38:53:35:e3:9e:57:50:de:64:52:e4:03:71:19:bf:07:
7e:90:83:58:b6:ef:3e:7a:a3:b5:2d:bd:70:d4:c6:e9:e8:64:
b1:7e:6f:53:07:ab:29:48:fc:dc:35:ef:e8:56:e7:5d:9e:cc:
c9:ad:e1:b9:0c:0e:ae:cb:4c:49:af:ab:da:58:f7:57:24:49:
32:a9:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:39:23 2026 by rpki-client