
$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json)
Hash identifier: XqaufYte1h5v2bPDXfz6qwhEBHOqx3eJi4OZRhFGOM0=
Subject key identifier: 55:AE:E7:B6:B6:CE:D8:11:78:16:F9:91:A3:F9:E4:28:BB:8A:68:58
Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Certificate serial: 040F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
Manifest number: 0409
Signing time: Wed 18 Feb 2026 23:41:40 +0000
Manifest this update: Wed 18 Feb 2026 23:41:39 +0000
Manifest next update: Wed 25 Feb 2026 23:41:39 +0000
Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: 2GcwlPdwR/alZUMQPFBKK7OqdqyFgCXEQ0IPFZ+FsW8=)
2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: 3k13Zb4rUCPiQVhmHXmV79sBuRx9W6om0fkw2CRWuLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl
rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Validity
Not Before: Feb 18 23:41:39 2026 GMT
Not After : Feb 25 23:41:39 2026 GMT
Subject: CN=69964e34-c22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a6:ec:0e:93:8f:de:23:be:36:12:24:8e:18:
7c:5d:81:b2:53:c9:6b:8b:c9:26:27:ed:94:3e:5b:
00:ee:99:c3:06:31:af:a3:75:64:6f:9a:93:a2:92:
6a:ad:9d:a1:e1:00:6e:70:fd:b6:9b:90:f4:35:c7:
c6:96:b2:64:86:9f:3e:1a:31:8e:d5:f8:28:b4:23:
3a:42:d9:2d:77:6e:14:cd:45:f2:d4:bb:8a:fa:a4:
68:76:d0:93:de:1d:c1:ab:39:cc:81:4f:b6:2f:d2:
cb:ee:e4:77:ca:17:d8:3d:8c:a5:96:73:43:1c:f9:
8c:31:30:97:b7:4b:be:6c:6d:ad:50:d0:30:97:c6:
d0:f2:ea:f3:76:d7:fa:92:1a:f3:fc:05:78:73:6d:
e0:30:fe:42:e3:ce:c3:2b:87:6d:a9:e7:f9:d9:f5:
f7:c9:ab:4f:b5:1c:ab:b9:06:d2:57:08:8a:9e:ef:
fb:eb:bd:43:01:bd:ed:8b:aa:79:4d:f4:c4:cb:44:
41:58:1b:20:8c:47:32:63:2f:32:2d:65:9b:fe:d3:
5d:fb:a6:dd:95:2a:bf:97:2a:36:67:34:9f:cc:78:
24:96:6e:1d:5d:3e:22:b6:35:48:45:08:fd:1d:20:
7a:8a:61:35:6e:8b:d9:ef:84:b7:db:98:42:ad:29:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AE:E7:B6:B6:CE:D8:11:78:16:F9:91:A3:F9:E4:28:BB:8A:68:58
X509v3 Authority Key Identifier:
keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:7b:b3:24:7e:70:b5:16:34:45:75:de:31:31:e0:7f:10:72:
03:75:6b:f8:d3:9f:b7:ac:13:a5:a0:40:87:c4:cb:54:f0:fe:
22:91:42:b0:78:12:79:f2:4d:26:81:b0:25:54:dc:9f:5d:83:
c3:b6:fc:a2:c5:6f:bd:f6:65:cb:88:b7:2c:5f:eb:3c:13:b3:
94:3c:41:e9:00:b4:f0:c9:ba:fa:b1:97:53:3b:16:b9:f3:eb:
d9:f7:fe:4c:12:01:b7:7a:df:91:bc:4b:d3:af:59:50:77:04:
bc:28:0b:9a:6c:bb:f7:8a:9e:4a:82:cb:48:ae:f2:cb:8b:86:
9b:cf:a5:b5:52:51:4e:78:c7:0f:b1:cb:d6:30:a3:64:37:97:
5e:be:6a:24:4a:fd:c7:23:6d:e2:50:dd:38:94:51:5f:89:82:
4b:83:2e:ce:cd:13:a8:86:95:94:5b:9f:3f:7b:fb:8c:b4:fa:
c7:57:5e:a4:66:40:a7:21:1c:a8:50:a0:eb:8f:8a:cf:7d:f1:
b4:02:65:3e:ce:64:67:b7:33:19:6c:4b:8c:ee:9c:c1:04:4d:
f5:95:25:db:57:91:96:5c:4d:1e:2b:38:57:26:fe:35:6a:b3:
e3:af:65:cc:70:e9:0e:a1:00:91:5b:06:b5:b2:d5:75:bc:94:
f6:f3:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:19 2026 by rpki-client