
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json)
Hash identifier: sejbPTra/sMzIaBeAS2hWVyO5dQXgCU0zlYDNmNWdGg=
Subject key identifier: 2C:32:8E:65:7A:41:D3:7D:7F:E3:69:0C:3A:9F:B2:23:8B:59:8F:8E
Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01
Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
Manifest number: 0236
Signing time: Thu 19 Feb 2026 01:19:42 +0000
Manifest this update: Thu 19 Feb 2026 01:19:42 +0000
Manifest next update: Thu 26 Feb 2026 01:19:42 +0000
Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: GSeuKIKY6Cx4RVE04s7x73/DoaHuiwvr6VBakOn0vTc=)
2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: vOOxk/wACi5vye03Jp84UhlJ9c1XFIWjF9wuLbozYvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl
rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001
Validity
Not Before: Feb 19 01:19:42 2026 GMT
Not After : Feb 26 01:19:42 2026 GMT
Subject: CN=6996652e-a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:3c:43:86:c9:fc:92:bf:57:55:8e:a2:20:
47:fa:74:9a:55:11:b7:34:a7:79:93:22:f6:14:af:
8c:3e:8f:38:67:54:f7:ad:77:a3:df:b8:a7:fa:ac:
cb:7e:dd:76:5f:f4:8d:27:97:c0:b9:22:32:7d:eb:
d4:42:50:88:3b:88:cb:ce:48:fc:b9:1e:60:76:81:
47:81:ab:df:d5:1b:b6:c4:d4:6b:f0:b2:52:c2:11:
81:37:b0:2c:b3:12:26:4b:5c:aa:d9:17:c9:08:6b:
d4:cb:48:88:5b:1c:21:7d:a7:73:0c:8b:ea:50:4b:
19:79:85:cc:ad:79:95:f6:eb:05:53:e4:13:23:10:
39:5d:ee:76:26:b0:e6:28:11:44:8d:60:00:af:1f:
64:0d:50:76:e2:1b:0f:0c:db:f3:c7:ac:12:c8:7d:
57:63:a3:d9:01:8b:45:47:9a:6f:0b:11:7e:50:1a:
ff:2d:a9:cc:45:34:17:41:46:6e:5e:03:5f:ac:99:
84:ce:f2:ef:77:95:b0:5c:f3:3c:9a:f6:32:4c:2f:
8c:54:2e:65:55:ef:1b:6c:3e:70:4a:54:f8:8a:a6:
4a:81:2e:1f:70:02:27:1e:ad:64:91:bd:ae:6e:1b:
94:b6:d5:a0:3b:ab:3c:8c:e6:da:67:f2:52:8e:2c:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:8E:65:7A:41:D3:7D:7F:E3:69:0C:3A:9F:B2:23:8B:59:8F:8E
X509v3 Authority Key Identifier:
keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:b8:6d:c0:f0:ae:4e:65:8c:38:aa:4b:44:38:ed:8a:72:f4:
de:7e:b5:1e:bf:1a:2f:39:f2:84:d9:84:e2:7f:5c:15:aa:e1:
eb:b0:aa:fd:6f:6e:88:35:26:85:89:66:ce:7c:66:49:c6:6d:
f0:d2:33:65:6b:d0:03:ac:f9:28:6f:b6:01:2e:88:60:08:bc:
3a:aa:ed:93:ed:48:35:ef:4c:76:29:0a:5b:a8:f0:71:46:7d:
bb:c0:4e:a9:85:e4:32:33:02:25:a9:01:b0:b0:e1:97:dc:51:
dd:dd:f8:d3:6e:c7:3b:b9:88:8b:a9:5f:12:83:e6:be:be:4a:
5d:4f:7c:a0:af:55:4c:be:57:79:cc:17:9a:50:cb:46:d2:58:
f9:5e:d6:f7:2a:5f:7e:64:b2:3a:c8:d6:f9:f0:88:f3:a5:cd:
34:47:68:14:b2:aa:ad:ed:45:f8:c9:c1:2c:7e:53:e7:b3:54:
80:76:aa:31:49:d0:2e:1d:3e:7d:2b:e3:20:40:90:4c:5e:17:
b7:32:ea:ee:6b:a5:b6:9d:b2:3f:d0:39:4c:16:8c:f6:f3:0f:
15:ac:17:9a:73:5c:33:0c:05:49:bd:7b:e8:3b:ec:2c:97:59:
10:f1:8d:f7:a6:e4:fd:15:e3:08:f2:2e:88:a1:73:d0:aa:22:
48:9d:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:48 2026 by rpki-client