
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier: v/DnaDubVd7cFGkvHSGrENM1EBSWnh4Kce19c6aN0fs=
Subject key identifier: 0F:D7:18:20:2C:59:BC:45:4D:66:30:CF:E7:6D:5C:AB:68:17:DA:EF
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number: 3546
Signing time: Wed 18 Feb 2026 14:22:06 +0000
Manifest this update: Wed 18 Feb 2026 14:22:05 +0000
Manifest next update: Wed 25 Feb 2026 14:22:05 +0000
Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: zPyfTU8z0t7DsB3dZHRU79lFL2rT6NBZlF4hf0llYVg=)
2: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: dcDioS0VFo6S9vVwz+paS1zd6YFHx5bsZVN3a7QsfW4=)
3: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: 1gkTF4crGWzpTEQnLV3friPjpJHknrP6i19dnfTKZhs=)
4: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: 0C6TlHkpuDCz4hvNzUcvUCrXDtcFtiPeiunaW4mmmk0=)
5: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: n9kveW6T0zGofNIWBVL2lz5XwTYiSjqFUg+Xl3iNCMQ=)
6: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: Q61bbCPssNF62XMkq5QJdqkEtUeKQLsoUnsJMBUa8ZI=)
7: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: wP5Do/J+7GR346S2KVvf1dpQZtkQwT1BPnhQO5L+JJ4=)
8: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: 5q/2MUPjpxwhlN6OCcanacRv9yZj3jDJtQjCybC3W8U=)
9: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: 5YdHJezTTAq6NbRIi4l4/6Fihe+icCcCreH0PZW2XgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Feb 18 14:22:05 2026 GMT
Not After : Feb 25 14:22:05 2026 GMT
Subject: CN=6995cb0d-b66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:9e:1d:41:17:2a:7a:07:97:0e:45:68:7f:
2c:fa:7a:7f:5c:0c:c3:a5:1c:84:65:64:20:ce:14:
20:b4:b1:d0:1d:0a:bd:08:df:6e:d2:87:02:3d:a8:
f5:40:cc:1f:91:c0:fb:fd:b0:7e:cc:3e:ca:b4:87:
d6:98:64:03:73:f9:c3:39:29:e5:d8:e2:8e:39:cb:
d7:c0:3a:43:87:e8:04:df:3f:fa:d3:ce:65:b0:8f:
d5:e9:c1:68:47:5b:ea:80:4e:ad:dc:3a:91:1b:7b:
c7:13:61:2d:62:ca:0c:80:b7:57:5f:2c:d9:73:c7:
5b:61:6c:35:6e:88:85:52:31:00:4d:1c:42:84:1e:
22:8f:77:b0:ff:eb:8f:ca:fc:a7:20:84:32:47:5c:
fb:ff:79:e9:52:d6:e5:26:3b:72:f3:65:b7:a4:62:
bf:64:91:e2:76:b3:61:da:94:92:78:ab:31:cc:c7:
82:b5:02:d0:b0:6a:e5:94:b1:6c:17:19:42:35:fb:
45:fd:69:49:bd:f6:5d:34:ff:21:1c:bf:51:3a:a1:
a7:3c:c7:58:06:b4:d9:84:89:3a:10:b8:22:2b:c9:
6d:91:78:b6:3f:9e:b7:fb:c1:86:24:88:97:19:ff:
04:ac:ea:7e:5d:88:1a:e1:ae:15:69:dd:4e:f7:f9:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:18:20:2C:59:BC:45:4D:66:30:CF:E7:6D:5C:AB:68:17:DA:EF
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:9d:2f:c9:1e:21:fe:a7:31:3c:1a:3f:c8:03:55:9e:12:
6e:ab:cc:6b:e1:2a:ad:6f:94:2c:53:bc:6e:c2:d4:a5:c4:8e:
f6:4f:88:75:5d:3b:fb:00:01:85:52:6d:b5:c1:22:d6:a1:51:
52:fb:f5:94:de:4c:87:15:1a:8b:cb:32:eb:bf:8b:35:d7:18:
19:94:f0:41:4e:52:06:a7:38:88:b2:eb:4f:fb:52:4a:e3:af:
23:b7:ad:51:95:6f:1d:41:e7:10:e4:36:96:68:79:38:05:d2:
7c:11:d0:38:93:b3:72:16:a5:ae:c4:f1:44:87:a8:78:7b:3a:
b8:99:b7:71:32:9e:9b:54:e5:4a:14:f2:88:17:14:b7:0a:fc:
f0:68:49:08:a7:50:0d:29:06:73:77:54:ec:e9:05:f8:f8:59:
ac:d5:41:dd:14:c6:2a:5b:8f:da:e1:2f:6e:d5:27:c9:2a:1a:
e8:01:cd:00:07:c8:f8:14:86:8d:2b:aa:2f:6a:ad:4a:36:4e:
f4:c2:05:0a:30:75:21:33:2f:85:4d:01:ea:c3:0d:41:2b:af:
2c:f2:a5:34:68:0e:2c:21:76:9b:69:11:a9:89:e5:84:fd:0e:
00:f1:c7:c0:df:f8:24:5b:be:4d:90:7e:44:e7:bf:f5:71:33:
c9:14:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:04 2026 by rpki-client