
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json)
Hash identifier: U+8vT+sjtOkp2PiKrSfw6ZXUpAfWkNfBdNfkdfonhmE=
Subject key identifier: A1:87:C7:10:A7:3E:D2:C6:09:67:A7:0E:56:F4:54:2B:21:49:BE:20
Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Certificate serial: 03E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
Manifest number: 03E1
Signing time: Wed 18 Feb 2026 23:46:22 +0000
Manifest this update: Wed 18 Feb 2026 23:46:22 +0000
Manifest next update: Wed 25 Feb 2026 23:46:22 +0000
Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: DKsCc1DKTKkTHPIBfTGKnx+Ie1/0X438JAqlgE+6wok=)
2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: +Bl3HZaSUARxCjCCmP0hzFEV+gWprtcPkCkk01ypk3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Validity
Not Before: Feb 18 23:46:22 2026 GMT
Not After : Feb 25 23:46:22 2026 GMT
Subject: CN=69964f4e-403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:f1:49:bf:59:b7:d3:a4:ea:b6:ff:90:c1:
36:b0:a1:4d:54:8d:f0:60:99:f3:05:63:fd:65:61:
34:e5:f5:ba:58:86:6d:76:63:6e:80:ec:73:6c:fd:
40:13:01:c7:8a:1d:48:21:da:59:49:e1:ca:9f:61:
69:29:bc:56:08:f8:51:cc:74:6e:f3:25:d2:23:fc:
58:a7:72:3a:88:89:6c:b4:bc:be:34:64:e5:14:b4:
44:1f:88:ff:af:d7:d5:d6:1e:d6:f6:0e:97:d3:c8:
f5:da:63:8f:49:2e:6a:41:f3:32:e6:85:29:47:f9:
d2:4e:03:91:23:89:c3:ff:46:6b:9a:c3:74:11:a9:
dc:7f:0e:1b:9a:e3:5f:09:00:fc:e6:f0:a6:59:97:
1c:e7:78:5a:cc:e6:87:b6:2c:d8:52:a4:bc:7e:80:
97:82:47:e9:ac:11:ee:91:28:f6:4e:92:34:d8:b9:
eb:91:de:23:e5:00:47:45:3f:ee:3b:c8:c1:a2:20:
29:b2:c1:0e:8b:7f:a8:ec:4b:f9:a2:4f:e2:82:fd:
d5:88:02:0c:5b:03:a2:6c:10:f2:78:6e:ee:5e:15:
13:88:26:35:90:1f:51:c9:56:d5:2b:cf:f7:68:ca:
9b:68:d0:a3:9a:bc:f5:93:6f:41:bf:b5:d7:d9:d7:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:87:C7:10:A7:3E:D2:C6:09:67:A7:0E:56:F4:54:2B:21:49:BE:20
X509v3 Authority Key Identifier:
keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:2b:bb:84:e5:a7:d4:88:1c:9b:00:8d:c1:e7:4e:ce:3c:
85:bb:1b:af:40:c1:42:06:f2:08:37:09:53:49:ef:da:6a:ad:
d9:0e:15:da:ef:20:6c:e9:bf:35:04:34:75:0a:a8:7a:a4:46:
8b:a3:25:81:3b:c4:9c:66:ee:ec:97:f4:19:45:de:30:9a:74:
88:f0:86:c1:52:03:f0:ea:06:3b:87:3a:c4:87:69:5b:fa:30:
f1:52:9a:ac:33:e6:c9:6d:73:5f:8a:5e:65:84:21:35:cb:0b:
16:75:ff:11:08:f9:12:d8:05:6a:01:8e:0e:16:99:25:66:17:
05:a7:2d:e9:24:79:54:c6:8b:9e:ea:77:6f:47:2a:a2:ce:14:
48:f6:c3:79:03:63:23:f3:15:49:4f:08:59:5a:1c:18:b3:17:
23:f4:fb:19:f8:ce:b1:bb:69:ca:00:2d:3f:99:2f:74:1d:97:
cc:a5:39:d1:20:34:35:fd:57:89:d1:8d:99:9f:35:19:0f:92:
07:b7:c6:3e:14:b2:50:d2:a2:4a:a4:d4:54:d2:a5:90:6f:a1:
ba:38:91:92:4b:64:2e:a5:57:4f:fa:2e:3e:a4:92:7c:95:c4:
ac:ee:8f:69:5c:ad:d4:19:ba:e1:86:39:d2:a7:8d:24:8c:13:
8d:5b:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:10 2026 by rpki-client