
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: xkQdCZfLns9ZmIOyMNlNNLA8DcRa7v6JowWGS1LxIdk=
Subject key identifier: 74:65:63:0D:B1:2A:43:55:14:67:A6:D7:DA:93:A2:38:23:32:34:B0
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 025A
Signing time: Thu 19 Feb 2026 01:07:17 +0000
Manifest this update: Thu 19 Feb 2026 01:07:17 +0000
Manifest next update: Thu 26 Feb 2026 01:07:17 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: Ozg0KQsP3rdYc7L40HvpXROWXiBnFmG2TMLcv7Kz/Xk=)
2: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: wXTf+z0Iz/oOooXevNnn+Biz75JTj6NsQRj0igZe6hU=)
3: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: v0QyA38k1fUjIxLatTIS+A0JxElTy+cfv1Yt42+czGc=)
4: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: o1y6sf6jxnpkhpP9iNHCGVK5mxUEq9Y1c62QeILr98U=)
5: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: 7JORqu7sYrSri00VpAd97cPkbX0dugE57bkWBi2JQNk=)
6: C3481400917811ED904ACF83C4F9AE02.roa (hash: 8rDI8OMHiVeHq/X4uTQm2pENFtJiinbUxqvzVYGPFb8=)
7: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: OQO/jbPkAmyrFrsJHCYsBxAyxffpT18gppoJG2tzj44=)
8: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: aDePEknIgdhY8grIVf2gq1/G7FHXPqP7qXCUTY/USYI=)
9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: /nv+BWm8Pbai+ypGbGRHN+LGWddsvNd6k16CLCDQGr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Feb 19 01:07:17 2026 GMT
Not After : Feb 26 01:07:17 2026 GMT
Subject: CN=69966245-379f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:80:b0:50:1f:f0:7d:31:bc:e3:eb:86:28:
dd:32:5f:81:5e:cf:59:a4:0a:9e:d5:0c:c7:0a:ad:
7a:01:fd:8d:d0:80:25:7f:e3:3d:04:10:00:9f:74:
86:72:7c:14:79:4d:3a:97:df:ce:7b:87:4d:c8:07:
0f:82:16:3d:f3:29:12:9e:b5:37:65:20:e6:f5:19:
92:63:6c:fe:ac:77:f1:81:ba:16:a1:08:2b:13:dc:
8e:16:1f:03:ad:ef:6d:b0:17:1d:12:b7:ce:de:70:
74:78:f1:3f:44:0c:7b:18:1e:6e:d7:e3:ae:5b:bf:
0c:6a:e9:d7:66:67:72:74:4b:d9:33:3f:a5:dc:23:
82:8a:9d:3d:e2:c7:6c:4d:c6:7a:c7:4f:90:5d:de:
94:24:99:ab:88:aa:be:84:96:4d:4e:a6:0f:a4:af:
e3:b8:b5:5a:44:cf:f8:ae:f4:13:a2:ab:52:bf:f5:
26:38:eb:73:7e:d6:cc:f1:c8:68:79:b6:56:cb:7f:
e4:7f:e0:9e:46:38:4a:fa:42:13:97:17:29:8d:22:
0f:98:9d:5b:48:d2:d2:fe:b6:b7:32:70:26:4b:90:
ab:65:aa:ee:ca:99:ce:c5:48:59:88:15:3b:b1:74:
fe:b7:43:7d:2b:b6:5d:fe:3d:c6:fb:a6:3c:74:4e:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:63:0D:B1:2A:43:55:14:67:A6:D7:DA:93:A2:38:23:32:34:B0
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:bd:d5:38:f3:a3:ec:2e:1b:c3:cb:f0:38:f3:f2:e0:23:
10:bb:71:ee:93:d9:43:bc:70:2c:ab:fd:1c:54:f9:6f:9c:4e:
6c:c6:ed:a2:4c:cd:bb:43:fb:e3:1b:85:9c:c9:ea:25:14:8d:
92:45:9b:71:f7:47:f7:09:2f:61:7a:62:26:59:94:04:f0:1d:
c5:d3:af:6a:26:80:7f:b3:1d:11:fc:85:4c:be:8e:61:3d:26:
54:1d:4d:ee:75:97:61:73:41:65:71:a5:7f:f9:ab:ca:92:8e:
7d:9b:56:74:29:9d:fc:f8:5b:77:51:e4:f4:6e:6e:86:b4:ae:
cd:e6:7c:8a:ac:b8:cf:ed:6a:2b:6c:ef:7c:63:3f:54:d9:4a:
e4:53:45:2d:4c:c1:03:38:b6:dd:92:38:78:88:53:15:45:6a:
de:ae:5a:4c:ff:f2:5c:10:5b:4a:4b:4a:73:a6:12:23:ae:45:
2f:1b:f6:c1:02:c6:f7:39:28:c7:c4:48:47:c0:f0:0f:bb:41:
f0:e3:47:32:8c:a0:55:0a:ad:2d:b7:23:31:f3:87:38:f1:ea:
2b:d5:e2:9e:8a:2a:40:ac:74:03:bb:95:d7:5a:3a:8a:19:a9:
a3:17:25:bb:9f:48:fe:b9:21:b8:fd:ca:50:6e:15:74:bc:bd:
4d:67:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:53 2026 by rpki-client