
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft
File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json)
Hash identifier: Wo7G48PlpcdwX1OotbUAczMc6k6IXYztyeMpV9+52O0=
Subject key identifier: F7:8E:68:EB:33:56:8F:22:6B:EF:9A:AF:3D:FC:9A:FB:01:1B:E9:B4
Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08
Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08
Certificate serial: 0549
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft
Manifest number: 053B
Signing time: Wed 18 Feb 2026 22:47:56 +0000
Manifest this update: Wed 18 Feb 2026 22:47:56 +0000
Manifest next update: Wed 25 Feb 2026 22:47:56 +0000
Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: LB2YtDAbbCH6JxnipvDd0YVMKpTXlVR3d59k9sGp78U=)
2: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: 5v4v7RaVWpka/RgMNB216nlkDwgHxxiCrRAvcj0M6nU=)
3: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: i694BiCj0TiGd2lr/zyVLBpjtaksSSaQaDh6dbA9tJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08
Validity
Not Before: Feb 18 22:47:56 2026 GMT
Not After : Feb 25 22:47:56 2026 GMT
Subject: CN=6996419c-67d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:2d:c5:58:66:9d:70:88:92:09:d5:f7:8e:
12:cc:2f:f5:06:34:68:9c:c7:3b:89:63:28:6a:db:
4e:36:e9:ad:7b:da:24:1e:52:49:a7:ec:ea:1c:84:
db:01:43:cd:23:d7:6f:54:3c:f1:d5:da:8b:ad:73:
79:89:ab:c0:8d:14:c1:39:39:8e:27:22:c5:61:e4:
dc:21:dd:2f:e1:6a:8c:3e:70:e0:ce:ad:18:71:0c:
5b:31:fa:b9:14:c5:e7:f8:06:75:cc:c4:1d:45:62:
72:4e:5f:d4:7b:89:06:31:da:d2:98:71:11:e5:67:
18:df:3f:1b:e4:0f:e3:cb:5a:0e:33:d3:00:84:eb:
13:31:ed:06:b6:53:a2:ce:83:b1:79:da:dd:ec:e8:
40:c4:c9:03:6d:f1:94:0c:b1:ff:2e:49:da:9a:1d:
5a:89:c6:be:8c:df:78:dc:90:a4:cf:6a:a1:c2:f0:
04:1a:9b:bf:cd:b4:73:e2:39:ec:84:4e:1c:7b:df:
09:ab:3f:b5:45:eb:bf:95:e4:ae:c4:2a:54:3b:a6:
4a:5d:8a:53:c8:94:18:aa:aa:42:f8:09:e6:fb:25:
d6:77:ab:cc:a5:ef:af:ff:86:66:0b:c8:1e:3d:5d:
ee:1c:0d:ec:81:92:be:32:80:68:fd:8c:df:8d:e6:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:68:EB:33:56:8F:22:6B:EF:9A:AF:3D:FC:9A:FB:01:1B:E9:B4
X509v3 Authority Key Identifier:
keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:ed:9e:e9:3f:c7:60:7c:54:35:50:2c:f0:c9:54:00:73:
67:66:65:ef:c1:0f:c4:cc:5b:2a:1a:ca:24:51:90:ec:f2:9a:
22:13:6d:98:c6:40:61:08:6a:be:f6:99:46:cd:5b:05:c3:3e:
7b:5f:5f:af:b2:b9:18:e9:df:a3:f5:01:7c:e0:14:27:3a:78:
9b:6d:7a:f8:12:75:28:0e:ca:d1:66:3f:0f:5f:bb:c3:9b:92:
ee:b1:6f:b8:85:9b:a8:80:27:bd:15:5a:e5:dd:43:55:c7:93:
cc:38:df:d6:15:d7:0f:6c:a2:83:9a:c7:0f:d2:3e:db:6a:df:
91:90:08:eb:84:77:09:73:60:9f:52:a5:94:f5:8a:81:90:83:
05:ef:3e:81:5a:b5:49:d1:a2:86:7f:7a:62:d7:ca:56:5f:27:
e4:55:85:7a:97:bd:d0:dd:35:5a:2f:29:42:f4:12:c5:6f:b6:
3b:47:28:c2:37:87:b9:54:59:46:cc:69:65:e5:57:c4:d4:ee:
8a:f2:13:be:28:d8:34:67:78:94:bc:7b:56:50:04:83:03:15:
40:74:49:0a:ec:43:20:a9:41:f0:3d:a0:03:13:f4:3e:b7:5f:
e0:72:a9:cd:53:dd:f4:e9:6b:f2:a1:e1:66:65:fa:17:e7:15:
06:fa:e8:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0
Q0MxMTZFMDgwHhcNMjYwMjE4MjI0NzU2WhcNMjYwMjI1MjI0NzU2WjAYMRYwFAYD
VQQDDA02OTk2NDE5Yy02N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu04txVhmnXCIkgnV944SzC/1BjRonMc7iWMoattONumte9okHlJJp+zqHITb
AUPNI9dvVDzx1dqLrXN5iavAjRTBOTmOJyLFYeTcId0v4WqMPnDgzq0YcQxbMfq5
FMXn+AZ1zMQdRWJyTl/Ue4kGMdrSmHER5WcY3z8b5A/jy1oOM9MAhOsTMe0GtlOi
zoOxedrd7OhAxMkDbfGUDLH/Lknamh1aica+jN943JCkz2qhwvAEGpu/zbRz4jns
hE4ce98Jqz+1Reu/leSuxCpUO6ZKXYpTyJQYqqpC+Anm+yXWd6vMpe+v/4ZmC8ge
PV3uHA3sgZK+MoBo/YzfjeZkTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeOaOsz
Vo8ia++arz38mvsBG+m0MB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw
OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP
S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdg+2e6T/HYHxUNVAs8MlUAHNnZmXvwQ/EzFsqGsokUZDs8poiE22Y
xkBhCGq+9plGzVsFwz57X1+vsrkY6d+j9QF84BQnOnibbXr4EnUoDsrRZj8PX7vD
m5LusW+4hZuogCe9FVrl3UNVx5PMON/WFdcPbKKDmscP0j7bat+RkAjrhHcJc2Cf
UqWU9YqBkIMF7z6BWrVJ0aKGf3pi18pWXyfkVYV6l73Q3TVaLylC9BLFb7Y7RyjC
N4e5VFlGzGll5VfE1O6K8hO+KNg0Z3iUvHtWUASDAxVAdEkK7EMgqUHwPaADE/Q+
t1/gcqnNU9306WvyoeFmZfoX5xUG+uhF
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:43:28 2026 by rpki-client