
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json)
Hash identifier: +hM6up7WTeMS/8oNfcMd/eZMFxYdy6ykcdQsBey+prU=
Subject key identifier: 67:02:D4:52:A3:0B:C5:57:94:DA:74:F1:C9:7E:F3:18:BC:A7:0E:E3
Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
Certificate serial: 10AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
Manifest number: 10AB
Signing time: Wed 18 Feb 2026 17:04:45 +0000
Manifest this update: Wed 18 Feb 2026 17:04:44 +0000
Manifest next update: Wed 25 Feb 2026 17:04:44 +0000
Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: kllqRR6IVx6BQ51FqKGMI8idtWXIzCplSs6/lm//n+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl
rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4270 (0x10ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
Validity
Not Before: Feb 18 17:04:44 2026 GMT
Not After : Feb 25 17:04:44 2026 GMT
Subject: CN=6995f12d-a1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:f8:2c:c8:e4:d1:71:56:d8:e3:2f:3f:47:
38:5b:d9:6e:c5:89:0f:89:f9:ac:1d:93:ca:b4:55:
6f:c0:38:b1:b8:66:fa:00:89:14:8f:ea:4a:0b:8f:
9a:b1:17:88:ab:89:89:4a:b2:47:3e:f1:05:48:7a:
2c:e9:b7:bc:b2:97:02:c0:12:b1:19:2a:fb:c7:81:
06:35:89:e7:30:13:e9:a8:64:7a:c9:da:38:f2:12:
a6:23:85:93:88:87:bb:7e:71:f5:9b:f0:dc:4e:00:
fc:38:ae:fa:a4:96:df:48:f4:09:f8:79:aa:66:c9:
5a:f8:e8:36:0e:71:9b:03:e8:56:37:24:ec:57:91:
f3:30:ce:82:59:f4:ce:b2:ab:c3:7b:55:36:65:0d:
8b:72:46:ab:d8:f5:7a:b0:5f:c1:0c:2f:39:fa:e6:
7c:f5:95:52:00:3d:79:39:1e:c9:a3:c3:d9:9f:e1:
3a:46:6d:7f:38:4f:5f:05:5f:38:4e:e4:20:1c:37:
b1:28:6b:26:35:40:9d:69:db:6d:b4:15:59:b1:a5:
d6:76:05:c3:d9:00:91:bd:40:b3:1d:6f:d9:97:c9:
d8:d9:80:69:2f:a9:bc:52:30:26:7a:3e:8e:3a:ff:
17:8d:9e:b1:c9:c6:46:00:54:43:e2:1a:12:23:84:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:D4:52:A3:0B:C5:57:94:DA:74:F1:C9:7E:F3:18:BC:A7:0E:E3
X509v3 Authority Key Identifier:
keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:56:06:20:19:a0:dd:87:03:09:e5:a6:f7:69:31:a0:9e:3b:
dc:d4:01:fa:7c:fd:62:7f:83:49:0d:b5:65:a7:d5:06:9f:26:
b7:c8:e6:fe:72:1e:f7:a9:19:8c:40:54:73:34:5b:b5:39:1c:
c4:cb:d9:5f:b6:e0:e1:e8:e5:a8:7c:3a:41:8f:be:3a:cb:af:
ac:6a:11:52:d3:e3:db:31:1a:e7:5f:7a:b4:2c:48:04:6a:e5:
d4:18:fd:13:2f:cd:23:a2:7c:8f:f4:d4:99:be:ac:ba:0c:6c:
37:da:7b:41:14:8d:28:f7:73:3c:ad:56:16:c9:80:ea:97:fe:
d8:cd:89:a6:3e:0e:49:2d:a3:de:5d:11:57:2d:37:fa:11:66:
06:28:fc:94:c5:ac:41:92:3a:6f:fb:a5:02:e1:49:fe:a9:16:
5f:ff:3f:19:51:84:cc:83:cb:2e:4c:f6:01:08:07:52:f1:d6:
cb:c3:ae:a0:95:74:8b:50:56:3b:25:8b:5c:7a:78:37:52:59:
7d:d6:42:4e:ce:90:e4:2f:29:78:80:fd:4c:15:9a:f8:57:6c:
f8:ce:1c:24:57:46:a2:c6:d0:cb:f1:d0:9d:f4:ee:ea:77:49:
19:67:82:31:16:5e:c0:88:2d:6c:90:1b:b2:58:7e:03:8f:0f:
c7:4b:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:05 2026 by rpki-client