
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json)
Hash identifier: INL6aShYX+Evw9R9Y8qO7dsk9UDnBlyYneNFUcDjBos=
Subject key identifier: 59:84:3E:98:C6:4F:02:F4:2D:00:C7:7F:DC:BE:16:D8:53:73:9F:CF
Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
Manifest number: 025A
Signing time: Thu 19 Feb 2026 01:08:34 +0000
Manifest this update: Thu 19 Feb 2026 01:08:34 +0000
Manifest next update: Thu 26 Feb 2026 01:08:34 +0000
Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: SgE7jFlNxK+j7vnGIoFU6cguaDj/o8QmnLzlTv0aooo=)
2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: nvx3GHSjm1FoBsodAOrWvu9aA6Bfe7UFufBA3q/5SPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Validity
Not Before: Feb 19 01:08:34 2026 GMT
Not After : Feb 26 01:08:34 2026 GMT
Subject: CN=69966292-e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:02:3b:8b:e4:ea:c8:e4:3d:c1:1a:3b:b9:
54:3e:cf:d4:d7:f9:32:d0:e4:55:85:1a:72:2a:e1:
c2:4d:ff:03:f8:e4:94:5d:f5:c0:6d:9a:ad:cb:15:
f8:09:56:9b:aa:48:c6:28:ee:4a:cb:58:aa:35:b5:
64:3d:6f:54:af:fc:3d:23:2c:a4:69:34:6b:1a:6f:
e7:ec:5b:49:75:c5:2e:e4:09:6f:1a:63:35:06:4c:
8c:82:96:0f:2c:11:d2:53:7e:9b:72:0e:86:f3:9a:
c8:db:89:59:0d:12:2b:af:c7:ba:c3:8a:a6:9f:ed:
df:f4:b8:c9:ae:4b:3b:a3:fc:8e:35:78:e9:96:aa:
e6:a3:27:ac:6a:ae:e7:fb:12:bb:3e:bd:bc:b5:c8:
c9:10:2f:5b:f6:fa:06:0f:2a:5f:6d:9a:96:13:02:
75:72:3a:fc:89:bc:d6:87:48:fa:48:bc:04:dd:db:
50:46:65:29:02:67:7b:e2:38:c2:89:78:6d:90:7f:
06:65:a4:73:94:20:57:d6:ea:3d:66:51:1b:a5:9e:
b8:e8:32:26:52:11:01:56:03:78:be:67:2e:b6:94:
f7:3b:c7:31:d8:08:31:7b:80:3a:1c:28:37:f2:fc:
18:3b:6a:62:4b:1d:12:1c:dc:ef:42:50:39:45:86:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:3E:98:C6:4F:02:F4:2D:00:C7:7F:DC:BE:16:D8:53:73:9F:CF
X509v3 Authority Key Identifier:
keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:10:e7:67:ef:7f:d1:53:df:e9:46:46:af:75:4e:c2:d4:
04:ec:a4:3b:8a:05:cc:44:0b:a2:52:af:e2:bd:fa:1a:fc:ed:
79:78:2d:e0:9f:ba:1a:f9:ba:7a:65:7f:4b:4a:bc:8f:32:da:
32:42:97:6b:34:31:5b:52:a8:ec:86:25:85:10:aa:08:33:3e:
0b:66:ce:f1:d0:e5:ee:3e:b2:87:67:c0:82:57:4f:95:55:99:
fd:c8:4e:b7:7e:ce:00:0e:8a:67:b0:76:8d:02:7a:3a:1e:b5:
94:82:1c:0d:bf:79:0a:61:58:e0:19:ec:42:d1:5d:c5:71:b0:
ba:2e:18:9f:52:3e:08:eb:b4:c3:43:8f:45:15:1d:ad:a0:4e:
7a:69:9c:9d:89:3a:2d:af:2c:33:fd:47:a2:72:3c:7e:e3:22:
1a:da:64:78:9d:0b:2e:af:53:a2:58:c1:40:4a:e8:d0:eb:23:
d7:15:90:41:fd:71:cd:ff:33:64:66:88:fd:6f:3c:62:fc:5c:
6e:6e:b5:3c:c4:12:af:f2:c5:27:fe:f5:dc:43:a4:ed:51:76:
03:3c:84:f1:f8:41:6f:54:30:9b:5c:56:e5:8d:8c:99:5a:90:
7b:38:33:07:fc:44:6a:cf:f7:db:05:20:82:74:90:cf:ef:31:
38:13:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:34 2026 by rpki-client