
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier: dW3z5qSXKjCsuBf8b7pb4vr8jKUA2QGVKSMiAhd4RWY=
Subject key identifier: B5:CD:39:EC:FC:2B:76:75:79:DC:C7:D8:1E:C1:02:B1:F7:0B:6D:38
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial: 0B3C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number: 0B3A
Signing time: Wed 18 Feb 2026 16:25:02 +0000
Manifest this update: Wed 18 Feb 2026 16:25:01 +0000
Manifest next update: Wed 25 Feb 2026 16:25:01 +0000
Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: iVQv5Q4MzEhcyIrW5G1GU69yOv4Ph0Ctksbn0NslaOU=)
2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: X6qLGESMHlCjgInNJuuQgeTL462kIXu1+dGUahA9Gs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Validity
Not Before: Feb 18 16:25:01 2026 GMT
Not After : Feb 25 16:25:01 2026 GMT
Subject: CN=6995e7dd-3c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:b1:65:1a:e7:e0:0e:85:3e:88:1e:fa:c2:
67:52:30:d0:d5:05:fa:df:64:90:ee:21:e8:95:34:
56:0b:24:5f:26:31:0b:fc:f6:ed:32:7f:81:0f:c4:
34:c8:24:4c:7b:a9:cd:ec:13:62:6e:bd:da:88:07:
01:1c:3c:ed:6e:af:dc:ea:8d:eb:5b:42:5a:cb:11:
3a:b9:94:24:8b:39:1e:05:06:68:ae:bb:00:6b:de:
54:c6:49:5c:b0:77:6f:7d:ad:3c:88:13:c2:bc:b3:
c1:30:ae:8a:85:87:e4:19:01:ba:e3:b5:c8:81:7f:
e9:45:1c:c1:39:bc:67:a3:ea:9b:65:86:35:be:10:
78:9c:98:d0:08:0e:61:57:ea:8b:9c:ca:67:62:89:
3d:2c:2a:b6:04:60:2d:cb:ec:65:3c:46:60:6a:ae:
ff:4b:17:b8:0b:52:d5:88:b9:ef:53:f8:30:13:82:
1a:11:d6:f5:9f:e0:7c:53:4c:a9:fe:9c:60:fd:5d:
48:f4:cf:c2:8a:ba:a8:f4:f7:45:54:21:0f:fd:b8:
81:cb:d6:c7:5c:5f:0a:b1:e1:c9:95:79:7d:42:99:
c7:83:65:b7:c2:42:13:47:9f:4e:ad:57:48:9c:ab:
cf:6e:00:c0:a9:18:63:5c:0c:b2:8a:a5:6a:9f:0a:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:39:EC:FC:2B:76:75:79:DC:C7:D8:1E:C1:02:B1:F7:0B:6D:38
X509v3 Authority Key Identifier:
keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e5:5e:7e:75:db:5c:d7:71:98:10:0c:d2:1e:45:ae:5a:ef:
39:dd:60:68:65:81:26:84:34:bb:8a:fc:dc:00:83:7e:4b:bb:
2e:9e:5a:75:35:c8:86:32:c2:60:c3:a3:c4:9d:22:2c:76:e5:
11:8b:d1:db:9d:eb:31:ff:e5:5d:20:93:0b:66:0c:59:55:75:
52:08:8e:2c:f4:17:d3:5f:9c:9f:55:88:78:db:00:14:72:d9:
bf:e8:42:87:b4:d7:ac:89:5b:e1:f7:04:24:86:fe:04:a0:f5:
b9:1e:48:bf:a1:2a:9b:5a:77:2d:89:64:05:42:28:4d:1f:0a:
34:c9:61:ff:fa:3e:35:ee:85:c0:f5:a4:2c:ec:cf:20:a9:8a:
78:8f:c6:3f:1f:7f:13:d7:e8:78:31:03:82:74:cd:c5:a4:b7:
b4:dc:f9:2f:67:b8:01:c0:f1:da:54:93:71:59:d6:fe:e5:70:
5f:d8:d4:4a:89:29:68:3e:12:c4:6c:bd:2b:8e:b4:43:2d:40:
7a:15:1d:e4:28:d4:8c:20:2c:6d:15:89:25:42:6b:82:56:2a:
77:0d:4b:e5:d9:35:de:2e:75:11:90:b2:6a:c3:e8:ac:29:bf:
c2:0d:b7:a8:e6:4b:17:91:e1:b7:0c:fa:25:5b:ec:f9:c1:5d:
be:bc:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 07:00:48 2026 by rpki-client