
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json)
Hash identifier: RJPPHqJPG1fE2n1TR/E26PRtnd/GX9k4tpbMU88DiJk=
Subject key identifier: 6C:53:4F:15:5F:E8:C2:60:71:CD:19:05:28:BA:03:29:10:0F:E3:A7
Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
Manifest number: 62
Signing time: Thu 19 Feb 2026 06:20:37 +0000
Manifest this update: Thu 19 Feb 2026 06:20:36 +0000
Manifest next update: Thu 26 Feb 2026 06:20:36 +0000
Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: sW50DguOn+GHBnghx4BBPLMKn26zfMaMghIvoY6kwc4=)
2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Validity
Not Before: Feb 19 06:20:36 2026 GMT
Not After : Feb 26 06:20:36 2026 GMT
Subject: CN=6996abb5-ab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:24:af:eb:e7:4b:32:69:8e:a6:61:85:22:
cb:6d:12:dd:3a:11:56:5d:9b:1e:1b:6e:fd:cc:de:
71:b6:a5:87:6a:be:34:13:49:55:64:a0:8a:6e:f5:
d4:4f:e5:60:f9:d2:42:9f:c2:87:b7:b0:2f:d1:bb:
f6:79:75:4c:27:c8:05:47:b9:e5:53:ed:b9:6a:68:
14:d1:29:53:de:28:5e:f2:e7:c5:da:42:e8:7b:5a:
6f:89:bd:12:93:3a:90:b9:5a:53:a0:86:39:ee:05:
c5:77:16:5a:74:86:36:21:51:b6:b0:0e:80:64:8e:
5d:16:29:a2:12:02:0b:19:05:92:0a:5c:dd:a9:86:
c6:8d:0e:d3:8f:93:4e:a4:2d:e2:ac:dd:c0:ba:26:
90:de:c9:d8:e9:8b:d9:e9:b8:09:c8:d3:ff:e1:b8:
1f:0c:47:d7:ca:dc:02:87:e8:aa:af:d0:e5:e6:38:
98:27:c7:89:74:33:b4:7a:b1:1e:74:93:69:07:fa:
2e:a4:a0:75:62:64:d2:dc:e5:eb:6a:f6:d4:6f:bf:
cb:4c:80:76:1f:18:dd:57:ec:ff:f1:76:75:67:63:
96:77:f2:a3:c8:82:ea:80:75:df:1c:7c:d7:1f:17:
b9:e9:43:65:b9:4b:26:75:b4:41:00:8c:15:e3:15:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:4F:15:5F:E8:C2:60:71:CD:19:05:28:BA:03:29:10:0F:E3:A7
X509v3 Authority Key Identifier:
keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ed:82:ac:08:98:ac:77:2c:5c:07:d7:31:5a:d3:e4:6a:5b:
cf:9a:a2:08:a2:6a:71:8f:7c:b8:81:e8:9b:f6:ad:0d:91:e1:
d6:a3:fd:c1:41:7b:59:9a:48:d1:5b:69:b9:cf:5f:79:51:2c:
45:ee:38:6b:59:cc:66:d2:e1:1d:8a:8f:99:e5:41:b8:ee:fb:
58:51:f6:49:11:d6:43:94:4c:7f:de:06:bc:cd:e9:21:55:be:
a1:54:cd:de:df:67:eb:f4:c7:fc:11:c2:db:83:eb:59:4f:7c:
44:7d:f4:7d:20:82:52:9b:8b:bf:b8:bc:50:2b:4e:56:a0:d8:
dd:88:fc:e4:3b:b4:86:6a:79:42:e4:88:db:2e:09:16:40:03:
16:8b:e7:3b:04:e5:d5:ef:cf:42:87:7a:31:4d:d9:03:63:a3:
cc:a3:6e:fc:32:96:f0:d6:2d:8b:d2:e6:bc:65:b0:6a:cb:b1:
84:9e:eb:d5:cf:b0:7f:eb:5f:29:d6:d3:12:62:01:2c:c7:20:
26:ff:7c:c1:6a:17:13:a7:fa:9d:e3:12:f2:44:29:c3:f2:1c:
a0:c6:20:a7:74:71:72:c2:01:e5:e0:d8:9d:52:28:fc:3e:aa:
3c:ad:02:b4:dc:62:9c:b7:6d:97:44:db:90:fa:0e:cf:f3:da:
c6:04:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:39 2026 by rpki-client