
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File: sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier: 2EF3IZzoHL3xDyobdHnUN/dsH48LEoLDUi6G33xhQes=
Subject key identifier: AE:73:54:73:32:F4:A1:3D:66:6B:23:0B:D7:86:7D:62:59:0C:D7:3E
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer: /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number: 28
Signing time: Thu 19 Feb 2026 07:00:26 +0000
Manifest this update: Thu 19 Feb 2026 07:00:25 +0000
Manifest next update: Thu 26 Feb 2026 07:00:25 +0000
Files and hashes: 1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: ezqwmnvsj1+5U3u3VkqNKhZfQvG5vQF1MscW0L9eJi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Validity
Not Before: Feb 19 07:00:25 2026 GMT
Not After : Feb 26 07:00:25 2026 GMT
Subject: CN=6996b50a-33b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:df:2a:e0:9f:93:6c:e5:a4:4c:ad:4b:ba:
49:cf:81:71:32:08:3d:9d:36:8f:92:25:47:3b:e7:
f3:e5:c2:f2:77:4f:8c:51:ad:be:fe:4d:13:59:3e:
5e:dd:75:f1:8a:73:46:4c:4d:09:6e:48:f2:0c:2d:
66:77:57:aa:3b:05:5a:3a:93:91:23:57:ce:a0:89:
88:3b:64:35:d7:5d:8b:7e:07:7a:d0:8d:90:57:f2:
88:0e:bd:f8:5c:8f:08:0e:3d:44:a8:7b:0f:15:85:
58:2b:03:1b:e6:5d:8f:1d:e6:fa:0a:9f:9c:da:62:
d3:7b:71:22:10:38:3c:83:99:ce:d8:55:0e:30:a3:
e0:b8:3d:e2:e9:7a:08:13:3a:05:b9:59:f9:41:96:
0a:86:7d:41:9f:93:8b:c0:d3:99:e5:2b:38:1e:5b:
e5:57:0a:09:86:32:ac:06:14:79:4d:f7:de:de:9d:
2b:aa:de:79:9c:0a:ec:8b:76:95:2d:e3:55:56:b2:
44:79:c3:a2:ed:8f:f8:af:f4:1e:bc:c9:b4:44:46:
ba:27:f7:f9:28:53:26:e6:54:b0:6d:75:5f:01:11:
0d:9e:8b:b7:57:6a:cb:a2:f1:9b:e6:c4:9b:83:0d:
3c:56:1d:43:ab:71:60:04:3b:2a:6c:3d:b1:e3:9c:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:73:54:73:32:F4:A1:3D:66:6B:23:0B:D7:86:7D:62:59:0C:D7:3E
X509v3 Authority Key Identifier:
keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:71:2f:ed:88:9f:39:76:e4:fa:04:3b:5d:0b:b0:55:79:77:
75:30:9b:6d:23:3a:f3:1c:66:42:a4:9d:73:f6:f0:4c:c5:00:
bd:c0:7b:ba:a1:6d:87:6f:89:30:7c:f9:26:83:9f:ef:91:57:
59:aa:08:74:50:b3:12:3f:04:d7:6c:bf:78:9c:fb:6e:73:3c:
d4:d0:e4:fc:e8:33:54:b8:a7:a9:4a:f4:77:7f:e3:51:38:17:
36:ad:3b:6e:06:95:f0:8a:be:7b:15:78:52:38:26:7c:11:b2:
83:a4:d5:85:86:61:aa:b5:ac:bc:fa:30:df:47:99:7b:16:c6:
9a:80:19:fc:a7:fe:25:36:19:7c:86:9d:d5:13:71:b1:8b:48:
fc:d4:75:06:c5:17:53:6a:a9:f0:c3:42:e5:5f:f1:3a:88:35:
80:62:92:3b:2a:51:0b:41:ba:f1:b4:ea:c2:10:dc:00:6e:8d:
68:b4:70:50:96:c5:3c:f1:6b:34:83:52:5c:93:73:24:08:63:
d6:3c:49:f5:11:1d:f0:0f:58:13:b9:f1:75:d3:2f:5a:d4:80:
c8:a3:6f:ec:ce:8e:a0:15:0e:68:e1:55:be:5e:25:37:6e:3a:
63:d5:9f:53:7e:08:be:7e:ed:2e:fd:97:3e:45:54:35:f0:ec:
f5:5e:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:59 2026 by rpki-client