
$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier: nahxTzthE7rKzIYWDoPWfTHOb0SMpYdSbcINIjIRskY=
Subject key identifier: 00:C7:95:54:C7:FD:7D:07:C8:15:BB:C1:45:03:AC:18:D8:7B:64:09
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number: 01CC
Signing time: Thu 19 Feb 2026 02:21:15 +0000
Manifest this update: Thu 19 Feb 2026 02:21:15 +0000
Manifest next update: Thu 26 Feb 2026 02:21:15 +0000
Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: jol8kJJdiIUgb48+tJKj3dwEsOowNZ9M85BPzt0zjjM=)
2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: eNZ801LzfUJJfFcQXfd+LEPeNYyxq0IQnV6OW/T3oK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Validity
Not Before: Feb 19 02:21:15 2026 GMT
Not After : Feb 26 02:21:15 2026 GMT
Subject: CN=6996739b-2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:5a:28:46:5b:c7:7b:bd:27:af:b1:ad:6b:
7b:89:96:3d:13:49:1d:c1:d7:c3:76:4c:ff:9d:35:
1b:54:bb:19:94:16:09:fc:a3:0a:d9:ca:94:74:b3:
a2:30:b5:11:aa:1a:f5:80:4e:c2:42:b9:f8:b5:4c:
56:3f:38:53:58:25:24:e8:01:93:e6:0e:b8:fb:2a:
84:02:6c:4a:43:a1:f9:57:04:51:60:77:4c:25:56:
fc:18:ff:e5:7d:20:0a:b0:42:d5:15:08:fa:fb:b8:
e4:9d:6f:a4:18:f9:74:b0:18:dc:03:08:1d:59:4b:
6d:95:5c:42:9c:63:ce:1e:ca:f2:3b:49:8d:9d:85:
ca:f2:83:ae:3e:b6:7c:c9:0d:75:9c:58:ea:06:72:
18:8e:d1:7e:1e:30:b7:fb:f2:97:73:35:95:eb:3a:
88:f6:f1:56:e3:bc:bc:50:67:75:68:ce:0b:d6:f5:
05:49:ca:50:d5:0c:d2:7a:66:3e:37:3e:be:89:64:
f8:1c:5b:d4:3d:77:9b:e5:f9:2b:24:eb:80:f5:40:
e0:45:40:14:d4:b6:36:9b:e5:ec:d1:f1:47:eb:f5:
a4:2c:46:3c:f9:da:6a:d3:dd:25:72:b0:7f:fa:0f:
71:12:dd:b8:bf:4b:c7:0a:53:85:78:62:d3:6c:ce:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:95:54:C7:FD:7D:07:C8:15:BB:C1:45:03:AC:18:D8:7B:64:09
X509v3 Authority Key Identifier:
keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:67:95:ba:8f:9e:a9:c6:b5:df:59:cc:ba:c7:e8:e3:17:
7d:04:cf:d8:c8:13:2f:ce:57:b4:d2:17:de:75:79:ae:d6:19:
b8:e8:46:a7:c3:d8:fd:fa:e4:dd:68:51:28:d6:1f:0d:89:fd:
29:d2:5b:cb:e8:e4:d6:39:d9:2a:21:6a:b2:cd:7e:d9:3a:d8:
ca:53:56:4b:6e:0c:39:d0:b3:7e:40:85:95:de:34:3f:0c:f9:
06:5e:e4:dd:cc:47:95:8b:56:13:0a:94:9e:76:b3:ed:33:5b:
fa:f1:ab:ff:47:f2:e7:23:f0:4b:f2:fe:c3:3b:a8:94:ad:6a:
55:a1:46:1a:73:73:bd:aa:bc:9f:ea:dc:b2:49:f3:8d:72:db:
91:1b:a7:ad:9c:c1:b0:4a:c2:12:7e:7e:04:0a:91:5f:65:74:
92:a4:8a:c3:48:6b:cc:02:e8:24:73:37:e5:89:bd:95:3a:e7:
39:15:58:a3:aa:70:04:c0:4c:cb:88:cf:e1:41:76:87:6d:94:
6d:2d:30:eb:d5:c1:59:b1:34:bb:0a:bb:13:62:48:69:38:1c:
a1:d8:0b:87:02:a6:74:e8:d4:72:c3:cd:f4:1a:78:f0:e3:73:
54:0e:aa:b9:8d:c6:c8:5f:a5:d4:f7:98:cd:6b:14:b8:97:d0:
6d:35:39:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1
NjUzOEE2OUEwHhcNMjYwMjE5MDIyMTE1WhcNMjYwMjI2MDIyMTE1WjAYMRYwFAYD
VQQDDA02OTk2NzM5Yi0yYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArztaKEZbx3u9J6+xrWt7iZY9E0kdwdfDdkz/nTUbVLsZlBYJ/KMK2cqUdLOi
MLURqhr1gE7CQrn4tUxWPzhTWCUk6AGT5g64+yqEAmxKQ6H5VwRRYHdMJVb8GP/l
fSAKsELVFQj6+7jknW+kGPl0sBjcAwgdWUttlVxCnGPOHsryO0mNnYXK8oOuPrZ8
yQ11nFjqBnIYjtF+HjC3+/KXczWV6zqI9vFW47y8UGd1aM4L1vUFScpQ1QzSemY+
Nz6+iWT4HFvUPXeb5fkrJOuA9UDgRUAU1LY2m+Xs0fFH6/WkLEY8+dpq090lcrB/
+g9xEt24v0vHClOFeGLTbM4lZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADHlVTH
/X0HyBW7wUUDrBjYe2QJMB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz
Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO
S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZvWeVuo+eqca131nMusfo4xd9BM/YyBMvzle00hfedXmu1hm46Ean
w9j9+uTdaFEo1h8Nif0p0lvL6OTWOdkqIWqyzX7ZOtjKU1ZLbgw50LN+QIWV3jQ/
DPkGXuTdzEeVi1YTCpSedrPtM1v68av/R/LnI/BL8v7DO6iUrWpVoUYac3O9qryf
6tyySfONctuRG6etnMGwSsISfn4ECpFfZXSSpIrDSGvMAugkczflib2VOuc5FVij
qnAEwEzLiM/hQXaHbZRtLTDr1cFZsTS7CrsTYkhpOByh2AuHAqZ06NRyw830Gnjw
43NUDqq5jcbIX6XU95jNaxS4l9BtNTn9
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:24:54 2026 by rpki-client