
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier: jOELe0Gxjfrnufo77ZizF7MCh02+zxttiZNdShXG3hM=
Subject key identifier: AF:6A:FA:4B:41:38:E1:7E:F8:E0:DA:81:42:37:B1:7C:BF:EB:54:CE
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0C84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number: 0C75
Signing time: Wed 18 Feb 2026 18:15:00 +0000
Manifest this update: Wed 18 Feb 2026 18:15:00 +0000
Manifest next update: Wed 25 Feb 2026 18:15:00 +0000
Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: TiSXnrZklXLIsbyg8K1B9Nd6rSIjkjV0qSkqyW3xcMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3204 (0xc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: Feb 18 18:15:00 2026 GMT
Not After : Feb 25 18:15:00 2026 GMT
Subject: CN=699601a4-0068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:ec:61:fc:65:9d:76:dc:79:9b:b9:04:6f:
ed:58:ba:75:05:86:51:82:a6:c6:66:8f:9b:ec:95:
f2:c7:08:f0:fa:66:a2:31:54:8e:28:86:25:33:7b:
29:03:50:7b:d8:1d:62:2b:65:0e:96:67:87:51:f1:
ef:a0:d3:16:54:79:ab:45:b5:7a:f8:c8:5d:f6:6f:
01:85:b2:22:8d:ac:a0:41:55:d5:70:31:75:62:76:
a0:e5:55:9c:a7:bb:00:28:b6:ca:23:d1:df:0e:d8:
89:fe:7c:1c:00:66:86:64:2c:b0:e6:5f:6b:3b:0c:
a7:95:82:71:b9:3f:6f:61:36:27:51:f6:ed:41:5a:
0d:07:a5:66:6c:d8:35:8c:0b:60:82:d0:d2:41:eb:
54:88:76:d0:ac:ab:f6:5f:94:b3:a4:c8:32:ee:3b:
c4:67:86:44:21:e3:3f:be:44:16:b8:3e:79:82:c5:
0d:ba:61:9b:0e:95:d6:eb:57:fb:b7:0c:cf:39:e4:
9f:de:f6:19:45:72:5e:c5:c6:80:0a:ee:2d:98:e5:
61:f8:b2:17:85:84:69:4d:3f:e9:cd:22:84:42:c1:
43:ee:78:63:ef:e6:ae:09:c1:c0:84:cc:c0:e8:d1:
45:d8:09:a9:d3:91:de:e0:57:ff:d8:e1:4e:82:c5:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:FA:4B:41:38:E1:7E:F8:E0:DA:81:42:37:B1:7C:BF:EB:54:CE
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:28:b2:85:0f:f6:f3:fa:ae:b5:45:5e:0a:50:f9:67:b4:
5c:a7:2d:c7:74:32:79:d9:3f:9a:b9:2a:76:00:06:96:bc:a9:
ad:ee:fb:8d:69:82:1d:99:ed:c7:0e:1f:cc:b5:4a:99:7a:87:
b1:9f:4e:86:02:09:0a:10:a1:a4:13:34:28:fa:d0:5f:66:63:
a6:73:75:a7:bd:ee:a3:be:1b:8d:14:69:79:45:60:1b:6a:07:
44:d1:e0:22:36:01:ec:b2:64:7f:49:ef:61:02:6a:83:f9:c6:
30:f9:fe:28:a0:71:03:00:60:82:a4:64:4d:4b:38:1f:76:85:
5d:44:a5:06:d7:3c:88:6c:53:0e:3e:0b:29:b4:51:22:ab:84:
63:01:6d:53:10:27:a9:c6:96:71:18:df:11:b5:86:4e:9a:9a:
fc:a0:56:dd:50:9d:a5:1d:4d:c1:fc:93:46:02:05:98:d5:2c:
93:3f:c5:24:5d:05:71:26:19:f1:44:6d:9b:ad:78:12:85:af:
d6:84:50:3e:6b:f1:85:ca:4a:cc:df:8d:71:5e:e3:73:36:9d:
10:8e:f3:5b:f7:da:b5:6a:9b:2b:79:e4:34:fd:dc:7f:6c:d5:
5c:ef:d3:0f:10:28:5e:92:55:fe:59:d3:51:5b:63:e4:68:35:
12:d8:42:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2
NUY4QjI1NzYwHhcNMjYwMjE4MTgxNTAwWhcNMjYwMjI1MTgxNTAwWjAYMRYwFAYD
VQQDDA02OTk2MDFhNC0wMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkJPsYfxlnXbceZu5BG/tWLp1BYZRgqbGZo+b7JXyxwjw+maiMVSOKIYlM3sp
A1B72B1iK2UOlmeHUfHvoNMWVHmrRbV6+Mhd9m8BhbIijaygQVXVcDF1Ynag5VWc
p7sAKLbKI9HfDtiJ/nwcAGaGZCyw5l9rOwynlYJxuT9vYTYnUfbtQVoNB6VmbNg1
jAtggtDSQetUiHbQrKv2X5SzpMgy7jvEZ4ZEIeM/vkQWuD55gsUNumGbDpXW61f7
twzPOeSf3vYZRXJexcaACu4tmOVh+LIXhYRpTT/pzSKEQsFD7nhj7+auCcHAhMzA
6NFF2Amp05He4Ff/2OFOgsXmywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9q+ktB
OOF++ODagUI3sXy/61TOMB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4
NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkFBRC81MjFBRERDODE4NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhv
ekoyV3FNSktrNXBsLUxKWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3HiiyhQ/28/qutUVeClD5Z7Rcpy3HdDJ52T+auSp2AAaWvKmt7vuN
aYIdme3HDh/MtUqZeoexn06GAgkKEKGkEzQo+tBfZmOmc3Wnve6jvhuNFGl5RWAb
agdE0eAiNgHssmR/Se9hAmqD+cYw+f4ooHEDAGCCpGRNSzgfdoVdRKUG1zyIbFMO
PgsptFEiq4RjAW1TECepxpZxGN8RtYZOmpr8oFbdUJ2lHU3B/JNGAgWY1SyTP8Uk
XQVxJhnxRG2brXgSha/WhFA+a/GFykrM341xXuNzNp0QjvNb99q1apsreeQ0/dx/
bNVc79MPECheklX+WdNRW2PkaDUS2EIb
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:46 2026 by rpki-client