
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier: nKW94OcS4r8vrevLwK/esCUJVgH61nZHNYviwoeb9JQ=
Subject key identifier: 67:6D:D3:AB:CE:E4:8F:7F:72:4D:E1:CF:D0:48:F1:93:37:CF:00:1A
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial: 0382
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number: 036D
Signing time: Thu 19 Feb 2026 00:09:35 +0000
Manifest this update: Thu 19 Feb 2026 00:09:34 +0000
Manifest next update: Thu 26 Feb 2026 00:09:34 +0000
Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: h3IpqHq+qgnQjA7xrVOvpaE0aETyZzQlfBnnHxGL2bk=)
2: 3824E928764711F0980D9877C4F9AE02.roa (hash: Vlt8E5RCfri6tIVkewPLLzIXYySBs5xXKD+pS8VKrVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Validity
Not Before: Feb 19 00:09:34 2026 GMT
Not After : Feb 26 00:09:34 2026 GMT
Subject: CN=699654bf-e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:04:43:e8:08:c7:5c:3e:ec:3e:62:8d:52:
56:5b:8c:d7:7a:b7:56:3c:55:b4:3e:21:56:d3:91:
ce:e1:b6:c7:1b:c0:86:ab:85:22:95:19:34:98:a9:
bf:fc:3e:52:7e:31:4a:06:2f:fa:18:93:7d:a7:de:
c3:89:94:9f:c3:cf:5c:75:2b:2a:20:11:57:94:cf:
0d:6e:59:25:bc:6f:e9:75:99:a0:9f:49:30:61:68:
62:9e:7a:47:2a:d8:d0:38:04:a5:3b:66:81:0d:3b:
3a:c0:c4:44:b1:ce:e6:3a:c5:fa:96:5b:6e:8a:f6:
61:5d:aa:cc:26:d7:fc:ce:70:cb:c4:4f:20:5a:26:
51:08:8a:d8:67:58:64:09:fd:9f:8b:9f:54:df:b6:
6b:92:60:c0:c2:a5:be:05:ba:fc:b8:17:33:5a:d1:
c6:96:81:b3:da:8d:ae:61:69:98:e5:a1:82:de:73:
0f:46:d1:ad:51:94:bd:f8:e5:0f:33:f8:62:ca:4b:
ff:8c:c4:e5:6d:ed:0f:0a:16:69:7f:dd:34:ed:bd:
23:96:e3:22:c0:4f:ee:99:24:54:cd:b1:71:8c:2a:
9d:ba:ec:55:c3:3f:23:e5:e1:bb:12:06:68:aa:07:
22:d6:0e:09:e5:f5:34:64:96:ee:a9:ac:85:ca:96:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:D3:AB:CE:E4:8F:7F:72:4D:E1:CF:D0:48:F1:93:37:CF:00:1A
X509v3 Authority Key Identifier:
keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:5d:3a:b0:40:16:46:4d:78:c9:b6:41:45:a5:21:48:81:
9e:01:13:97:e0:a8:2b:22:85:e4:34:df:a0:84:1e:70:d4:65:
61:f6:ae:e1:03:5f:d7:e7:cf:13:02:57:f1:51:5d:65:ae:28:
25:4b:27:27:e3:fa:a4:e0:14:28:a6:7d:6f:06:91:b1:46:10:
07:9b:5e:5d:34:54:54:7b:23:c0:fb:ca:0e:c4:a0:a3:78:b3:
a6:81:23:8b:57:12:f7:a1:a1:0e:3f:0e:96:69:ac:09:98:79:
90:68:1b:f5:36:c3:8e:a2:62:14:dc:94:8e:53:7b:e8:bc:73:
81:74:d9:aa:61:ea:16:04:77:ea:3f:53:8c:4e:c0:f2:23:59:
81:57:b0:9f:fe:e8:d1:0b:8b:80:5e:af:5c:8d:fe:e8:94:39:
3c:8e:6a:8b:1a:e1:de:da:1f:92:fc:32:42:2d:c9:cc:34:3b:
38:28:23:ef:c7:bf:41:88:58:79:1d:44:7d:99:6b:5b:cc:38:
f5:05:4a:53:96:b1:f8:06:a5:22:0c:73:ff:ce:f2:ba:e1:03:
02:ab:03:c0:0e:8d:ef:20:96:d0:03:72:ce:d6:b4:e9:87:b9:
ae:4c:09:a1:f8:f0:9b:ce:bd:ac:66:93:86:d6:34:bf:52:ef:
d8:52:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:10 2026 by rpki-client