
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier: BQX4ZpRNmzIYrXMzcBM+6EDqfSi+irEKZdj1oxSWweo=
Subject key identifier: DB:26:15:97:37:B1:25:F6:5A:3A:DA:95:C9:B9:36:39:56:F3:57:0E
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial: 0CF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number: 0CED
Signing time: Wed 18 Feb 2026 17:49:08 +0000
Manifest this update: Wed 18 Feb 2026 17:49:07 +0000
Manifest next update: Wed 25 Feb 2026 17:49:07 +0000
Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: RWuY74FRHHytODqb/AR1yXEWPsEnc/geRlxO/1y5R3o=)
2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
Validity
Not Before: Feb 18 17:49:07 2026 GMT
Not After : Feb 25 17:49:07 2026 GMT
Subject: CN=6995fb94-eabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:8e:4e:55:42:c8:63:b2:96:98:b4:96:9e:
20:64:fa:41:6e:59:1a:6e:1a:2d:43:e3:ba:c7:a8:
b3:ed:fe:4a:e5:24:9e:ba:dd:71:93:92:0b:80:78:
a5:72:be:1b:50:75:d8:34:68:e0:04:5d:18:82:21:
5a:45:0a:4d:da:d6:77:5e:7c:da:9b:16:60:d0:a5:
34:f5:33:7c:ac:85:99:ff:62:67:c6:94:6e:39:1d:
f6:2e:6f:11:95:bf:c5:7a:f1:a8:d6:ee:3b:34:3f:
b2:96:e8:4e:58:fc:7a:2b:2d:8a:f6:b4:b0:e6:2f:
b5:72:67:99:d1:25:cd:a7:0f:94:52:27:9b:c1:8c:
2b:21:ce:0d:8b:27:32:ff:02:38:17:b2:45:61:46:
59:2d:4b:12:32:fc:ad:79:f5:a9:c8:c1:24:bd:d3:
87:a3:8c:76:55:b2:63:45:8b:ec:58:79:7c:d0:5f:
2e:6d:bb:2e:15:97:a2:96:de:26:55:a7:95:aa:a0:
1e:97:18:25:ad:5c:71:45:64:ab:ba:fc:3b:37:51:
72:cf:94:52:6d:0c:46:f3:9e:c2:f1:25:f2:14:cd:
55:6c:17:f6:16:1b:f2:38:0a:19:1b:b1:47:53:a0:
90:f1:32:1c:68:3f:e1:11:e2:00:ca:09:af:21:aa:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:26:15:97:37:B1:25:F6:5A:3A:DA:95:C9:B9:36:39:56:F3:57:0E
X509v3 Authority Key Identifier:
keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:58:f7:ca:ae:4d:0c:5f:9c:5a:7d:e6:20:4c:8d:13:69:
83:c7:94:4e:7e:a0:4e:18:b7:a6:84:02:15:49:eb:d4:b3:ba:
f1:5b:76:c6:1d:e9:3d:95:63:59:77:66:f2:4e:26:4f:db:29:
91:3c:29:09:17:ef:4f:35:e5:1a:87:08:62:c0:4c:f9:11:54:
b2:06:c8:fd:c6:ee:85:b0:c8:eb:c4:85:0d:03:37:4f:f0:95:
fe:39:89:ec:bc:0b:ec:2f:8d:57:86:97:1f:e8:11:52:17:4c:
55:ac:47:04:3a:97:9a:9f:aa:df:55:cc:2a:9d:f6:e9:d5:f0:
ff:97:b9:ab:a5:2c:df:85:82:42:e2:2e:c7:53:60:95:99:3c:
1f:9d:48:76:09:42:8b:06:ba:93:b2:fe:27:d4:40:1a:2e:f9:
f1:74:04:2b:15:b4:36:bf:75:79:06:82:97:fb:a5:85:54:9f:
1d:9a:ac:bf:04:30:11:e8:1c:0c:ea:97:52:d4:02:2b:00:8e:
f0:68:5d:63:ed:7d:cf:a5:d2:6f:df:7b:d7:1e:c4:27:24:19:
ac:37:26:49:8b:80:8e:6f:e0:6a:79:3a:9b:50:e4:00:b4:6b:
e7:70:18:f8:49:2e:ff:44:0c:44:0b:30:0f:fb:1e:27:7e:43:
a7:fc:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:46 2026 by rpki-client