
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json)
Hash identifier: o2+IQfE9nNPRBUF2EMxdjJZmO3aq2Wu+mMiYqSmMAf4=
Subject key identifier: 96:D5:04:5E:E0:20:39:5C:FF:79:15:6F:B8:CE:DF:F3:F3:86:0D:59
Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
Manifest number: D7
Signing time: Thu 19 Feb 2026 05:01:53 +0000
Manifest this update: Thu 19 Feb 2026 05:01:53 +0000
Manifest next update: Thu 26 Feb 2026 05:01:53 +0000
Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: qEHh6dZIVX2zCm6IUAlY6K8BYorLWnY+nMIYlpHRuq4=)
2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: pdz5V/JZhY7Gds0wNkXeGw7VMWhzxu7bURYipssNojI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Validity
Not Before: Feb 19 05:01:53 2026 GMT
Not After : Feb 26 05:01:53 2026 GMT
Subject: CN=69969941-e19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:12:f4:63:ee:cf:fc:1f:47:ff:bb:64:dd:
14:f5:86:bf:6f:eb:ec:9e:85:d9:47:59:7a:fa:50:
91:0e:11:76:66:48:c9:d4:d4:27:e2:2f:1a:d6:f2:
4b:c1:aa:f9:48:78:17:cc:c0:88:d2:91:11:0d:01:
58:00:b5:94:88:63:8b:f4:10:e6:43:fc:df:24:31:
b8:5d:3c:0d:40:e6:96:49:93:15:f3:59:91:0d:59:
23:02:de:62:b0:96:c9:76:8a:a0:8d:33:3e:33:e5:
7b:d5:f7:7d:fa:74:78:bd:d7:e5:22:c4:de:74:c8:
3c:28:a2:08:f1:eb:87:e7:a3:3e:09:f2:f7:a0:55:
19:51:51:e3:aa:a1:0a:ff:89:25:df:99:71:7e:99:
7a:6e:3e:b7:74:a4:25:6d:ec:3d:a9:29:c7:cf:12:
42:18:a5:6a:a2:34:8f:cf:01:76:41:ab:c6:91:52:
24:26:38:17:3e:eb:59:4e:c9:4b:03:c4:6c:a5:91:
95:12:f6:1f:e8:20:a7:44:03:b8:1f:f8:98:fb:eb:
64:05:54:1b:f4:77:55:a7:c2:31:55:1e:9d:64:77:
2a:e3:80:50:9b:7d:9b:45:3a:67:cc:ea:e8:2a:e8:
28:37:c0:45:d5:44:bf:4f:2c:8f:d3:d3:68:b1:53:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D5:04:5E:E0:20:39:5C:FF:79:15:6F:B8:CE:DF:F3:F3:86:0D:59
X509v3 Authority Key Identifier:
keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:24:17:bc:59:3d:a5:ff:78:04:df:8f:3d:12:8d:2c:c2:3d:
0c:de:8e:c3:32:f1:ed:34:b3:84:66:9a:f5:22:21:c6:a1:e1:
bb:36:99:de:c9:fd:a3:f4:2f:79:e5:43:94:65:9c:4d:be:a4:
13:d6:eb:ec:be:37:58:03:33:81:f6:20:78:8c:1d:a7:0b:15:
91:65:d2:e5:0e:cb:84:cc:9e:f2:9e:9e:4f:40:ea:8e:e8:bc:
65:51:28:1c:6e:2d:6a:ad:8f:61:9f:19:9c:43:98:23:14:3b:
93:f1:86:8b:32:44:40:1f:90:10:23:65:df:d5:68:33:3e:9f:
a4:88:40:ad:ac:5a:db:ee:b7:50:f1:24:c2:54:5e:5b:f8:2e:
11:23:17:82:ab:57:3f:dc:6a:08:3e:86:43:58:83:fa:29:a8:
86:19:1f:4b:7f:b4:be:7e:00:b1:86:37:da:74:b1:71:77:44:
97:92:07:84:34:e8:96:d5:8d:7d:d3:6a:83:04:a2:91:90:20:
d4:13:22:a6:ce:11:ec:d8:45:92:db:0f:eb:83:72:68:57:9d:
de:c5:48:0d:68:d6:0c:0d:60:10:8d:4f:91:4f:5d:69:6a:c9:
fd:ab:84:89:9c:9c:6d:dd:e4:77:71:0d:06:7e:f2:ac:34:11:
44:5f:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:24 2026 by rpki-client