
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier: NRSmX8yBsu3Z9rgT5Twg8+siLEu5juxGd6gS6vyLciU=
Subject key identifier: 64:9C:C1:FD:93:17:60:D6:09:4A:3E:2E:3C:EA:C5:59:87:D1:8D:D7
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial: 1E5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number: 1E4E
Signing time: Wed 18 Feb 2026 15:54:47 +0000
Manifest this update: Wed 18 Feb 2026 15:54:46 +0000
Manifest next update: Wed 25 Feb 2026 15:54:46 +0000
Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: hO/j/YKTa2Gowl2Dz7f7vzDJR9PhL+vvZUMOFtOfUKw=)
2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7772 (0x1e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Validity
Not Before: Feb 18 15:54:46 2026 GMT
Not After : Feb 25 15:54:46 2026 GMT
Subject: CN=6995e0c6-f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:f8:a1:d5:0a:4f:67:09:75:e3:87:26:9e:
85:e1:1e:0c:65:ed:ba:e2:48:b0:0f:87:86:16:67:
c0:dd:3c:b8:af:10:8f:4b:73:08:26:b9:6a:cb:6d:
fd:05:40:2d:6f:81:ea:68:d0:1d:11:2f:5b:0f:c5:
46:f5:7c:8f:51:a8:b3:20:6d:01:51:28:f2:a8:94:
ac:82:da:8e:3b:d3:54:0b:55:8c:14:0e:71:a5:f3:
e8:c9:12:23:40:3b:10:0b:4f:33:ab:e9:00:13:80:
8f:0e:20:4e:4f:36:3e:27:67:c3:eb:fd:61:19:a4:
e8:40:cf:0b:d9:24:0e:76:cf:54:b4:d5:5a:3a:9b:
9b:db:b5:f3:b9:88:b9:0f:ca:40:54:67:e8:5c:c7:
03:2a:c5:80:3c:03:14:cb:05:cb:44:b4:d4:73:7e:
86:dc:ca:42:c2:fc:fa:e9:ca:ba:3b:4d:ef:df:1f:
68:43:84:af:d4:fe:48:fa:d8:03:90:1b:e9:1d:7a:
a9:d9:92:2e:b0:97:41:57:69:d0:4f:8e:aa:ca:a0:
1b:f7:42:72:89:78:80:f6:07:a2:a5:92:57:d4:71:
f3:ce:1c:f3:76:35:fe:6d:d7:51:b4:74:2c:3f:7c:
3e:eb:92:7d:f8:21:ca:a1:4e:4d:3c:59:2e:aa:22:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:C1:FD:93:17:60:D6:09:4A:3E:2E:3C:EA:C5:59:87:D1:8D:D7
X509v3 Authority Key Identifier:
keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a3:d4:ad:e8:38:77:73:d5:8e:23:35:fa:47:1f:5b:5a:1d:
11:56:92:69:10:9c:d1:9b:32:01:ed:43:ca:23:d2:44:d4:0e:
e5:eb:a1:12:4b:55:21:e9:01:98:da:df:ee:b8:53:8c:16:da:
f4:09:5b:4f:e3:6a:7d:cf:89:f7:47:49:f2:7e:ff:7d:c2:d1:
f2:04:c8:ab:e1:9f:ea:6c:53:40:81:06:be:c1:ac:4a:78:0d:
39:30:96:ff:d8:7e:9d:e7:4d:07:f8:16:eb:bd:be:20:ec:0c:
6c:3b:c3:2c:9a:88:08:3e:d4:74:7c:f9:6f:79:cb:65:cf:e5:
6a:cf:a8:2c:0f:85:a3:da:9f:66:0a:bb:ab:9d:22:bf:9f:5a:
dc:86:25:47:0c:d7:5a:09:ba:74:4b:b6:b9:50:b7:2c:ba:5d:
aa:61:dc:1a:7d:e4:38:fd:f8:1e:8b:08:26:e8:3e:18:e5:ac:
12:87:13:f3:5b:b6:2d:ca:7b:d7:aa:a7:8f:4f:0a:35:e7:23:
27:90:82:99:82:80:2f:df:37:6a:58:12:ba:fb:e9:fc:9f:22:
ba:60:15:7f:0c:e6:4d:ee:ab:2b:5b:a5:4d:38:ec:56:34:d2:
18:cf:39:18:bc:44:8b:6d:a3:75:eb:eb:08:25:29:0d:05:d4:
68:7d:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:10:06 2026 by rpki-client