
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: +NaknaVR7BTO2K8qp4niAw20danYcFfbZ366fuVAEuE=
Subject key identifier: A4:99:26:19:F0:6A:39:A3:B0:9E:FC:47:00:53:22:2B:67:73:7F:4F
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 0105
Signing time: Thu 19 Feb 2026 05:31:27 +0000
Manifest this update: Thu 19 Feb 2026 05:31:26 +0000
Manifest next update: Thu 26 Feb 2026 05:31:26 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: Szq598vIac5LQRCK3U3+Tav8nWETwk06KXXEi7+qbkU=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: Pfjf+uT2FJ37bKCWUO5U5mS87PiG4qwF5/TAHkihGtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Feb 19 05:31:26 2026 GMT
Not After : Feb 26 05:31:26 2026 GMT
Subject: CN=6996a02f-88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:dc:6c:2f:bc:44:5a:59:ac:a3:b2:53:56:
fc:51:2d:72:f4:f4:ac:29:ad:db:d1:9a:fb:e5:5f:
3e:84:4d:cd:69:5c:7e:10:d8:44:fc:c1:c8:24:c0:
3a:67:a0:a6:a7:1f:69:c2:96:80:6f:69:6a:9d:c8:
df:16:22:ec:58:61:d8:5a:b7:9b:ef:e9:2e:b6:9a:
3c:d7:78:99:8e:40:e1:03:d9:19:41:e2:c8:2a:1a:
ab:9a:a6:c2:1b:9d:26:47:0a:f5:cc:83:c9:29:3a:
28:28:64:dc:43:73:09:f6:c0:30:9b:15:8d:61:97:
6d:0b:78:57:13:b5:e4:19:58:46:53:ba:be:86:27:
06:e6:9b:48:0d:93:1a:b6:85:a5:03:b8:5e:75:32:
14:a7:a1:01:4f:2a:44:40:ca:18:74:85:cf:6e:48:
70:f3:e3:b0:50:ad:b7:57:de:dc:e3:fb:34:25:d4:
85:d4:4d:95:d5:33:03:49:8c:32:fb:b1:e1:2b:19:
f7:9d:fb:30:61:c7:38:db:64:50:db:3d:39:70:7a:
02:1c:a4:47:77:bf:0a:71:64:e8:f4:86:2f:7d:c6:
48:df:1e:ea:34:b8:d9:a2:f6:11:fa:ff:ab:29:a6:
17:b9:02:80:5b:6b:eb:28:36:8c:f6:17:a7:95:b7:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:99:26:19:F0:6A:39:A3:B0:9E:FC:47:00:53:22:2B:67:73:7F:4F
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:8b:fa:b0:f8:11:53:9e:43:eb:7b:35:30:e1:fb:7b:88:
db:0d:82:af:5c:ca:e3:27:b7:88:e1:8d:e7:27:60:a4:72:78:
e7:f1:fb:e7:51:8d:de:2e:98:5e:94:c8:a9:5c:a5:49:35:8a:
dd:58:b5:4d:7c:83:e5:e5:2d:cb:43:e5:3e:a9:7b:3c:62:09:
36:44:60:ab:07:7e:92:74:39:56:42:8d:6d:b2:27:50:83:67:
62:02:8d:77:5b:21:4a:d8:f7:63:1f:60:1b:b7:be:63:87:8a:
eb:1f:10:3c:5b:f6:12:04:53:3e:a3:32:f5:c4:cd:24:2b:7d:
f6:6e:65:97:86:9a:68:89:f5:4e:fa:56:78:28:df:83:7b:ec:
4c:3d:29:b1:44:85:ce:b5:f3:a4:50:e5:07:f5:96:eb:00:7d:
81:01:b6:86:18:24:9e:71:47:c8:9d:ef:a8:23:2b:9b:21:4c:
70:bb:7a:b2:95:a4:00:51:d7:17:2e:3d:b0:ab:62:09:35:d9:
10:cf:da:a9:cd:6e:cc:ac:1d:4d:4c:a6:05:66:e7:76:c6:8d:
25:0e:49:ff:34:a0:bc:fe:da:03:67:e1:cf:f2:f9:13:bc:24:
41:b7:be:84:79:63:ed:61:32:bf:ee:4e:8a:95:2c:fb:c5:70:
4b:63:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:43 2026 by rpki-client