
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
File: khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json)
Hash identifier: ymrPbFOZAQIbqf/eNWLysjF2F6EqtKrZODK7wLfF99c=
Subject key identifier: 33:DF:D7:EF:76:59:76:2C:9A:22:A8:F9:11:EF:8C:E0:F6:7B:5D:DC
Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
Certificate issuer: /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
Certificate serial: 042C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
Manifest number: 0422
Signing time: Wed 18 Feb 2026 23:38:55 +0000
Manifest this update: Wed 18 Feb 2026 23:38:54 +0000
Manifest next update: Wed 25 Feb 2026 23:38:54 +0000
Files and hashes: 1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: f+jvFysVvnpZFqtprDLchjqcMJLfnSDoQJhQTkaJVno=)
2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: 1Pf8TzmStlNv8sOjb51A77gXMYXTgCciVVvajyk1hsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl
rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
Validity
Not Before: Feb 18 23:38:54 2026 GMT
Not After : Feb 25 23:38:54 2026 GMT
Subject: CN=69964d8f-5b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:d1:bd:c7:87:cc:0c:77:be:4b:64:af:b3:
05:fb:42:ab:ee:9d:44:9e:6d:ff:86:d4:c5:6c:b3:
11:3a:ce:48:79:9d:0d:f8:8c:25:d2:aa:19:db:36:
1b:c9:82:26:73:f0:60:14:ab:45:1c:e8:31:2a:d4:
d3:5d:91:1e:ae:ff:b2:37:ee:79:49:39:0a:94:be:
27:07:9c:59:18:be:10:18:0a:82:81:e3:05:f8:7a:
9b:e7:10:31:03:a8:3d:b9:ed:90:f5:47:b1:21:62:
f2:03:b5:ba:3b:22:47:e5:92:11:04:32:84:1f:34:
15:ec:36:d9:5b:f5:d9:af:10:03:18:46:90:79:1b:
10:ca:49:66:23:b8:f7:f8:e2:4f:cc:c5:e9:5b:77:
13:38:42:08:c8:76:7d:47:8e:9d:6c:c6:7d:73:c1:
a6:67:d6:ab:34:05:8d:e1:76:51:80:94:08:68:09:
18:fe:f1:04:72:e9:e5:9e:2a:3e:af:89:6b:c1:9c:
81:55:ba:56:db:c1:79:cf:fa:84:34:c6:51:2c:4e:
09:c1:26:97:40:54:b8:54:16:f6:c4:62:60:d5:ff:
0c:df:09:02:b4:8c:f8:a5:5f:8a:20:0d:8f:3d:36:
b6:34:88:62:46:54:a1:79:fc:cf:2e:b7:e2:93:bd:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:D7:EF:76:59:76:2C:9A:22:A8:F9:11:EF:8C:E0:F6:7B:5D:DC
X509v3 Authority Key Identifier:
keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:37:9c:ce:a4:53:cc:5c:ec:69:8f:92:47:81:e3:e3:88:fe:
03:66:c8:bb:6a:7b:13:f1:4b:d2:0f:5c:3c:f3:34:cd:04:06:
3a:d8:9b:0a:37:81:82:b5:87:8a:54:14:72:de:99:d1:13:d7:
c8:d0:ac:f2:b9:84:e0:79:dc:d0:fc:0f:eb:96:63:ea:a2:5b:
ff:c4:22:a1:65:92:26:e5:ee:63:f7:de:50:28:e8:07:f4:c3:
f9:8c:ec:4a:32:c3:85:af:ab:3f:ea:78:f0:8b:3b:eb:e4:ac:
e2:8c:e6:6e:11:b8:23:e7:81:e9:0a:37:4a:ac:ee:73:f2:7a:
b0:ed:f9:72:c6:d7:c5:d5:0f:fb:07:f8:39:f8:14:09:60:ae:
af:e8:7f:e7:75:8b:63:c3:6d:b6:da:f2:4a:8a:b7:d3:9d:31:
eb:f5:4f:a8:83:70:d8:a1:4b:33:03:8b:76:73:14:31:40:65:
ab:5f:9f:01:3c:17:d0:5e:05:0f:58:00:2f:05:c8:63:47:af:
3d:c4:d3:f2:67:77:a4:2f:05:10:5a:9e:7f:86:b5:cf:f1:a6:
b0:85:d1:99:56:93:3c:4d:cb:39:89:a4:df:f9:5e:0c:7d:8e:
bc:33:d0:12:4c:be:67:d2:59:df:b2:81:cf:c9:81:e2:81:da:
e6:45:66:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdCMzkxMTAvBgNVBAUTKDkyMTc0MTg0NTlBOENBOTIyRTBENjZBM0NCQUE0MDY3
MjBDQjQ4OTAwHhcNMjYwMjE4MjMzODU0WhcNMjYwMjI1MjMzODU0WjAYMRYwFAYD
VQQDDA02OTk2NGQ4Zi01Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr0bRvceHzAx3vktkr7MF+0Kr7p1Enm3/htTFbLMROs5IeZ0N+Iwl0qoZ2zYb
yYImc/BgFKtFHOgxKtTTXZEerv+yN+55STkKlL4nB5xZGL4QGAqCgeMF+Hqb5xAx
A6g9ue2Q9UexIWLyA7W6OyJH5ZIRBDKEHzQV7DbZW/XZrxADGEaQeRsQyklmI7j3
+OJPzMXpW3cTOEIIyHZ9R46dbMZ9c8GmZ9arNAWN4XZRgJQIaAkY/vEEcunlnio+
r4lrwZyBVbpW28F5z/qENMZRLE4JwSaXQFS4VBb2xGJg1f8M3wkCtIz4pV+KIA2P
PTa2NIhiRlShefzPLrfik73SMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPf1+92
WXYsmiKo+RHvjOD2e13cMB8GA1UdIwQYMBaAFJIXQYRZqMqSLg1mo8uqQGcgy0iQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0IzOS9BNzU5OUQ3QUEw
MzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lwSXVEV2FqeTZwQVp5RExT
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2toZEJoRm1veXBJdURXYWp5NnBBWnlETFNKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0IzOS9BNzU5OUQ3QUEwMzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lw
SXVEV2FqeTZwQVp5RExTSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYN5zOpFPMXOxpj5JHgePjiP4DZsi7ansT8UvSD1w88zTNBAY62JsK
N4GCtYeKVBRy3pnRE9fI0KzyuYTgedzQ/A/rlmPqolv/xCKhZZIm5e5j995QKOgH
9MP5jOxKMsOFr6s/6njwizvr5KzijOZuEbgj54HpCjdKrO5z8nqw7flyxtfF1Q/7
B/g5+BQJYK6v6H/ndYtjw2222vJKirfTnTHr9U+og3DYoUszA4t2cxQxQGWrX58B
PBfQXgUPWAAvBchjR689xNPyZ3ekLwUQWp5/hrXP8aawhdGZVpM8Tcs5iaTf+V4M
fY68M9ASTL5n0lnfsoHPyYHigdrmRWZm
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:40 2026 by rpki-client