
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
File: ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft (raw, json)
Hash identifier: viGEXPO2hTBj40AsZR1mDvruQl1FBOZMrVqRDCA+gxA=
Subject key identifier: 9F:05:30:A4:24:47:A6:F0:66:B8:E4:4C:E7:36:4F:29:48:05:2F:B3
Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
Certificate issuer: /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Certificate serial: 10FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
Manifest number: 10F1
Signing time: Wed 18 Feb 2026 17:01:45 +0000
Manifest this update: Wed 18 Feb 2026 17:01:45 +0000
Manifest next update: Wed 25 Feb 2026 17:01:45 +0000
Files and hashes: 1: ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl (hash: hXdAIJmirSQZgQp0bgAoNfnlVdmWIEdFAc8RHcHS5KU=)
2: 39C6EF3688BF11EABC04973FC4F9AE02.roa (hash: yd71n8eugD8WrOND6JHlcb+DlT4vihP97eJVROksTM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4347 (0x10fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91D, serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Validity
Not Before: Feb 18 17:01:45 2026 GMT
Not After : Feb 25 17:01:45 2026 GMT
Subject: CN=6995f079-4d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:59:95:33:23:37:85:4a:28:32:77:44:6f:
37:a0:69:b0:84:76:5d:a9:88:76:27:c3:88:6e:d0:
f5:ce:fe:06:7f:8a:43:e2:b2:f8:98:08:5b:ec:3b:
6d:b6:90:0d:ab:a9:13:2f:85:44:f9:97:f2:ba:dc:
f9:ab:42:42:2f:41:41:55:a3:da:3d:ca:86:2f:64:
61:db:4c:85:23:6d:29:05:8b:7d:8a:64:eb:5d:49:
20:aa:db:e4:9b:0c:03:6e:81:94:92:11:10:c6:0e:
f1:b4:5c:1b:d7:c5:93:ea:65:4c:64:c4:8d:1b:12:
d0:f3:f2:af:c0:ba:79:2a:20:62:b3:62:15:cd:d3:
3e:bb:97:a7:84:7f:9c:8b:2e:28:bd:ac:4d:0e:4e:
ec:48:5b:06:1a:04:6b:0f:2f:02:47:c9:87:de:7d:
8a:01:d0:81:0b:b5:ee:d4:ab:d0:2f:e9:f3:ed:80:
19:33:b1:e0:24:42:7a:5e:42:d0:d3:d1:85:99:12:
21:55:b7:5d:4b:44:76:42:3f:ff:c5:b3:d1:a8:12:
54:71:a5:d3:58:31:91:3d:13:e6:72:dd:b9:c6:27:
f6:d8:a6:be:61:ee:9a:8b:66:92:f9:89:1a:0a:6d:
bc:79:b8:4b:29:ce:c5:69:48:ef:18:8b:25:71:44:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:30:A4:24:47:A6:F0:66:B8:E4:4C:E7:36:4F:29:48:05:2F:B3
X509v3 Authority Key Identifier:
keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:65:9a:af:67:5f:9a:c1:9d:2c:bf:09:6a:97:b2:fd:87:
80:e8:c2:3d:c4:d9:94:72:4b:65:c6:bd:3d:50:cb:a5:29:15:
10:93:1a:7d:55:c3:0f:72:dc:98:34:13:ca:a9:1a:59:d0:52:
2c:83:4f:3d:0d:b2:14:f5:d9:a2:9c:16:d1:c4:27:ef:f2:42:
5b:ea:f5:04:ed:d9:1e:f3:5d:9a:e4:4d:54:73:fc:72:0a:ad:
9a:f1:d3:a6:a1:2c:7d:2a:39:ec:73:ae:a1:d2:4c:a4:f2:0e:
7e:72:6e:86:c4:93:c0:43:d3:eb:6a:9e:bb:f7:e3:ca:11:b3:
95:ca:8c:8a:8c:21:73:08:80:86:8d:06:66:45:1e:9b:54:0d:
12:08:08:64:87:8d:fb:cd:d4:3b:98:10:1d:9a:04:a3:84:d3:
89:9f:7d:84:66:21:97:b6:c5:21:b9:df:dd:fb:ab:cb:ba:39:
0f:27:63:da:22:91:9e:09:30:cb:72:8f:4e:e4:1c:d8:5c:f9:
80:37:a7:b7:9f:ba:55:f3:c1:37:67:20:8e:09:5c:c5:74:74:
25:ef:bb:0e:bd:89:2a:51:f4:b6:89:89:ec:79:af:75:75:70:
e8:23:cc:f0:9c:76:a3:d0:64:bd:f4:2a:9b:f2:8a:e7:ce:ef:
79:66:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:00 2026 by rpki-client