
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier: vpvC9E3v7yuzyTCaMzg3VqA+GLyBrts++C9iDGpP0Pc=
Subject key identifier: A4:F2:58:FA:56:00:B5:DC:C8:5B:B0:16:3C:D0:37:50:0D:AE:DE:09
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial: 030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number: 0308
Signing time: Thu 19 Feb 2026 00:22:27 +0000
Manifest this update: Thu 19 Feb 2026 00:22:27 +0000
Manifest next update: Thu 26 Feb 2026 00:22:26 +0000
Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: mYte2zWpVJh+q79jruNH4peNwnz2siVV4+G8EDFoQ7k=)
2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: XQQlM6hNFAUKcUE8JK0r1I7v7DiMWYg0+Wov0CdSVM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Validity
Not Before: Feb 19 00:22:27 2026 GMT
Not After : Feb 26 00:22:26 2026 GMT
Subject: CN=699657c3-ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:28:dc:7f:80:61:98:37:30:f3:e7:f1:f1:
ba:9d:3a:53:ef:a2:d3:ed:c4:4e:e8:ca:a4:ee:bb:
1b:93:35:a6:e7:e6:10:5a:6b:80:ca:27:9e:b2:27:
21:23:97:0e:ca:ee:7c:50:54:1c:71:db:15:8b:44:
bb:95:6b:cb:a8:70:9f:2b:13:1b:17:a8:e8:b7:29:
be:f6:fc:61:32:80:66:cb:b8:31:60:11:9c:06:13:
31:34:c4:4a:63:45:56:4b:15:57:be:14:c1:81:66:
34:65:59:c3:d1:b3:7a:c6:cc:e5:5f:e8:17:61:1d:
54:b9:40:bb:d3:19:e8:c9:38:11:08:ab:83:f7:c8:
62:aa:a7:03:92:b5:e1:5c:f5:5a:ac:63:aa:6e:80:
99:6d:4e:9e:85:12:bd:cc:23:b8:d4:db:d6:2f:27:
49:e4:18:ce:26:65:9e:f0:23:f5:f2:75:d4:7c:01:
2c:51:e7:c0:a3:06:02:24:c9:c1:fa:62:39:73:66:
1e:de:43:13:33:af:a7:05:80:10:14:08:5d:57:a2:
bc:56:0e:8d:72:b5:63:a5:ee:4f:ff:70:e1:1f:d9:
77:af:05:94:fa:06:7a:2b:8f:64:ee:ec:bf:6a:25:
fd:2b:2a:1b:8e:fd:4e:09:cb:8b:52:21:0a:ed:01:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:58:FA:56:00:B5:DC:C8:5B:B0:16:3C:D0:37:50:0D:AE:DE:09
X509v3 Authority Key Identifier:
keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3d:f4:94:55:71:25:20:09:2f:f0:f5:95:e1:e8:cc:7d:5d:
78:0f:64:c1:64:7d:76:4f:61:60:29:62:cd:23:ea:ae:94:ad:
19:12:91:8d:1f:6f:39:80:83:fe:c4:b8:2f:ff:8a:f3:bb:d2:
c6:65:0f:95:98:46:8c:36:57:f6:e0:ad:6f:6b:cd:e8:fc:4b:
f4:07:5d:9c:f0:cc:12:d8:69:04:bc:67:75:53:b7:e5:d2:cb:
87:c9:7f:4d:20:66:d5:15:6e:6e:31:08:e1:63:94:e6:fb:c2:
58:89:29:9d:f6:b2:00:91:82:d8:2a:47:07:e8:f0:3d:cb:d7:
95:d8:eb:1b:73:18:3b:8f:99:94:b1:5a:fa:ce:9e:cb:50:73:
1d:99:57:90:6b:9f:05:60:e2:d3:f1:f0:1d:88:cd:e3:fa:32:
7c:d7:28:a5:ab:27:aa:69:65:bd:85:30:c6:df:24:04:fc:0c:
66:2b:a0:ca:00:6c:3a:ea:0c:4d:f8:46:95:69:f3:f5:82:9d:
51:ce:31:6f:9f:a8:d3:a9:5e:9a:b9:a9:db:15:5f:6b:e6:15:
81:3c:73:c8:a6:86:02:4b:65:1b:ef:29:c2:b2:01:83:80:b0:
0c:f8:ae:3c:a4:7f:b1:1b:21:34:0f:85:fe:83:a2:d3:aa:8a:
47:74:8e:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC
NkUwNTU2NTYwHhcNMjYwMjE5MDAyMjI3WhcNMjYwMjI2MDAyMjI2WjAYMRYwFAYD
VQQDDA02OTk2NTdjMy1jYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYgo3H+AYZg3MPPn8fG6nTpT76LT7cRO6Mqk7rsbkzWm5+YQWmuAyieesich
I5cOyu58UFQccdsVi0S7lWvLqHCfKxMbF6jotym+9vxhMoBmy7gxYBGcBhMxNMRK
Y0VWSxVXvhTBgWY0ZVnD0bN6xszlX+gXYR1UuUC70xnoyTgRCKuD98hiqqcDkrXh
XPVarGOqboCZbU6ehRK9zCO41NvWLydJ5BjOJmWe8CP18nXUfAEsUefAowYCJMnB
+mI5c2Ye3kMTM6+nBYAQFAhdV6K8Vg6NcrVjpe5P/3DhH9l3rwWU+gZ6K49k7uy/
aiX9Kyobjv1OCcuLUiEK7QHzywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTyWPpW
ALXcyFuwFjzQN1ANrt4JMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5
OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw
WUFuQm9Dbmw3czIyNEZWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPPfSUVXElIAkv8PWV4ejMfV14D2TBZH12T2FgKWLNI+qulK0ZEpGN
H285gIP+xLgv/4rzu9LGZQ+VmEaMNlf24K1va83o/Ev0B12c8MwS2GkEvGd1U7fl
0suHyX9NIGbVFW5uMQjhY5Tm+8JYiSmd9rIAkYLYKkcH6PA9y9eV2Osbcxg7j5mU
sVr6zp7LUHMdmVeQa58FYOLT8fAdiM3j+jJ81yilqyeqaWW9hTDG3yQE/AxmK6DK
AGw66gxN+EaVafP1gp1RzjFvn6jTqV6auanbFV9r5hWBPHPIpoYCS2Ub7ynCsgGD
gLAM+K48pH+xGyE0D4X+g6LTqopHdI5w
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:57 2026 by rpki-client