
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
File: 320AK7yrolDSrmtEVOPL_WfSx-o.mft (raw, json)
Hash identifier: 26w4E+69XFES2Ls5o7VRd6dW5eAZCPSyurDxjUbX9a4=
Subject key identifier: 17:3B:DC:9A:55:EA:54:D4:78:57:6D:D0:4E:80:09:BE:77:5F:CC:83
Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Certificate serial: 0A1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
Manifest number: 0A10
Signing time: Wed 18 Feb 2026 19:22:13 +0000
Manifest this update: Wed 18 Feb 2026 19:22:12 +0000
Manifest next update: Wed 25 Feb 2026 19:22:12 +0000
Files and hashes: 1: 320AK7yrolDSrmtEVOPL_WfSx-o.crl (hash: 0tFkCyL5uo/I3VC9Y8TfmRWhr/Bm+EtHsTuN7DA7oWI=)
2: C07738FE9F4511EB88EBCA76C4F9AE02.roa (hash: 4EX6NY3ufYSUTvJdu2riLSr05m0sa3A6m+1xwUYJIdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587 (0xa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Validity
Not Before: Feb 18 19:22:12 2026 GMT
Not After : Feb 25 19:22:12 2026 GMT
Subject: CN=69961165-cc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:d9:8b:f1:a1:84:18:65:02:93:60:7d:f6:
b5:21:10:c4:39:7e:b1:19:17:67:85:ad:69:bd:cc:
fe:20:7a:c9:49:66:6e:ff:9f:00:0e:5b:e0:87:83:
41:05:a5:01:34:df:bd:63:ab:1d:27:4b:c2:77:81:
e0:3f:ca:bc:49:d7:bc:0b:9b:2b:dc:19:06:5e:43:
33:b6:e9:73:46:f2:f2:98:0f:67:09:b3:34:33:b7:
95:a7:7e:5f:34:a1:22:bf:d5:7f:96:17:b4:e5:35:
10:ad:38:f1:9b:c0:d1:b9:a9:e5:e9:4a:50:30:3e:
d1:d8:25:64:d5:19:e0:82:1c:89:6e:f5:2a:92:41:
9d:51:d1:bd:d5:02:c9:26:b9:46:96:61:46:93:e7:
d0:5d:10:29:77:f5:ab:fc:b2:4b:59:d2:1b:29:ce:
da:8e:f8:b2:c1:18:fb:0a:a8:ee:77:7f:0b:3c:75:
e1:34:e4:fc:0d:56:04:ad:ad:aa:31:e6:cd:d1:20:
c0:e4:18:73:f8:8f:f6:c4:ab:0d:76:3f:f7:d4:08:
71:c1:85:a4:7c:4f:12:a5:1e:22:de:b2:f5:a6:d5:
85:e8:78:34:37:21:78:45:a9:49:a5:07:26:2d:eb:
fb:67:16:b7:3b:26:07:68:7b:4e:8a:62:03:77:84:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3B:DC:9A:55:EA:54:D4:78:57:6D:D0:4E:80:09:BE:77:5F:CC:83
X509v3 Authority Key Identifier:
keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:93:d1:4e:6c:d8:7d:24:74:32:f8:95:51:05:5f:b2:ca:
a0:bd:14:5f:f0:5e:84:b8:b0:18:5d:38:88:bf:f0:f9:f1:ec:
c7:d8:8a:c9:f4:59:9e:c3:98:96:9b:b8:cc:ee:6a:e9:87:13:
6b:d5:a9:ca:fe:32:92:42:92:c1:3e:d1:ac:dc:c5:18:a8:9d:
89:a6:57:f6:b6:76:f3:bf:86:fb:21:00:3a:4d:9f:ed:53:80:
ac:e3:ea:4b:f9:af:a1:cf:7e:dd:7c:1e:1e:bc:cf:aa:04:97:
b8:89:6c:5f:5f:7f:cc:2f:18:db:7b:a7:aa:d3:d4:6e:79:cb:
cf:04:93:ee:bb:3c:8e:d4:5b:0c:e8:41:c0:91:3d:57:c3:66:
fb:d8:18:6e:da:94:4f:d3:ac:ce:35:3c:59:d6:8e:37:c0:b0:
a4:11:f4:93:91:0e:5d:eb:ca:f4:fa:77:0e:e1:38:61:e6:c0:
bf:f7:dc:05:39:0d:2c:06:1f:4a:d6:e1:8d:cf:37:2c:2d:31:
6c:46:08:f2:56:19:2b:4e:2f:da:d7:2a:ee:7b:e2:60:1c:d8:
0d:95:11:be:b1:46:30:cb:f3:c1:f1:6a:20:5a:3b:75:4c:da:
6e:5f:72:ac:41:84:5c:46:fe:f7:14:e3:46:4b:41:e2:b6:ac:
85:5d:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:21 2026 by rpki-client