
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json)
Hash identifier: DVdIh8iEfEeaysKTnDt9ktjYMTmz0AebBuuvau170+Q=
Subject key identifier: 9F:9E:2E:AB:13:D7:22:99:5E:C5:2C:D9:4A:D7:38:C6:FA:96:99:84
Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93
Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693
Certificate serial: 07E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
Manifest number: 07E0
Signing time: Wed 18 Feb 2026 20:43:17 +0000
Manifest this update: Wed 18 Feb 2026 20:43:17 +0000
Manifest next update: Wed 25 Feb 2026 20:43:17 +0000
Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: Nz/7YHSUGDYPFhpg/9Jn+L7b0lBV2/dK6MaSqjXeucs=)
2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: QadRAteDkMr+/Vf11v/PSiWZ5qLyjgZNySKVRInle2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl
rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693
Validity
Not Before: Feb 18 20:43:17 2026 GMT
Not After : Feb 25 20:43:17 2026 GMT
Subject: CN=69962465-a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:5e:34:85:87:8b:39:66:1c:3f:97:a6:af:
12:a6:ad:d1:fc:af:fa:79:88:48:7e:3b:1a:4c:7d:
b0:71:94:c3:ce:c2:6a:4c:94:17:2e:c9:be:1c:a4:
22:37:bd:47:ef:c0:af:68:f4:d0:b9:c4:f2:58:17:
60:0a:5b:33:ca:48:3f:1f:b1:aa:4e:3b:ba:c4:0c:
ee:45:dc:b8:de:f3:f5:b1:6d:d1:4f:5d:4a:7d:aa:
da:62:5e:41:43:bc:88:27:5d:45:66:fe:f4:b1:6f:
53:24:be:57:0e:02:08:e1:50:1f:78:b9:99:c8:95:
e2:7b:12:42:41:ee:10:af:da:96:6e:c4:7b:4d:d8:
8e:1c:24:dc:b7:47:8c:6c:e0:37:01:30:78:29:38:
25:8d:8f:1e:56:d8:db:5b:00:46:bc:b4:4b:f9:d5:
77:c6:0e:a3:99:d1:a2:db:c8:69:45:ad:39:ec:c9:
a9:57:ce:21:91:45:db:96:f2:11:dc:75:8b:5d:47:
dd:2c:7a:6a:48:02:35:0a:88:4e:3a:2c:7e:12:8e:
b4:19:82:f2:7e:99:57:80:15:cf:11:35:d9:4d:ca:
9d:3a:db:18:83:b1:94:49:7a:e4:26:7c:12:59:07:
26:56:97:3c:28:68:e0:18:ea:bf:53:7e:58:14:0f:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9E:2E:AB:13:D7:22:99:5E:C5:2C:D9:4A:D7:38:C6:FA:96:99:84
X509v3 Authority Key Identifier:
keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:eb:36:95:80:91:1b:04:cd:d8:f2:07:9e:cc:af:c1:9e:be:
9b:44:33:92:a7:f7:51:41:29:5f:3e:7d:13:3b:71:95:61:42:
59:67:c5:09:51:0f:5b:e3:d2:4c:8b:ee:6e:2b:a8:64:97:04:
f8:7d:51:eb:cd:16:b9:4b:1b:77:a1:e1:d7:00:77:fb:d2:83:
fe:14:90:11:d9:81:e9:2f:5a:57:e7:91:6a:c5:c8:f6:15:7c:
3a:00:e2:1d:6d:6a:31:4f:bc:93:97:0b:b2:92:d4:12:78:ec:
93:9e:5b:e6:3b:cc:bc:4a:f9:45:26:8a:ac:3f:bb:0f:09:2f:
b3:af:cc:a5:1c:99:e2:3a:72:c6:91:5b:7a:33:82:d0:b9:0e:
58:54:e2:d1:0e:4c:b2:7d:af:8f:71:bf:21:11:39:01:e3:07:
9a:bc:d3:aa:63:18:98:d7:ba:55:0d:2d:58:d3:4b:8e:34:0a:
7c:83:ed:c5:bb:31:d2:0b:49:d4:86:f6:7f:54:ce:c3:b0:9b:
f5:79:bf:1c:ce:ee:01:42:57:cb:fd:3e:52:12:6a:f4:5d:cd:
43:b2:33:5d:f2:2e:57:6f:94:33:e1:85:fd:69:2c:2c:cc:0e:
f1:f6:60:2d:a5:d0:54:8c:6c:9e:ae:36:97:34:c8:61:f4:1e:
08:9a:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:03 2026 by rpki-client