
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier: +BCbRexr1Qd5DMvQr4tkx4K4sepKcYF1VSCKXOBf+4U=
Subject key identifier: E6:A4:47:91:36:C1:E4:E0:E4:E5:A1:8E:84:78:F0:EB:9A:D2:20:3C
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial: 0974
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number: 096D
Signing time: Wed 18 Feb 2026 19:37:22 +0000
Manifest this update: Wed 18 Feb 2026 19:37:21 +0000
Manifest next update: Wed 25 Feb 2026 19:37:21 +0000
Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: hfFvQxdwEwUF52sh/IuRxWCCwnTCo5gVOv5dukW/TuY=)
2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: aOqwloZ9sT/M1OqrjBKZ/MpZ3Pwla48CsTsMrgUxXsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Validity
Not Before: Feb 18 19:37:21 2026 GMT
Not After : Feb 25 19:37:21 2026 GMT
Subject: CN=699614f2-3179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:b8:06:46:29:56:41:39:c8:2c:bc:ec:b8:
49:f5:07:3a:5e:0d:62:7e:e5:84:0a:db:82:65:11:
b3:ea:f4:b0:80:5a:b1:cf:06:eb:43:03:8e:7c:bc:
a1:7b:81:89:17:d9:d1:90:7f:aa:3a:91:d0:00:d8:
9c:9a:71:7f:5b:76:ef:b5:e7:a6:86:9d:6f:7e:fb:
02:97:aa:08:29:54:2b:eb:84:67:54:d7:44:06:b6:
08:a5:0a:ce:ca:cd:9d:8c:82:df:66:b1:75:a3:ab:
b3:15:ec:2b:30:a7:60:4b:0e:f6:36:26:5f:2b:dc:
79:7b:fb:7b:23:dd:ab:c5:03:4c:71:bc:fb:3c:09:
2b:c4:2d:4b:a9:69:f6:7c:d2:ed:36:83:08:cf:79:
0d:d6:d0:aa:55:25:11:1a:e9:50:1b:3f:79:ff:a5:
47:59:f5:c1:e3:16:ed:29:85:fb:42:aa:5e:e1:97:
26:03:40:12:9d:9a:42:a1:ea:a9:55:7c:8b:47:16:
10:38:c1:ca:65:dd:c8:d0:55:fe:a3:2f:7e:1a:87:
6a:99:23:7e:ad:07:c3:c3:f2:a0:2e:24:69:5c:c7:
5c:ed:ff:6d:3f:ab:a9:71:af:01:ba:fd:9b:34:7e:
cb:65:31:51:da:d8:92:af:46:5a:6c:df:ee:35:ae:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:47:91:36:C1:E4:E0:E4:E5:A1:8E:84:78:F0:EB:9A:D2:20:3C
X509v3 Authority Key Identifier:
keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:5f:61:8e:ba:7e:91:f2:18:01:ce:a4:e8:c9:b3:f5:cf:
44:4d:51:16:a1:1c:d9:30:11:9c:47:b7:84:bb:17:d8:10:dd:
29:35:12:4b:f7:e6:eb:d7:13:42:a6:e1:33:8d:dc:d1:83:4e:
10:5d:69:1c:21:41:9f:2a:80:b5:ae:4f:1d:47:8a:99:6c:d4:
66:80:6c:de:ba:4d:76:e6:bb:79:f4:3c:1e:52:14:95:0e:cc:
66:53:21:ea:f1:5e:90:24:ec:95:cf:09:fb:7f:b4:88:46:47:
05:41:e5:9c:4f:9f:80:84:33:a3:77:e0:4c:bf:14:5c:aa:57:
29:44:e3:47:bb:76:1c:27:37:f6:ab:45:7b:ac:9e:12:8b:61:
f6:d6:00:69:2f:9d:66:be:db:22:7e:b2:f7:ed:d5:bc:31:90:
54:83:27:f1:8f:62:1a:98:63:c8:b3:45:1e:aa:28:4a:f5:b3:
51:63:37:d9:18:76:2d:b2:b8:77:a4:74:b3:be:00:29:f2:d9:
a2:2d:42:d8:be:1b:9a:a2:be:b5:2a:bb:28:67:7c:72:03:e4:
06:63:11:52:f4:00:ab:89:69:99:07:aa:01:a9:c1:cb:7f:0e:
88:e2:e6:44:85:e3:2c:0a:30:f2:34:69:dd:72:30:e1:a1:49:
3f:e5:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:27:49 2026 by rpki-client