
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json)
Hash identifier: DbsOQz9OrC7xXBS+8cICEUikK0yntBBIa3oW4galxcs=
Subject key identifier: A3:15:CC:F6:61:C7:9F:7F:6D:20:DB:0F:AB:60:C6:ED:A4:B9:8C:88
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
Manifest number: 60
Signing time: Thu 19 Feb 2026 06:21:45 +0000
Manifest this update: Thu 19 Feb 2026 06:21:45 +0000
Manifest next update: Thu 26 Feb 2026 06:21:45 +0000
Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: 3E/vBAATFzTs8JWxCEAZW3oJqxx97ri/EBwOQrp8WiQ=)
2: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: E4IkE6FRMTE0lAhudQztXcTO2n4pZjttFwQTGBoNBn0=)
3: 442749147D6311F0BC413466C4F9AE02.roa (hash: U/qMD7uylhtZUr24KZzqo+D5k35qqAvh49xpiigrEd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Validity
Not Before: Feb 19 06:21:45 2026 GMT
Not After : Feb 26 06:21:45 2026 GMT
Subject: CN=6996abf9-9b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:d8:16:52:0a:4d:5d:24:37:cf:e3:6d:30:
3a:d1:4d:62:43:d9:63:ee:c5:8b:52:46:33:4d:cc:
27:9a:6f:54:2a:92:65:99:e3:e7:54:06:9f:bc:b8:
6e:13:59:37:73:21:16:db:98:9b:1f:f3:2c:c4:74:
49:10:d3:a5:53:8a:33:16:6f:9d:9a:0c:8e:cc:08:
75:ac:0b:9c:6f:09:69:14:a8:00:a0:6a:cd:3a:8f:
98:85:19:94:36:b1:ed:15:fb:24:d0:87:84:ba:11:
6a:80:60:b6:0f:68:b3:10:91:64:42:e2:3a:df:b3:
d0:d0:54:b3:9b:c5:38:72:b0:2d:37:82:7c:58:7c:
c7:db:88:58:cb:e3:b9:c9:7c:f5:b5:33:89:78:ae:
81:7b:23:bf:75:40:14:f1:38:d4:f8:6c:ae:0d:e5:
cd:16:cd:d1:27:0f:de:4e:6f:19:d3:5b:d7:a6:78:
37:c2:4d:02:7e:d7:38:f9:45:ab:ea:35:f6:df:d1:
91:11:93:36:f5:b3:3b:0c:f2:39:c7:37:8a:28:8b:
f8:04:b5:5f:2f:60:39:b7:a0:d3:20:ec:f5:d8:fe:
88:15:62:1a:26:6e:b5:7e:3b:bc:fe:8b:71:7c:f4:
6f:07:30:20:d1:ae:26:17:fd:b7:67:10:ca:ab:f4:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:CC:F6:61:C7:9F:7F:6D:20:DB:0F:AB:60:C6:ED:A4:B9:8C:88
X509v3 Authority Key Identifier:
keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c4:75:03:5e:78:43:5c:6e:a8:18:c2:ec:98:04:a6:34:ea:
3d:6f:36:da:2b:a1:fc:de:44:80:2a:3b:60:42:04:19:24:e5:
04:1f:2e:15:3a:aa:41:ff:5b:c3:85:ad:1b:b3:24:1b:f8:d8:
7b:2c:ba:ba:66:87:c5:9b:c6:87:2c:0e:98:c8:6a:44:41:c4:
30:7a:34:dd:b1:59:f3:56:b9:2f:60:05:ac:92:2b:44:3f:59:
8a:40:23:8f:3f:a2:d4:d2:32:0e:8f:a7:46:a1:87:90:82:b1:
10:9f:03:0e:fe:b1:c4:5c:16:30:e5:fc:aa:dd:e9:ce:d5:a7:
83:a4:4f:ac:80:83:6d:fe:dd:06:0c:98:d5:4f:0b:2c:7f:1d:
3e:d3:a9:51:ca:42:63:b8:f3:eb:e0:9b:a6:17:39:ae:01:e1:
24:95:4f:cb:17:56:9c:b4:05:5f:56:a3:3e:56:b3:46:b9:64:
53:ce:8a:ba:38:9c:dc:97:77:c2:bc:94:5e:c0:5f:3c:dc:bf:
e0:01:d2:da:3a:6c:a6:17:2f:cc:10:83:cd:f4:da:60:4e:69:
28:29:2c:5f:56:10:f4:11:ba:de:fd:16:bc:28:3b:ba:57:84:
81:af:86:81:df:73:ab:dd:3e:8c:6d:42:c0:48:21:3d:27:4e:
54:d8:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:49 2026 by rpki-client