
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json)
Hash identifier: HMdoYpzFUJxFeWUlN3I0bigJDtt0wgft03CVBurfM0s=
Subject key identifier: 48:47:F1:3E:DA:21:73:E7:BC:F3:BB:DC:90:46:21:15:B4:6E:65:35
Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Certificate serial: 0CEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
Manifest number: 0CE6
Signing time: Wed 18 Feb 2026 17:50:00 +0000
Manifest this update: Wed 18 Feb 2026 17:50:00 +0000
Manifest next update: Wed 25 Feb 2026 17:50:00 +0000
Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: kn4dtTPDoM1noT6z+i9WqK9zVLQUkU5KEVmKJ7QVytk=)
2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: p5o94r8Nqv4rwWcziwn3zPkQlH3UimrqCCaNbjZ91JA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Validity
Not Before: Feb 18 17:50:00 2026 GMT
Not After : Feb 25 17:50:00 2026 GMT
Subject: CN=6995fbc8-f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:be:03:bf:9a:40:99:fc:42:6b:6f:b3:94:
ac:ed:73:31:75:08:d3:b1:c1:f9:7e:f5:17:13:54:
09:a2:37:5e:51:94:8d:39:2d:34:83:dc:03:79:8b:
1c:af:80:ad:62:19:26:36:5e:c0:67:b8:ba:96:e8:
a8:0e:a5:fe:eb:01:27:70:f7:be:2b:7d:71:40:85:
06:2c:b8:23:40:2e:e2:7a:1d:d5:d7:46:7f:3d:21:
24:d2:a0:51:5c:fa:4e:cc:52:50:8f:9c:b9:d2:9b:
42:77:4c:f2:96:c7:66:57:88:f5:11:ad:2d:d7:b0:
ca:52:6c:2c:9c:21:41:9e:74:60:00:03:c9:85:ea:
b2:c3:26:96:c3:e1:5b:b1:e7:84:6f:e6:c6:19:bf:
54:6e:dd:ed:3d:61:b9:a0:66:bd:7f:5a:27:fb:9f:
d0:7b:3c:7e:3a:eb:4a:fe:ef:b1:d4:83:63:84:53:
a8:9a:a3:cc:d0:03:04:07:ce:c3:77:80:66:79:9d:
61:56:dd:96:56:e2:79:1f:37:bc:12:8a:84:c7:02:
7c:88:d3:32:fa:86:b2:28:ed:6f:7b:30:4b:35:8c:
ca:82:c9:32:83:07:58:3f:4e:ab:f1:f9:3f:cc:0c:
b1:1f:38:55:07:d0:1b:47:20:03:91:19:69:f7:8b:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:F1:3E:DA:21:73:E7:BC:F3:BB:DC:90:46:21:15:B4:6E:65:35
X509v3 Authority Key Identifier:
keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:14:52:2a:09:e9:c1:8d:53:d0:89:94:ff:8b:48:21:70:90:
c8:8d:38:89:3f:b8:1b:c4:ae:38:ba:05:53:39:aa:47:ed:31:
f8:cd:7b:05:a4:ef:26:12:ad:25:ef:8c:20:a9:ee:14:69:ed:
57:87:00:e0:2c:3a:be:8c:93:d0:a3:53:13:e7:cb:77:f0:c2:
a6:55:b8:1d:ed:91:7f:e4:69:fc:09:bf:c6:e2:69:d4:90:0a:
7b:7e:2c:69:44:4d:df:eb:e5:c5:bd:64:46:74:9e:3e:78:c8:
0c:8b:d3:69:33:69:1d:d9:8c:e7:30:3a:ae:b6:56:f5:0e:8f:
3b:87:7e:df:49:38:5c:57:b8:66:bc:e3:39:3b:10:80:39:e0:
e8:61:52:c6:ef:39:0c:27:4a:fa:88:de:3c:d1:6b:06:82:80:
c8:47:72:7a:2c:6b:0c:11:fc:44:1f:16:dc:9f:9b:6e:60:1f:
7a:ce:d1:6d:5e:cc:cc:41:af:b6:b7:21:02:57:e7:5d:23:7a:
1e:c3:fe:32:9d:d4:bd:2f:0d:26:62:bc:27:68:a7:d6:1c:20:
88:6a:9e:ab:c9:fe:1d:70:ff:12:7a:03:bb:90:07:81:dc:f4:
8f:ce:3b:14:dc:2f:86:e1:75:a3:61:07:7d:ad:8d:72:ba:26:
a9:1f:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:15 2026 by rpki-client