
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json)
Hash identifier: FVfopFu6sHhrVGehdoXt9dy6MdeSAA4akVqDvYPKbZ0=
Subject key identifier: 1D:38:24:58:65:8E:91:20:3E:9F:5A:D2:7C:5A:4D:5E:31:49:E7:48
Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
Manifest number: D3
Signing time: Thu 19 Feb 2026 05:04:11 +0000
Manifest this update: Thu 19 Feb 2026 05:04:11 +0000
Manifest next update: Thu 26 Feb 2026 05:04:11 +0000
Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: 0GNYoHxaTvx+Uteqzg1aIA5SGP8Z+22lH6hl1tpxsT8=)
2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: 8GY9ZK0u18wcr9wJNQEk5ed7wmg1rDikGx19a8FgrlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Validity
Not Before: Feb 19 05:04:11 2026 GMT
Not After : Feb 26 05:04:11 2026 GMT
Subject: CN=699699cb-8fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:dd:d6:60:57:5d:02:d5:b4:91:e6:26:7a:
2a:1a:6e:68:fc:63:18:5e:38:ee:4b:c9:0a:f3:5b:
e3:b4:4a:f7:9a:c8:22:c8:d9:2b:64:35:e3:f7:95:
fd:e5:7f:e0:bc:9b:e5:84:68:e6:3a:b9:13:8d:47:
86:12:fa:50:5e:4b:e1:2f:bb:d3:bf:4a:6f:50:91:
92:99:da:d6:29:f8:15:0c:82:0f:a0:da:66:b2:99:
f2:4d:9d:18:1f:de:72:5e:91:3d:68:06:47:87:28:
55:f1:ee:8f:00:14:40:6b:5c:ef:78:04:59:34:11:
a3:69:60:43:06:f7:5b:0d:ec:dc:5b:f7:21:87:92:
d5:1b:4a:1d:62:9d:30:c4:56:04:4e:17:fc:b7:b0:
2f:d8:e1:11:b6:fe:78:07:d3:c1:35:2b:09:f4:0b:
3b:cf:7d:ad:76:21:be:ad:81:ed:7f:bd:33:dc:7a:
30:4c:30:56:55:4c:5e:00:33:de:4d:a9:f4:8c:ae:
32:ac:1a:13:b9:11:51:8b:83:f9:11:c5:71:39:ea:
cd:09:33:f4:96:02:93:a0:5c:dd:2d:26:02:19:bd:
5e:d8:cc:b5:48:11:bd:d8:3c:09:51:45:49:56:ce:
8b:01:d4:a5:25:87:23:38:47:90:cc:7a:a7:ad:3e:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:24:58:65:8E:91:20:3E:9F:5A:D2:7C:5A:4D:5E:31:49:E7:48
X509v3 Authority Key Identifier:
keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:b8:b0:cd:96:61:d5:1f:b4:19:ce:44:3d:3b:54:78:5f:1f:
d2:5a:7b:36:23:c7:e1:78:39:b0:5d:b6:4a:0f:ab:9d:61:56:
50:92:15:61:3c:18:06:4d:56:77:b6:3d:b8:c1:54:5b:12:49:
b2:ee:75:43:c6:56:45:9b:76:48:71:43:63:d3:76:03:90:10:
22:a0:f4:28:40:83:d0:30:76:f3:e6:db:bc:bd:64:60:d6:f4:
c1:66:6e:07:04:c7:84:81:64:ca:ce:96:f5:ec:f5:dc:00:b9:
e0:37:58:23:aa:81:ac:ee:6e:34:ab:71:b5:68:ba:ce:9b:ea:
2e:cd:14:2b:fe:5d:3b:ea:d2:c1:69:3a:09:09:ee:70:6c:28:
da:77:da:fa:91:ef:0c:53:12:d1:77:79:af:dd:77:04:31:86:
c5:5b:41:85:39:bc:a6:59:7a:68:cd:e7:4f:68:49:ff:7e:ba:
5b:f4:a3:6f:83:79:4d:20:8d:1d:81:7e:b8:22:bd:67:33:fb:
8f:b7:69:2b:99:52:4e:93:bf:d1:01:da:03:7d:8e:a9:30:60:
ae:27:06:48:50:f7:a5:12:64:4f:f7:7e:77:68:b9:a7:62:f9:
7b:4c:c0:c5:fb:85:48:9d:2e:cc:bb:73:33:61:5c:f8:86:95:
ae:6d:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:42 2026 by rpki-client