
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json)
Hash identifier: fLAIOpg7NidBpa62ttjgr/jET0MXkMWbN3tYQLqeL7Q=
Subject key identifier: 5C:48:6B:D9:8F:B6:B3:F7:F6:CE:E0:AB:1C:86:CB:56:A6:54:A2:2A
Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
Manifest number: 041D
Signing time: Wed 18 Feb 2026 23:35:46 +0000
Manifest this update: Wed 18 Feb 2026 23:35:46 +0000
Manifest next update: Wed 25 Feb 2026 23:35:46 +0000
Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: NrUGfNLIC5Ys7KcdZLkj7wmUknnDGTCs9+WsFZqJK7k=)
2: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: C6Z/IfRVQV8LxL1Oc2uDTt0509ENzUWPGHXpk7TwKNY=)
3: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: c9fr6KD/Ih6e5aCRy3Bruof+Va6iYKpCGv8u+/ETzK0=)
4: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: rQCKwpVXSCN9Y75hhPwPDo9+AXfNNoLzfRi82A6bdSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl
rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Validity
Not Before: Feb 18 23:35:46 2026 GMT
Not After : Feb 25 23:35:46 2026 GMT
Subject: CN=69964cd2-af76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:99:ae:24:bc:cc:a6:72:8a:ec:8c:9f:5a:
02:32:2e:ee:7a:d1:8e:2a:31:87:f2:15:f4:8b:d1:
4d:7e:13:89:bb:af:7e:27:1d:f7:1a:44:19:59:58:
a8:9f:3e:a0:f3:0e:50:52:9e:be:55:a6:88:58:9d:
45:08:df:3f:2b:9b:f8:6d:8c:e8:8b:f0:84:77:03:
19:93:54:02:f9:3c:54:6c:64:e6:79:eb:c6:d8:27:
c6:c5:41:42:d7:69:1a:49:72:13:f3:79:8a:59:67:
27:03:ac:b3:02:db:69:b1:1f:1e:75:27:64:64:ea:
98:c9:f9:51:d7:d3:1b:fb:7c:b1:5d:fe:89:57:f0:
08:b0:af:e0:af:de:d2:75:76:45:d8:07:4c:d6:c1:
2f:ce:fc:28:6e:ed:7a:97:d5:3a:5e:1f:8a:e7:26:
f3:55:0e:11:58:9d:cf:67:e0:ec:fb:84:a6:4e:31:
c0:26:77:44:a2:13:50:72:d1:5a:2c:2b:86:48:55:
5f:6b:b0:86:98:69:ce:7e:f0:06:4a:c0:0c:a1:3b:
af:23:68:50:7a:48:fa:f6:0e:a7:02:83:ee:ce:1e:
68:c7:ce:e3:82:ca:2d:7e:7e:f6:76:c9:34:d8:86:
34:ef:08:0f:8f:b0:bc:03:1e:69:d7:21:f0:4c:65:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:48:6B:D9:8F:B6:B3:F7:F6:CE:E0:AB:1C:86:CB:56:A6:54:A2:2A
X509v3 Authority Key Identifier:
keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:23:a1:df:75:45:08:bd:b2:91:10:5a:78:50:89:a7:a8:d2:
79:34:96:fc:73:b7:29:8e:f3:d2:d7:39:cb:73:d9:6c:ea:2e:
54:88:70:0d:e3:d6:32:24:ea:73:22:2b:0c:e2:13:a5:e8:00:
89:f3:61:3e:57:9d:09:69:a0:23:a4:81:b8:fc:a2:08:e2:28:
dd:06:46:e9:0c:99:ed:e4:04:69:ea:02:7f:dd:92:53:24:ae:
ef:6b:2c:00:61:d8:ec:cf:21:9e:3d:6c:83:61:c5:05:c5:cb:
9e:9a:c3:a5:03:9c:49:81:50:11:92:73:25:fa:5c:34:2e:10:
1d:1e:3a:56:16:37:a7:43:e0:3f:e3:aa:2d:7d:44:6b:bf:48:
ce:5d:9a:d1:05:79:8e:5e:e6:da:82:93:b5:01:12:60:ca:fe:
d4:81:4b:1e:8b:18:02:82:11:a4:96:38:0f:d7:43:54:33:9c:
46:ff:ae:bf:b1:74:73:54:0b:6a:fa:8f:60:cb:2a:ff:f4:83:
98:5e:2b:6b:81:a2:56:54:35:1f:82:96:1d:d3:58:90:d6:76:
9b:9d:c8:d4:08:22:23:35:d8:a7:c9:94:64:61:fb:64:96:5d:
e5:8f:40:8e:60:5e:d7:a3:81:22:fc:0f:12:0a:2c:28:71:a0:
0d:2d:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:46 2026 by rpki-client