
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json)
Hash identifier: SURsr6eIVPUxoi7o2ZsTSvdK5OC8hDtreh8GnJSIbgA=
Subject key identifier: C1:AF:DA:F7:BF:D7:AE:26:03:0B:93:6A:1E:47:2E:35:4A:A2:A1:5A
Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
Manifest number: 02B1
Signing time: Thu 19 Feb 2026 00:38:09 +0000
Manifest this update: Thu 19 Feb 2026 00:38:08 +0000
Manifest next update: Thu 26 Feb 2026 00:38:08 +0000
Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: hPs20NBtibNTEVbzpfFix4TeWPaHZvt69J92mbKRPtg=)
2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: 0JYQSMYaFvaLhjpHDbKJtAOfDwR2Txci9jlqVoFvh1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Validity
Not Before: Feb 19 00:38:08 2026 GMT
Not After : Feb 26 00:38:08 2026 GMT
Subject: CN=69965b71-6d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:04:3f:0b:06:35:0d:dd:56:46:08:81:a9:
c5:b1:46:a9:cd:20:3c:f0:48:da:ba:bb:0c:67:f5:
98:69:80:9c:66:05:84:45:e8:d2:e4:be:0b:c1:63:
5f:39:44:d1:cb:32:6d:a9:90:e8:e9:54:cf:b0:39:
f0:84:9a:c3:66:4c:a2:bf:81:4d:2b:3b:d0:e3:3a:
cf:1e:98:71:94:e9:c5:12:e2:38:43:92:59:04:87:
27:97:22:49:20:10:1c:eb:52:00:26:3a:15:0b:f0:
01:a7:c1:3a:2d:5c:5b:fb:f7:52:fa:81:3c:b9:0a:
ee:38:67:8b:8b:14:a1:51:1e:a5:9e:46:95:04:09:
49:76:09:a0:32:d6:81:d7:66:c9:0a:cd:d6:10:6c:
29:a1:d1:45:e7:c0:6d:c0:10:1a:14:5f:f9:63:60:
b2:54:56:88:92:d4:51:ed:59:e6:b0:97:5e:2b:02:
91:72:f4:39:ca:de:fd:61:99:00:94:fa:99:12:b1:
51:03:0e:84:9f:82:e6:65:3b:f3:27:9e:b1:17:8d:
e7:7c:2f:6c:19:f7:87:95:0d:1d:a0:58:86:4d:74:
e3:d8:8d:b7:57:e9:0c:1c:b2:40:7c:aa:3f:20:7f:
ca:f2:67:65:70:8b:8a:84:fd:69:db:f4:4f:35:06:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:DA:F7:BF:D7:AE:26:03:0B:93:6A:1E:47:2E:35:4A:A2:A1:5A
X509v3 Authority Key Identifier:
keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9e:67:b7:c1:f5:1d:88:1e:92:e8:51:05:6a:12:55:38:08:
d4:40:f0:07:b7:9e:92:fc:03:d2:6e:5b:9d:63:f9:92:80:45:
c6:14:bf:24:66:81:c7:18:bc:97:41:f5:3b:10:52:97:b6:54:
31:44:a3:1d:9f:05:d3:6d:27:6b:1c:6b:a9:57:7e:83:98:9b:
05:5b:cb:bd:dd:dc:72:d5:a6:5e:e6:58:c9:45:ae:27:62:71:
e3:be:bb:e1:37:34:fc:e2:bc:ae:34:27:86:4c:56:b2:3c:ab:
fa:95:66:93:62:ad:14:e5:65:7a:33:23:84:33:ab:4a:2b:29:
fe:83:59:c5:04:65:52:f3:cb:6d:00:fb:46:ef:1b:93:c2:a5:
b9:b2:b7:cd:07:cb:59:3f:82:16:33:f1:5e:44:8c:be:a5:fe:
67:91:27:a6:f3:64:7c:46:26:ae:a3:a0:a4:0d:fd:dd:2e:7e:
c3:65:f9:de:8a:a3:3d:7b:15:44:1a:81:ff:ed:bc:92:cf:3c:
5c:0e:19:9a:b2:17:b8:7f:c3:d3:62:91:ce:2c:bc:24:c0:a3:
8f:b8:b5:c9:8d:52:e5:c8:85:a2:27:81:92:24:af:e2:ca:70:
7b:b0:85:f5:12:b5:7f:06:c1:80:68:42:00:9a:99:84:8a:b2:
9c:cf:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:38 2026 by rpki-client