
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json)
Hash identifier: j5sBk0yGFGSePO5eS+BCsm90gTH7xFb4vJXpbMg9bJI=
Subject key identifier: CC:0B:41:E5:39:C4:92:39:08:F9:FE:15:9A:4C:A8:95:65:E8:D6:EA
Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Certificate serial: 06AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
Manifest number: 06A5
Signing time: Wed 18 Feb 2026 21:45:29 +0000
Manifest this update: Wed 18 Feb 2026 21:45:29 +0000
Manifest next update: Wed 25 Feb 2026 21:45:29 +0000
Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: xt7zCI/Jq65G7JqoaMuHjp9vLrDi83l4LpN1GOb45EY=)
2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: casLvQjbiWmoUm1zZDsT8rFqITbKKo8QIpvIUSskW7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Validity
Not Before: Feb 18 21:45:29 2026 GMT
Not After : Feb 25 21:45:29 2026 GMT
Subject: CN=699632f9-b9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:80:cc:06:58:f5:59:0c:0b:8d:27:cd:42:
72:91:89:15:19:b5:5e:17:43:f3:47:f2:b7:77:49:
c0:07:dd:13:74:bc:ff:c0:20:7a:72:d5:45:e2:9e:
c9:8e:f7:bc:8b:c1:71:68:33:4f:d5:30:41:7b:18:
5b:be:0b:2a:78:a8:ee:a1:81:a4:49:bf:7e:ae:55:
2c:f8:83:ed:cf:7a:5a:ab:29:67:3a:bd:ae:f9:dc:
63:14:b4:e4:cb:3c:ea:e0:f7:4a:32:c9:b6:95:b0:
ae:ea:62:9d:45:af:8c:65:2a:d9:ad:88:70:a8:2f:
fb:01:56:9d:8d:9d:f7:e2:41:fc:89:64:d7:ba:7d:
d2:dd:72:b3:5c:58:22:3a:73:6a:90:6c:14:e3:2a:
c9:86:3a:be:50:bb:25:0a:aa:76:31:cb:a6:da:c2:
be:4f:87:d0:46:22:b9:f1:00:f9:cb:65:b0:3d:0b:
ae:ec:12:ac:aa:93:66:c3:a1:b4:da:dd:39:a9:30:
88:bd:02:d9:da:8c:5a:20:c6:be:07:72:de:f6:a3:
88:7b:59:7f:8b:4d:ff:aa:5f:fa:39:ec:81:e8:61:
3c:e3:1a:ff:3f:44:77:db:71:a9:53:b0:ee:f6:54:
df:ac:d2:ae:48:bd:3d:bb:52:7d:d4:ab:79:3d:7d:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:41:E5:39:C4:92:39:08:F9:FE:15:9A:4C:A8:95:65:E8:D6:EA
X509v3 Authority Key Identifier:
keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0d:62:b1:51:a3:22:f7:6a:c4:a7:74:87:12:17:a3:02:e5:
03:e7:ce:bc:64:e6:08:21:e3:eb:0b:2b:6b:b4:32:06:c7:b8:
b8:dd:3d:45:00:96:83:ad:f5:07:a0:cb:6f:64:35:e4:46:f2:
dd:a6:d3:64:b7:89:c6:5b:01:00:c6:93:79:3e:fe:2e:47:99:
94:73:42:40:46:07:2a:22:09:bf:f6:91:22:4e:b3:27:d6:59:
54:fc:27:81:49:54:8c:74:2e:b6:bc:bf:2f:6a:46:fd:72:25:
f7:c8:10:48:27:90:26:45:b1:35:47:15:38:99:83:aa:c2:04:
8f:10:26:0f:c4:92:34:ac:f8:da:28:15:25:77:06:f6:ad:13:
13:27:30:a4:e8:72:9b:28:c4:83:65:17:06:59:33:d7:21:46:
a7:86:1b:d2:12:80:de:57:41:6a:b2:4b:95:6c:7f:fc:9d:73:
f1:1d:51:2d:98:de:76:30:95:7b:b0:51:52:eb:0a:9b:4c:b2:
4b:48:11:6a:03:6c:cc:be:10:f2:fd:6c:fc:6b:b1:78:a7:7d:
28:25:a1:ad:4e:07:01:6a:e4:3d:29:56:a9:50:90:29:ad:de:
a5:a2:f0:ac:f8:cf:4f:19:2c:ba:31:f0:e3:15:fc:0f:3a:a3:
6c:8b:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:31 2026 by rpki-client