
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json)
Hash identifier: 8h7lsOBSdMMrtNFzxdoF/2sywIkvbDYSVaVvCLJkPvo=
Subject key identifier: 54:40:B2:E7:87:2B:CD:42:0E:0D:05:1B:1F:9F:77:01:96:31:44:95
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 26CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
Manifest number: 25C7
Signing time: Wed 18 Feb 2026 15:37:15 +0000
Manifest this update: Wed 18 Feb 2026 15:37:14 +0000
Manifest next update: Wed 25 Feb 2026 15:37:14 +0000
Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: uzYucK4u6/8m5+qtF4xPtzw9GPNJaWy1H/X8QQxqBoc=)
2: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lPqoKt6e9WB68QkGqWF9uf0n021O/vJN6Ok+8vPm99E=)
3: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: MOs76+y2ZzpmyQheXk3mTC95IHPkn0FNf96cGXOiX14=)
4: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Z5qSs34sPKp/u0MZu0MdqYO0kmHEtkJPsT5iKOnHCCM=)
5: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: RIyr8Ughbt9mob5hXoVNYqj5DjcM8cytuIahFNZG+OY=)
6: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: nSFw75IcZdLxXGKGRDjDilcmAybSCgLtcoRvUszM+xw=)
7: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: HAVp5cljtBnNfexhpbWp3fQD4oxFEGOqIu7ZTxc+Cn0=)
8: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: 0lnFnxu0rWa+p9n4oerH1rvUz5x82J6mnvG019TSBpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9932 (0x26cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Feb 18 15:37:14 2026 GMT
Not After : Feb 25 15:37:14 2026 GMT
Subject: CN=6995dcab-8a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:a7:c4:ed:fd:41:84:fc:11:d7:51:b5:16:
83:0f:06:44:b4:39:69:f1:2d:fa:cb:0f:69:ae:95:
c4:3b:63:5b:19:1a:67:5b:15:64:10:96:e3:dc:6d:
60:08:9e:22:1e:19:ff:96:54:71:2d:b5:33:5f:a0:
b0:c0:dc:22:b4:83:1d:3e:1f:06:07:3d:4e:92:e3:
d7:78:26:4c:34:3f:a1:0b:52:32:3e:7e:b3:08:d6:
56:b5:69:91:91:ff:1f:42:3a:ad:d9:26:66:fb:a8:
c0:68:0b:e8:b0:b7:e5:08:52:6c:1c:b8:2e:34:ad:
14:73:71:5c:92:91:f0:ad:2c:e3:92:ac:fb:0b:dc:
f4:a0:24:6b:31:82:4d:c5:db:f6:57:87:06:42:c2:
55:e9:4e:59:a7:d1:9d:78:1d:6f:75:f6:f3:95:cc:
05:3a:81:84:3e:2b:81:97:fb:d7:3a:ea:f4:08:01:
0b:41:16:c2:a2:bb:b4:53:a9:99:a3:bb:31:be:34:
33:60:32:24:c8:1a:fe:2f:23:20:bc:3b:1b:90:90:
36:4a:3c:29:58:b7:57:05:31:d0:62:80:9e:b8:ee:
f2:0f:65:58:d1:04:d0:2c:57:70:2e:68:0a:6b:ca:
df:21:48:03:1c:d5:3a:68:25:98:a2:7f:3d:27:d7:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:B2:E7:87:2B:CD:42:0E:0D:05:1B:1F:9F:77:01:96:31:44:95
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:48:9d:38:3f:23:59:4e:1f:08:49:44:0a:19:4f:04:ad:82:
c5:92:e8:98:57:96:ed:a8:6b:84:8b:de:77:16:4c:11:11:98:
e5:a9:05:e5:36:8c:1f:e6:ce:f4:5e:d4:54:bb:85:17:2b:5a:
a5:63:f2:63:8e:d0:5e:1a:20:d6:ac:6d:24:d6:30:10:c8:93:
2e:2c:03:59:bc:8f:f1:9e:81:db:cf:74:1a:5f:5c:e2:b0:95:
99:c7:39:92:65:8a:9f:88:7e:86:0c:8d:66:21:30:c6:81:07:
f0:fe:76:42:0d:bd:1c:85:d5:28:ba:72:2a:f0:04:a6:1c:f8:
1e:af:0a:5a:23:0b:c5:7a:fe:be:d4:dc:31:d4:1b:18:ff:d9:
e0:8d:77:0f:40:a8:e5:fd:99:e1:55:d7:2f:92:5e:80:2b:9c:
2f:df:b9:df:8c:f4:fd:e6:d7:15:66:f7:d3:4e:c9:5a:eb:f3:
6a:f5:5c:ce:e0:ee:86:ef:ca:a0:4a:1e:5f:42:b6:39:9f:4a:
0c:92:ce:a5:39:97:ed:1f:ca:b9:11:1b:bb:db:f7:fd:03:67:
03:4f:83:93:88:b5:0a:cd:7d:bf:2d:92:31:c2:92:af:45:20:
7e:31:e8:9d:c0:42:9c:ed:f4:de:68:2f:be:39:32:9a:c8:0f:
4f:71:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:58 2026 by rpki-client