
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json)
Hash identifier: r2riMcfRn0dQEFY/QPzhsXYN3m4tqMnXtLlEvnrr9/I=
Subject key identifier: 52:7E:DB:8C:7B:59:E7:2A:84:D2:03:5A:11:71:D9:D5:1E:55:84:FD
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
Manifest number: 01B5
Signing time: Thu 19 Feb 2026 02:33:05 +0000
Manifest this update: Thu 19 Feb 2026 02:33:05 +0000
Manifest next update: Thu 26 Feb 2026 02:33:05 +0000
Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: NXKrsrFOiLFQkKjtmHX81X8XIR+Q6DnK0lA434YZtpw=)
2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: 5wBTbX1QYSM6JW4VRN60NvlpALYV2KodJNuvd/TicHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Validity
Not Before: Feb 19 02:33:05 2026 GMT
Not After : Feb 26 02:33:05 2026 GMT
Subject: CN=69967661-5c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:eb:33:86:97:6b:a8:39:90:7b:f3:10:14:
38:51:f4:18:fa:f0:53:1d:b4:e3:33:84:d4:f4:7a:
52:5c:c7:dd:fc:94:4d:79:67:75:4e:a9:7a:ce:ab:
d8:e5:8d:18:4d:54:36:b8:ec:b1:05:db:f2:cd:06:
5e:d2:09:c9:a3:cc:ae:3c:10:06:af:84:3c:75:9e:
35:a6:3a:f5:75:fe:7b:18:9a:5f:2f:1f:26:20:5e:
3e:01:6d:80:de:3e:f9:da:ed:e7:80:9d:f3:c5:83:
ef:13:9f:f9:f1:43:a9:ed:d7:92:3e:ca:c0:68:3c:
b7:9d:cd:20:5d:bf:2c:76:a9:20:b4:52:85:fb:47:
aa:aa:40:b0:8f:04:25:2a:95:12:ac:eb:93:eb:28:
9a:bd:77:bf:82:e7:25:ff:b2:f3:b8:f5:23:e1:00:
90:41:63:a2:9d:a2:61:19:89:20:b6:66:7e:08:9a:
d2:be:c9:73:f6:8b:0d:3a:3e:ba:1f:ad:91:c8:29:
e9:56:35:cf:15:af:a1:c7:8d:77:e7:4c:da:d6:8d:
29:da:2a:75:9c:a3:0c:25:75:89:47:97:90:b1:49:
19:f8:bb:32:9f:56:7a:e4:56:26:30:50:46:70:ac:
c6:18:75:c1:cd:d0:54:6d:25:4c:3c:a5:ab:7d:8b:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7E:DB:8C:7B:59:E7:2A:84:D2:03:5A:11:71:D9:D5:1E:55:84:FD
X509v3 Authority Key Identifier:
keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a7:17:31:07:b2:7a:bf:9c:1d:b1:c3:99:95:d7:5e:e1:0a:
11:ad:ec:a5:31:9f:11:ce:ed:13:30:96:09:f7:d0:7b:c1:8d:
fa:a2:72:57:84:29:ef:c6:4c:34:9e:77:97:63:ee:0d:43:97:
54:e2:f7:e6:0a:a3:f3:ab:4e:f5:21:b9:cd:45:94:fa:0d:3e:
33:ff:ce:73:91:3b:21:f5:d4:e7:e0:b0:07:b2:76:b9:2b:2f:
ce:60:fd:85:fa:6a:ee:0a:d9:6f:da:e5:e1:3f:39:0d:45:c4:
1f:22:0f:b8:f2:01:6c:1b:5b:74:aa:d3:0f:87:7d:df:b9:67:
69:10:9e:bc:f1:7a:2a:8d:cb:d7:16:d8:a6:76:55:a1:37:e8:
da:7d:7e:a6:2e:ed:6e:f7:0d:a2:56:b5:fe:d2:01:bc:90:7b:
38:fd:5e:e3:7d:15:6d:4e:6a:c1:76:9d:6c:9f:37:27:cd:7f:
66:d5:dd:83:f9:e2:a7:94:ff:cb:9e:51:5c:64:96:3d:a7:9a:
62:cb:19:ce:fa:03:ca:f4:f7:e0:cc:22:c4:a2:47:8c:2c:e7:
e9:0d:86:6a:e2:0c:25:d0:b8:99:dc:53:fc:d0:27:16:2e:84:
39:3e:19:54:ae:83:b7:59:b6:aa:60:82:73:cf:20:4c:cb:37:
23:9b:4d:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC
MzExNDQ4MUQwHhcNMjYwMjE5MDIzMzA1WhcNMjYwMjI2MDIzMzA1WjAYMRYwFAYD
VQQDDA02OTk2NzY2MS01YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGbrM4aXa6g5kHvzEBQ4UfQY+vBTHbTjM4TU9HpSXMfd/JRNeWd1Tql6zqvY
5Y0YTVQ2uOyxBdvyzQZe0gnJo8yuPBAGr4Q8dZ41pjr1df57GJpfLx8mIF4+AW2A
3j752u3ngJ3zxYPvE5/58UOp7deSPsrAaDy3nc0gXb8sdqkgtFKF+0eqqkCwjwQl
KpUSrOuT6yiavXe/gucl/7LzuPUj4QCQQWOinaJhGYkgtmZ+CJrSvslz9osNOj66
H62RyCnpVjXPFa+hx41350za1o0p2ip1nKMMJXWJR5eQsUkZ+Lsyn1Z65FYmMFBG
cKzGGHXBzdBUbSVMPKWrfYv7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ+24x7
WecqhNIDWhFx2dUeVYT9MB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy
NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU
X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5pxcxB7J6v5wdscOZldde4QoRreylMZ8Rzu0TMJYJ99B7wY36onJX
hCnvxkw0nneXY+4NQ5dU4vfmCqPzq071IbnNRZT6DT4z/85zkTsh9dTn4LAHsna5
Ky/OYP2F+mruCtlv2uXhPzkNRcQfIg+48gFsG1t0qtMPh33fuWdpEJ688XoqjcvX
FtimdlWhN+jafX6mLu1u9w2iVrX+0gG8kHs4/V7jfRVtTmrBdp1snzcnzX9m1d2D
+eKnlP/LnlFcZJY9p5piyxnO+gPK9PfgzCLEokeMLOfpDYZq4gwl0LiZ3FP80CcW
LoQ5PhlUroO3WbaqYIJzzyBMyzcjm03U
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:41 2026 by rpki-client