
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json)
Hash identifier: 3JSllpU/517QO09NU7E9oLaeXNh2Jd3hEykVOp9rUwU=
Subject key identifier: 32:DC:D9:2E:93:6E:56:D5:E3:EB:42:53:B9:98:3B:D5:2C:0C:99:75
Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
Manifest number: 0BFD
Signing time: Wed 18 Feb 2026 19:16:42 +0000
Manifest this update: Wed 18 Feb 2026 19:16:42 +0000
Manifest next update: Wed 25 Feb 2026 19:16:42 +0000
Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: htmy2dzQKyk8Zm6tWXbA5bDDKnQtCd6abYSJ2D/hHUg=)
2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: 19ktDSsGJCBnx1vvZAT3eOQKuF6C2eRCTg3IjPMhs2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Validity
Not Before: Feb 18 19:16:42 2026 GMT
Not After : Feb 25 19:16:42 2026 GMT
Subject: CN=6996101a-a851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:f3:de:31:9d:e8:13:65:01:0c:5e:c8:e8:
e0:49:5d:0a:0a:b4:c2:1d:9d:73:42:39:14:1a:c2:
4e:11:87:1b:67:59:a3:b6:fb:6d:de:45:54:75:ff:
6d:43:f0:f0:8c:8b:c1:c4:29:91:1a:ba:49:5e:97:
8c:a3:c9:a0:51:c8:7d:24:89:7f:87:e6:06:f2:3d:
d1:c9:5a:90:c7:7e:3c:f8:08:4e:bf:6b:71:08:96:
fe:f8:c0:05:a4:3f:87:ba:7a:3c:a0:df:66:ea:b5:
45:00:9a:72:84:9d:08:0e:d4:41:f1:88:44:19:6c:
ff:e2:24:0e:65:48:ab:ff:40:77:07:d0:ee:17:f0:
ec:6d:6d:9a:80:a6:c6:0f:d5:2e:6f:cb:d3:c2:73:
45:78:24:f4:e7:10:c5:d0:ac:d3:7c:34:d4:4c:92:
87:fb:9f:7a:c0:51:ab:2e:b8:64:dd:7e:c7:74:c0:
c4:0a:5b:c7:8f:d8:17:4a:ae:54:0c:2c:98:c0:1e:
0b:f7:31:15:87:e8:6e:d7:5e:24:1e:ac:72:df:41:
89:79:24:14:2d:04:56:7e:b6:e8:d7:06:f4:1a:a8:
b4:71:b3:72:5f:d7:ca:21:28:f7:ea:9e:2a:3c:54:
75:ff:b8:9a:f4:e4:e8:12:1f:24:c5:fc:74:c1:37:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:D9:2E:93:6E:56:D5:E3:EB:42:53:B9:98:3B:D5:2C:0C:99:75
X509v3 Authority Key Identifier:
keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:0c:db:e1:ff:8a:14:a6:93:9d:9d:c0:65:1f:c6:b5:6a:33:
79:20:25:cd:91:bd:46:c7:c2:ca:0f:0c:72:3e:43:58:9e:58:
9e:d1:e4:65:b3:fd:c9:ce:16:80:53:e2:a9:4c:6c:a5:ab:a6:
a1:88:e2:0e:fd:da:08:66:98:a8:f8:5f:4f:6e:a8:d5:3b:2b:
9f:e2:11:d5:2a:c2:a0:c5:a0:dd:33:1b:53:2d:a9:72:25:fa:
d5:8c:e6:ae:34:26:4b:43:f8:d9:ea:80:06:d7:10:93:81:40:
d3:4a:d3:fc:67:1b:c5:cf:72:30:79:07:f8:17:48:85:3c:ea:
db:98:44:bf:6a:17:5e:73:e1:f7:82:4f:43:91:a9:93:1a:9f:
fc:dc:53:a3:77:ff:71:01:c6:78:c9:9c:15:b1:3a:a6:89:cf:
26:d9:73:7e:59:3a:66:b8:74:d7:d8:b7:b0:18:c6:21:ce:37:
0c:e5:6c:5f:98:bf:31:9c:47:e2:e8:1d:4e:7f:48:dc:0c:ab:
41:a2:2d:21:9a:0d:55:cf:58:9c:92:d2:ee:f8:95:6c:56:35:
52:12:0a:d9:1a:c7:82:54:2f:69:15:9e:b8:91:44:62:79:18:
14:93:b5:12:71:6a:5a:d8:a9:83:3b:cb:3e:35:ba:8a:9e:f9:
00:af:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:49 2026 by rpki-client