
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json)
Hash identifier: w/0f9en3wAsTe4mgavb1ptty7LqWKuM+8sjMLAGfyKU=
Subject key identifier: 09:52:FC:66:6B:A9:90:0D:52:57:BB:85:E6:0F:E3:2D:F1:5B:D1:95
Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
Manifest number: 0246
Signing time: Thu 19 Feb 2026 01:12:10 +0000
Manifest this update: Thu 19 Feb 2026 01:12:09 +0000
Manifest next update: Thu 26 Feb 2026 01:12:09 +0000
Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: WZhyAerIGbjsYJ0RZRIw7SgxySH7lkaxdZ2QCCF964o=)
2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Validity
Not Before: Feb 19 01:12:09 2026 GMT
Not After : Feb 26 01:12:09 2026 GMT
Subject: CN=6996636a-b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:5b:0f:60:36:77:54:04:e1:9f:42:92:9f:
3f:6b:92:c6:fc:73:b4:6d:4d:78:1c:2b:9a:d3:e8:
05:cb:c4:5c:a1:af:c4:1c:4b:4e:38:20:b4:af:79:
53:99:bc:48:ac:39:75:29:82:e9:ff:27:15:50:c6:
af:54:df:4f:c1:92:3d:94:8f:fe:83:36:a9:72:b1:
6a:ac:59:3e:55:9a:55:aa:36:52:7e:e3:1b:46:2f:
03:c3:e4:32:cd:29:d0:ae:50:fd:2a:a4:50:fc:15:
fe:02:1f:f2:43:4f:ca:2f:df:e7:57:bd:1d:80:eb:
80:f5:73:78:09:cc:81:66:67:37:aa:77:cf:ca:0e:
26:08:ea:9b:55:84:b2:75:65:27:0a:54:70:ad:24:
06:fc:c9:17:c8:6d:79:3a:32:c9:ac:bc:51:c0:b9:
3a:5e:9b:d8:6e:9d:a2:04:5b:49:ff:22:e9:b2:be:
ee:d9:8b:04:68:f5:05:21:ad:72:0c:dc:c2:ce:59:
8d:3f:f9:29:2a:b5:bf:91:e6:56:f8:1d:3c:fa:07:
81:dd:b2:2c:b3:89:07:e5:57:7c:ce:5f:5f:06:9c:
72:b2:a3:ad:0e:cf:eb:e2:1a:fa:7a:25:33:e1:2f:
4d:72:9c:4b:fe:d6:e0:5a:4b:7b:a3:07:52:5d:2f:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:FC:66:6B:A9:90:0D:52:57:BB:85:E6:0F:E3:2D:F1:5B:D1:95
X509v3 Authority Key Identifier:
keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:76:78:85:fd:cf:bb:3e:cc:e0:43:d7:e6:3d:a9:cc:8a:
e1:77:30:8a:f6:4d:12:6f:84:49:c4:ab:21:55:9d:cf:bf:3f:
13:02:c1:84:cc:61:78:e4:48:28:bf:7e:4c:95:bb:b4:d2:a3:
b4:dc:4e:37:a6:15:b1:5a:46:9d:50:bb:63:0e:fe:1a:66:e3:
3c:20:56:d2:b1:f7:ea:ce:d6:05:e8:e7:78:f3:59:8f:04:ec:
79:78:ca:f2:45:39:bd:9f:0f:4e:cc:a4:02:66:0d:2b:00:b3:
22:bb:6f:ff:2d:68:22:40:18:f5:3b:78:b5:95:ba:f0:8d:3b:
c3:4e:75:3d:86:51:35:1e:27:dc:60:42:6a:6b:f3:8c:05:c5:
71:20:d8:26:bc:1f:1f:23:f9:0d:2b:11:32:c2:85:56:05:21:
13:76:17:33:c9:c5:c0:49:9d:25:81:cd:bd:ec:91:40:e0:02:
67:f3:f4:98:a2:20:cd:e9:60:fb:41:30:41:9b:de:52:14:e9:
12:a4:ac:b2:dc:de:a1:23:ae:03:fe:94:17:97:bd:98:8d:8a:
f9:cd:09:76:9c:99:dc:7d:2a:19:52:c1:36:e6:65:c1:80:5e:
13:8d:57:5e:63:38:c6:e3:a2:8f:44:c4:0d:a3:70:de:3d:73:
34:92:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:32 2026 by rpki-client