
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier: ZuoyykKtW10HmPYs9n7ysaHqUfPdQdap9TEclPs1lBI=
Subject key identifier: 29:7B:38:75:CB:FE:91:2C:B7:DD:50:ED:C8:35:C4:D6:23:B5:28:84
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0344
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number: 032C
Signing time: Thu 19 Feb 2026 00:21:49 +0000
Manifest this update: Thu 19 Feb 2026 00:21:49 +0000
Manifest next update: Thu 26 Feb 2026 00:21:49 +0000
Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: uv12SSo9hnKtwpr98MxuelhG03HH/9PADE1+SAKFQPo=)
2: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: D7GG+9V9VetFTo3WS2746v47jcVH9mGxmAznj65oILQ=)
3: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: TJ9ECbrNmrbj5mhfI5HTyIvIslW5iwcIqu2ptc1cXhA=)
4: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: oF4weljdyCKoRiSGG2z17wTaQsEcpMts8sv9D62jJPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Feb 19 00:21:49 2026 GMT
Not After : Feb 26 00:21:49 2026 GMT
Subject: CN=6996579d-98ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:b8:c6:97:22:be:23:39:40:0d:87:f1:0f:
9c:a3:f0:c0:f2:ce:93:b2:81:f9:9a:85:19:e6:31:
49:6d:26:e2:09:b3:db:21:1b:9f:4f:f3:a6:a1:b2:
48:b3:fc:a6:2a:12:b9:43:0b:53:0a:a4:eb:84:0d:
be:cd:c6:b7:98:7a:db:eb:4d:82:58:ba:66:5b:72:
78:7f:38:fe:fb:da:c3:48:6c:7f:44:b2:e0:f4:73:
e8:ef:df:09:2c:25:4e:94:f8:66:12:ef:c1:00:92:
ee:e7:0b:5e:60:8d:f5:9e:3c:cd:22:eb:a9:50:61:
67:a1:51:d4:0e:b0:3d:a5:ec:5e:50:5b:0c:99:ba:
e0:3b:60:f2:ae:19:4c:ea:fb:92:c5:8e:97:ff:33:
eb:a1:d9:7c:19:92:b3:50:5c:8c:75:ec:a6:87:ab:
fc:86:d3:c3:c4:67:26:26:72:dc:c6:66:d9:01:c8:
f6:dc:ee:d3:14:ef:3d:0e:3b:c6:b4:3a:7b:06:06:
be:f4:e8:69:f4:e1:36:5e:7e:a3:2e:ce:0e:f6:4f:
6f:5a:f0:b3:8e:a7:eb:70:39:d8:83:6d:d1:9c:22:
ac:c4:b4:a3:9e:85:e2:1b:6e:b5:8f:43:d5:ec:80:
12:38:d7:3e:94:da:cc:b0:dc:90:37:94:62:6b:7f:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:38:75:CB:FE:91:2C:B7:DD:50:ED:C8:35:C4:D6:23:B5:28:84
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2b:94:ad:58:9b:67:70:54:c6:00:a0:13:1a:80:98:20:de:
c3:d5:d9:9a:71:c2:48:85:21:45:ad:09:70:6b:53:b2:21:51:
eb:33:54:47:c5:56:1e:d8:7f:81:37:82:c1:fa:75:c6:34:db:
60:cc:1a:87:ea:e5:f5:64:17:38:19:e8:ea:a6:7e:60:6c:1a:
0c:27:81:f6:53:6f:e5:73:85:8c:49:45:57:66:c2:a9:63:fb:
8c:48:da:f1:b4:38:f4:ae:a4:f4:14:87:98:65:ab:97:a9:21:
c9:e4:46:34:a1:8e:e8:bf:39:ee:97:14:d8:06:d6:8c:cb:62:
0d:7f:f2:41:bd:f4:e3:25:32:8f:78:94:59:01:00:78:dc:8a:
ef:c3:7b:ca:2d:34:9c:f1:dc:97:81:7e:8f:59:c1:42:48:3c:
ef:49:61:87:c1:97:4d:64:c9:54:60:65:f0:d9:34:89:36:db:
ae:7f:9e:73:6a:6a:f4:00:54:94:d9:84:51:6e:dd:39:05:77:
d6:c5:16:a2:51:f4:de:36:17:cd:dc:04:a5:a7:aa:4c:3a:8c:
6b:3d:10:19:4e:5b:35:7c:92:8c:8b:eb:2d:2d:56:27:f3:92:
c8:dd:e7:05:5a:61:d1:b0:f4:09:95:63:38:13:45:53:db:14:
8b:fa:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:43:14 2026 by rpki-client