
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json)
Hash identifier: Mt27Cod3X588exz7HyyI/x7Y4uK+gjMmdLkNldA6iI4=
Subject key identifier: 0D:65:77:20:9B:44:74:AC:C1:5A:F8:38:24:F2:4D:D2:8A:00:84:93
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
Manifest number: 0153
Signing time: Thu 19 Feb 2026 03:35:53 +0000
Manifest this update: Thu 19 Feb 2026 03:35:52 +0000
Manifest next update: Thu 26 Feb 2026 03:35:52 +0000
Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: QIXl9G90XWAPp5h2aFOpi1+Goz25T6Svgm+sKUH3WI0=)
2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Validity
Not Before: Feb 19 03:35:52 2026 GMT
Not After : Feb 26 03:35:52 2026 GMT
Subject: CN=69968518-90ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:b2:b7:66:8f:87:46:76:94:67:10:d0:9a:
a9:dd:51:d8:b9:98:b0:68:6e:e6:5c:69:3f:d1:20:
d4:de:be:80:7c:9d:ee:4f:f1:4f:7f:0f:3d:39:11:
59:b4:ed:5d:cb:68:c5:12:44:e8:0d:a2:8d:c3:c0:
52:43:dd:ae:a8:29:ba:eb:6f:14:42:61:95:61:95:
d3:8d:48:19:91:cf:6a:11:65:7c:07:88:0a:1d:67:
16:31:d3:c5:91:9d:90:4e:20:95:ab:c6:92:ff:e5:
f8:fb:f0:6a:66:14:d1:ae:92:25:9c:8b:cd:5d:2e:
4a:ad:78:fc:9f:0e:7e:d4:d6:1a:b3:3b:2c:82:e4:
c8:04:91:9c:18:94:4f:5d:8c:7d:d9:c4:f0:53:98:
76:da:f5:11:ed:dc:96:a8:97:4e:b4:93:35:3b:c6:
46:5e:6c:6c:7b:05:54:e4:c3:02:ef:04:98:a7:2f:
5d:14:1a:fd:3f:b2:a1:94:ff:7d:38:df:1c:97:11:
95:9a:37:ba:2f:fe:c4:3e:2a:3c:da:3d:d5:e0:33:
2d:57:a3:4d:14:df:02:4b:af:05:00:b9:42:32:ff:
79:c9:95:2a:ac:2d:8b:1d:0d:8e:f5:e3:0d:38:5c:
8c:50:05:30:aa:db:74:34:1a:df:b1:46:5e:b7:4a:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:77:20:9B:44:74:AC:C1:5A:F8:38:24:F2:4D:D2:8A:00:84:93
X509v3 Authority Key Identifier:
keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:cd:8a:7c:9f:9f:9c:0e:8c:fb:f0:c7:b9:36:69:61:05:86:
c1:be:13:fa:e1:03:9a:c9:08:6b:7f:12:d5:b5:87:41:c8:2a:
3c:ba:7a:a3:7c:4c:08:16:89:34:0c:3f:03:e1:be:b6:a4:56:
48:97:0f:5e:8c:be:e9:76:20:c2:10:39:29:6d:c0:8c:c5:87:
76:dc:f4:f4:f9:ef:3d:35:a3:a5:a6:18:b7:bb:c8:2d:d0:fd:
9e:a3:78:ee:77:da:b4:c9:00:9b:6e:48:cf:38:91:fb:97:f1:
27:dc:a3:95:5a:fd:93:16:70:1d:99:3c:dc:bf:60:da:bd:25:
1c:47:cf:3a:d1:72:4e:7a:d7:7b:ee:b6:84:46:b3:7c:e1:73:
67:21:8d:eb:65:ca:b6:38:97:1a:44:c9:fe:98:22:ec:26:c7:
2f:7c:b1:29:fa:f0:e6:e2:00:5c:e3:7d:4f:50:89:97:a6:a3:
b9:30:28:1d:d2:4d:72:1f:b8:55:7e:6b:20:cf:fc:ab:4b:fe:
ab:d0:c2:a8:71:40:25:66:5d:17:4e:d7:ad:5f:b8:10:e8:8c:
cc:86:8b:04:29:54:f9:d7:71:aa:8a:d9:f8:f3:95:24:11:2e:
82:9b:44:8f:5d:e5:92:69:4b:89:56:35:d6:7f:d2:c4:ad:ce:
75:8f:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:49 2026 by rpki-client