
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json)
Hash identifier: 9YURmnSogMI7RAY+bOKJNjK8sw4arfRYJRTnxhvslyQ=
Subject key identifier: FA:08:82:8E:84:DE:A1:99:A7:F5:14:C8:8F:73:C9:6F:81:AC:80:EA
Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
Manifest number: 0107
Signing time: Thu 19 Feb 2026 04:27:01 +0000
Manifest this update: Thu 19 Feb 2026 04:27:01 +0000
Manifest next update: Thu 26 Feb 2026 04:27:01 +0000
Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: m8IaWlHz1O3pdiARW1nD5Pmemq+5Zeakda8wg+xyrmw=)
2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: GquKmtZlMDJv9N8EiV5JY0q+tYOnvaRmJYnuHr77saU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Validity
Not Before: Feb 19 04:27:01 2026 GMT
Not After : Feb 26 04:27:01 2026 GMT
Subject: CN=69969115-761f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:cd:df:c0:ab:ee:5d:6a:46:76:79:44:e1:
c4:6b:b8:07:bf:c4:8f:43:35:b7:70:11:b2:1e:6c:
d5:65:24:37:31:4b:41:f8:dd:3a:fe:01:b7:9d:12:
8a:9b:01:22:b7:8f:98:f0:95:92:55:fb:a8:f1:c2:
4b:79:a9:18:a6:49:e2:b0:66:e3:17:31:33:f0:a2:
05:a9:fd:80:8a:b8:ef:3a:06:3a:76:e2:66:37:6e:
8c:1f:00:c8:a7:4a:e9:9b:68:86:86:6f:47:3c:22:
dd:94:6a:02:9a:de:0a:b6:3f:e5:77:33:7e:cc:3b:
b9:50:f7:b4:ca:1e:3e:9f:1c:8a:a7:c6:cd:21:64:
6b:11:aa:a1:3f:97:8d:e7:74:1b:33:0d:b7:40:2b:
ef:68:be:de:51:df:5e:57:17:f5:f7:1d:ec:57:b8:
a2:29:4a:ea:93:73:29:0a:c0:5f:bc:4f:7a:73:f7:
17:68:d7:94:a4:c6:e3:0b:55:69:be:09:b1:fa:36:
51:09:89:76:1a:15:17:53:48:3a:e1:fa:ac:89:2c:
ff:59:5f:1e:30:64:df:ee:20:2b:ce:9c:12:a7:cc:
14:41:bd:d3:b2:17:39:db:88:a9:8d:5a:9f:1e:a1:
d0:8b:50:4c:c2:3c:57:a4:89:bd:6a:5d:7a:ae:fc:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:82:8E:84:DE:A1:99:A7:F5:14:C8:8F:73:C9:6F:81:AC:80:EA
X509v3 Authority Key Identifier:
keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:48:5c:c9:5b:86:61:50:38:b1:4a:7c:8e:46:ab:eb:ad:fd:
d4:8b:5b:6c:d4:8c:ae:16:87:62:c5:42:b1:0c:0d:62:0a:41:
f0:03:3d:9b:20:7b:2f:e1:82:5e:f3:3d:0f:8c:32:c4:f1:ab:
6e:82:d5:0e:80:fb:6f:fd:67:79:6e:d2:9d:64:be:54:f8:3f:
49:93:39:a0:a2:61:03:c7:78:dd:59:0d:8c:d1:12:ef:42:ea:
69:28:b4:61:85:1c:88:79:fd:47:34:4f:60:50:89:78:61:0d:
42:f0:16:25:42:15:c4:40:75:f8:f9:f1:d3:e1:1d:4c:90:1a:
56:84:5d:a2:ab:df:bc:1f:71:5c:9e:b6:9b:d2:85:81:34:b7:
bb:54:f9:7f:95:a4:18:3b:52:9b:26:96:3a:cb:db:eb:89:6d:
74:82:02:21:31:ba:3a:b3:f5:be:3b:2a:06:fb:50:a8:3b:cc:
2a:96:a6:01:af:b9:fc:49:58:73:68:5f:2c:f8:ab:1c:4f:fc:
f1:81:b1:ce:a5:dc:10:3e:6f:65:47:d7:f2:69:b3:d7:61:88:
b4:1e:c0:5f:b5:4e:25:69:4c:7c:32:72:43:4a:d2:65:4a:84:
4f:b2:4d:0a:47:2b:e0:fa:bf:4f:05:93:b6:aa:34:bb:c3:d4:
3f:c2:db:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVBNTgxMTAvBgNVBAUTKDJEMTgwNkJCNzlGN0VDNkE2OTdDQjBBNjVBMjFFNUNC
MTIyRkRFNzYwHhcNMjYwMjE5MDQyNzAxWhcNMjYwMjI2MDQyNzAxWjAYMRYwFAYD
VQQDDA02OTk2OTExNS03NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbjN38Cr7l1qRnZ5ROHEa7gHv8SPQzW3cBGyHmzVZSQ3MUtB+N06/gG3nRKK
mwEit4+Y8JWSVfuo8cJLeakYpknisGbjFzEz8KIFqf2AirjvOgY6duJmN26MHwDI
p0rpm2iGhm9HPCLdlGoCmt4Ktj/ldzN+zDu5UPe0yh4+nxyKp8bNIWRrEaqhP5eN
53QbMw23QCvvaL7eUd9eVxf19x3sV7iiKUrqk3MpCsBfvE96c/cXaNeUpMbjC1Vp
vgmx+jZRCYl2GhUXU0g64fqsiSz/WV8eMGTf7iArzpwSp8wUQb3Tshc524ipjVqf
HqHQi1BMwjxXpIm9al16rvyyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoIgo6E
3qGZp/UUyI9zyW+BrIDqMB8GA1UdIwQYMBaAFC0YBrt59+xqaXywploh5csSL952
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ERjY5NEJBNjdC
RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdHcHBmTENtV2lIbHl4SXYz
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUE1OC9ERjY5NEJBNjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdH
cHBmTENtV2lIbHl4SXYzblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUSFzJW4ZhUDixSnyORqvrrf3Ui1ts1IyuFodixUKxDA1iCkHwAz2b
IHsv4YJe8z0PjDLE8atugtUOgPtv/Wd5btKdZL5U+D9JkzmgomEDx3jdWQ2M0RLv
QuppKLRhhRyIef1HNE9gUIl4YQ1C8BYlQhXEQHX4+fHT4R1MkBpWhF2iq9+8H3Fc
nrab0oWBNLe7VPl/laQYO1KbJpY6y9vriW10ggIhMbo6s/W+OyoG+1CoO8wqlqYB
r7n8SVhzaF8s+KscT/zxgbHOpdwQPm9lR9fyabPXYYi0HsBftU4laUx8MnJDStJl
SoRPsk0KRyvg+r9PBZO2qjS7w9Q/wtvN
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:38:04 2026 by rpki-client