
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
File: iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json)
Hash identifier: r2SXFkVEDuyJHqLN/I/NtEuGW+0LG7R3anOMhelPHjw=
Subject key identifier: DC:74:34:C5:1D:AF:BA:08:87:0E:67:E0:B0:25:07:7F:B2:DB:1D:35
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
Manifest number: 0144
Signing time: Thu 19 Feb 2026 03:44:54 +0000
Manifest this update: Thu 19 Feb 2026 03:44:54 +0000
Manifest next update: Thu 26 Feb 2026 03:44:54 +0000
Files and hashes: 1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: xlad3pSYkzkQTMq6ZqaF8X93QthdJDPtucTFyJfjFwg=)
2: DC857BE8843111F09719836AC4F9AE02.roa (hash: qHV4LLtdLNsakUr43NtlwblQMKyqVyTmPBHeJjQSZeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Validity
Not Before: Feb 19 03:44:54 2026 GMT
Not After : Feb 26 03:44:54 2026 GMT
Subject: CN=69968736-b071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:aa:30:aa:a9:da:0e:6a:22:88:e5:a4:fb:
d1:b1:b5:22:5b:4b:48:af:2e:3a:b3:d7:14:11:c8:
d0:1a:b9:a4:0a:34:ab:cd:e1:69:a2:04:e9:14:42:
f1:73:46:37:d0:22:b7:61:3e:81:38:69:34:02:7c:
37:38:f5:b0:0f:b9:a3:5b:85:3e:0e:d5:46:e7:a6:
73:e3:6a:12:66:cc:6e:b6:91:1e:ba:8e:5d:28:7c:
a1:5f:60:3f:c5:c6:6e:28:e2:34:50:72:9a:48:44:
03:7c:e7:1f:b9:25:ce:75:5a:e9:11:4c:da:a0:c2:
7b:d1:46:72:6e:f3:eb:f6:07:76:b3:d9:d2:b9:74:
35:18:53:b7:f7:f4:a3:1d:de:95:13:66:59:86:aa:
cc:f8:41:10:7d:f6:0e:d1:05:2a:87:b1:f3:d0:15:
87:f4:33:55:47:a0:2e:c4:41:06:e0:50:60:0c:2a:
b5:99:1f:92:5b:44:fc:5e:42:bb:98:1b:13:1e:5f:
6d:f9:a9:d3:e5:59:fa:2d:95:5d:5f:5b:bf:29:1c:
f4:a9:6f:2c:6c:83:cf:93:ef:f0:9c:c1:5e:1c:2e:
60:72:fb:1a:7b:3a:1d:de:bb:7a:f0:e8:1e:a6:78:
22:93:f6:0d:24:f7:7e:61:d1:11:51:03:31:5c:20:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:34:C5:1D:AF:BA:08:87:0E:67:E0:B0:25:07:7F:B2:DB:1D:35
X509v3 Authority Key Identifier:
keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ec:04:23:9e:6f:96:53:48:bf:65:7f:83:38:ad:58:e0:0b:
ec:0d:81:57:cb:5f:ec:7a:c1:29:dd:b0:c4:51:88:e4:c3:c8:
a1:de:37:13:a9:eb:ce:35:cd:bd:d5:d0:2f:ff:1b:90:09:ca:
2f:c9:97:4e:45:3b:29:a7:e0:0e:58:51:c5:39:16:a2:96:e4:
ac:f5:53:79:a5:84:4e:e9:dd:03:85:f1:9b:59:9b:f7:ac:25:
ca:97:be:41:c7:66:06:ba:a6:8b:04:f9:39:05:f5:28:fb:e8:
59:47:b4:e2:63:05:23:cb:22:b2:99:c6:4d:88:40:c4:24:a6:
f2:d6:de:21:f9:13:41:93:ab:17:09:88:cc:3b:6c:90:e3:8d:
d9:9e:5b:75:62:3d:4b:c3:7e:17:36:1f:df:86:10:72:0f:58:
7a:92:f5:d6:78:8f:61:97:da:70:38:8f:c6:17:8b:27:97:ca:
a2:a5:43:98:df:b0:d4:42:39:fd:aa:32:d9:89:9e:e7:19:89:
86:c8:24:2b:ec:31:64:ba:9b:37:5a:73:53:e7:12:57:8c:05:
d7:b1:2b:53:9b:5f:a7:45:93:7a:a9:4f:5b:0a:5a:06:b8:28:
4a:ee:46:7b:2f:93:13:c1:f3:66:49:97:fa:b0:ab:73:a0:2e:
83:12:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:59:35 2026 by rpki-client