
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json)
Hash identifier: 0T0hgclJiPVmIwckS69EPrCPJemvaaus8NvM9PPuaVE=
Subject key identifier: 2D:9A:06:F7:86:0C:AD:45:A7:3F:7D:49:89:96:54:9E:B9:09:6A:CD
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 0A95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
Manifest number: 1A40
Signing time: Wed 18 Feb 2026 17:14:26 +0000
Manifest this update: Wed 18 Feb 2026 17:14:26 +0000
Manifest next update: Wed 25 Feb 2026 17:14:26 +0000
Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: jxzBPr7RlwY1chToVZL49jCajMFAzXSEZraTStujW4M=)
2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: 3KdGnFuSXvHy11in/TLPpYvy53VKmccJ3nvMreDvB6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2709 (0xa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Feb 18 17:14:26 2026 GMT
Not After : Feb 25 17:14:26 2026 GMT
Subject: CN=6995f372-69d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:3e:4f:03:a6:a4:97:35:6d:3f:c1:85:d8:
a3:1a:ee:c9:d2:e9:ce:67:a1:51:48:b8:66:b0:8e:
87:66:2f:33:a9:8b:3d:a6:f3:71:fa:17:81:f4:d2:
d4:63:63:95:77:d0:25:c9:96:60:50:0e:71:8f:75:
6d:fb:ad:43:b8:a0:16:95:5e:0b:25:d7:e2:58:e6:
c7:0b:e7:c1:45:f8:41:58:41:02:d3:42:9a:ed:8a:
30:0e:2c:3e:a0:ed:2a:7d:fc:55:de:43:8c:4e:8e:
f2:7f:46:45:03:98:3e:8b:90:b5:e1:e8:68:e3:ce:
07:da:60:d9:76:cc:2d:3f:79:3a:ea:cb:a7:49:61:
5c:b9:45:8e:62:e4:11:4a:36:1b:87:de:69:37:12:
fe:74:7f:43:19:9c:75:9e:7f:6a:6e:f6:1f:71:0e:
24:f1:50:86:47:21:8d:9f:23:a0:d7:02:22:97:26:
e4:35:7a:07:5f:23:06:49:0a:40:08:e3:ea:40:33:
87:17:6c:cc:09:94:6e:80:b7:f0:c7:29:bb:60:cf:
0e:1d:80:03:1f:34:42:c1:f8:3a:99:4c:07:ac:00:
3c:06:17:80:4b:7c:21:7e:98:68:4f:3a:42:07:ac:
f2:d0:62:7e:d1:96:2a:08:67:1b:92:3d:d6:8f:9b:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:06:F7:86:0C:AD:45:A7:3F:7D:49:89:96:54:9E:B9:09:6A:CD
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:3b:a0:f0:e8:ea:db:c6:81:f5:f0:b4:0b:68:98:5b:b1:fc:
95:aa:84:ba:cb:fc:a8:6b:07:d7:5f:7f:91:77:b6:b8:36:fe:
45:e8:c3:0c:0c:fa:f3:5f:9f:c5:06:53:e7:d2:00:51:b5:d6:
e8:61:fd:29:fd:8c:cb:f8:64:67:b1:b7:21:c8:2a:22:e4:72:
f6:8e:e9:2a:a9:f7:31:4b:f4:f7:06:c7:50:e6:96:20:bc:d6:
5d:bf:d8:ce:48:b7:d8:f6:cf:66:17:c4:90:86:0d:d6:4b:50:
f8:b3:14:5e:be:ac:7e:44:10:b5:a5:01:6f:09:13:ae:fd:ae:
3f:f0:5c:89:b5:f4:92:e0:23:bb:e9:e7:cf:76:68:b6:8e:fc:
61:12:83:32:1b:f6:e5:2d:0f:42:6d:b9:1c:13:4f:cf:6a:ad:
67:50:61:05:c1:06:5a:21:f7:74:1b:92:95:08:fa:23:57:7b:
b7:3f:9f:14:b6:28:3d:fa:a8:87:93:78:a1:ef:28:0a:91:c4:
36:22:3f:d2:8b:58:35:ba:0f:17:2a:46:4c:2a:c6:3e:d4:d4:
df:8f:53:09:60:d2:dc:14:a7:a2:9d:44:8d:9f:4d:d7:96:94:
21:df:b5:70:08:71:f9:59:3b:06:e1:ed:07:64:42:8b:ea:a9:
90:1e:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:37 2026 by rpki-client