
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json)
Hash identifier: KDYgbTmiYPs0fYthCGKKFBhwPjSi925OhygMTCRuziE=
Subject key identifier: 6E:D3:EA:91:E4:0A:20:7B:3A:B3:F6:3A:22:F7:DF:A0:C3:71:69:DA
Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
Manifest number: 0227
Signing time: Thu 19 Feb 2026 01:28:38 +0000
Manifest this update: Thu 19 Feb 2026 01:28:37 +0000
Manifest next update: Thu 26 Feb 2026 01:28:37 +0000
Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: e89MqiUEe4vatcm7m4j4bv8DYvZPGXHYdqDDSzenlWs=)
2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: HR/YddgFvJk+kLQYzt7LQ0V5NEPNgk2haN6DNZL8fWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Validity
Not Before: Feb 19 01:28:37 2026 GMT
Not After : Feb 26 01:28:37 2026 GMT
Subject: CN=69966746-e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:d8:4c:3e:b0:1d:81:01:fb:a3:fa:b6:c2:
a6:a8:a5:c4:f5:32:a9:bf:d1:93:63:2d:d3:ee:36:
ff:fa:c0:1e:28:86:80:8e:d9:8a:0a:b7:65:69:60:
20:b1:7f:b3:93:fa:68:95:d9:f4:bb:8f:60:11:1e:
fb:04:ea:f3:7b:a4:7a:74:d2:13:8d:20:d0:ca:5b:
4f:08:23:53:2c:49:8c:ac:a6:7c:05:29:9c:bd:1f:
4b:48:d5:9b:09:65:d5:c1:96:ec:3e:6b:7f:37:34:
c1:e4:f9:2a:9b:de:81:51:00:27:b1:9a:5a:ff:75:
9a:f3:ad:45:f3:ae:38:0a:39:a8:d9:90:d4:d3:6b:
ee:3a:85:66:ed:37:d4:90:65:ad:05:a5:ff:8e:54:
8b:72:88:b2:00:88:df:7c:fb:8a:97:5f:21:d6:89:
46:54:90:fd:c2:69:8a:74:35:45:f2:c2:5b:6d:c5:
f2:8b:c3:ee:07:ea:91:30:86:47:c2:91:8b:ce:71:
95:f1:c1:fd:a3:89:49:cd:1a:72:3a:81:bc:5d:b3:
9c:76:5d:ca:46:7c:67:4d:ab:bd:44:c7:3f:3d:a4:
74:a6:96:0f:13:da:a2:96:71:3b:56:58:44:35:01:
20:5f:6c:ae:5d:e8:6c:98:b9:af:64:f3:b7:c8:52:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:EA:91:E4:0A:20:7B:3A:B3:F6:3A:22:F7:DF:A0:C3:71:69:DA
X509v3 Authority Key Identifier:
keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:e4:fd:fc:da:d4:c9:4a:6c:a7:f2:c3:ab:6a:1d:bd:9b:
37:75:81:ec:07:b2:2e:1e:c8:67:05:ed:80:ce:88:fc:97:4d:
6f:c0:e0:6e:8d:22:03:78:3b:95:bc:cd:f9:7f:39:d9:bf:91:
97:1f:76:de:af:e6:2b:26:a5:fc:d8:59:d4:90:da:fa:3e:4b:
de:71:6b:cd:f1:3b:a6:f2:9f:92:ed:7c:7c:49:a9:49:cd:29:
1a:bd:61:35:f6:16:df:8e:20:d4:05:f6:58:62:84:93:b9:ed:
38:80:5d:6d:31:7e:33:9f:e8:de:ff:5e:b9:de:75:3e:c8:aa:
3c:9b:3f:78:f4:ea:35:e4:34:41:d1:4e:e8:04:6e:b1:57:7d:
b3:cf:c9:01:0a:5b:6b:09:78:62:6d:2b:cf:79:d2:1e:f2:50:
a5:76:f6:32:44:a5:db:c0:16:53:86:6e:4d:26:0b:2c:ff:8e:
04:49:29:13:3f:c9:27:c2:e0:e9:18:d2:ef:01:9d:4b:ef:e2:
57:27:89:38:7a:c1:a4:fa:38:5c:11:52:69:a4:ff:84:23:cf:
79:8b:1f:c7:30:b5:66:ab:15:3e:a3:40:78:e7:20:ee:53:51:
f1:3f:26:e4:e3:d9:a9:b5:d6:c6:42:20:cf:ff:f0:1f:1a:81:
cc:e1:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:54 2026 by rpki-client