
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
File: CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft (raw, json)
Hash identifier: h7aUASY9Up2LASI41mosQArzqNLTYUDHdEVFTYntVyo=
Subject key identifier: DC:34:19:E9:91:23:91:43:08:68:49:11:2D:06:B0:1A:C0:6E:B9:F1
Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
Certificate issuer: /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
Manifest number: 0227
Signing time: Thu 19 Feb 2026 01:29:23 +0000
Manifest this update: Thu 19 Feb 2026 01:29:23 +0000
Manifest next update: Thu 26 Feb 2026 01:29:23 +0000
Files and hashes: 1: CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl (hash: Z2Vb6BaSP4mPYWbz5TEvuHjJhJJClaiT1L+z2YCbWQ4=)
2: D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa (hash: 1DI+mqIXwfIJnsuS//oB0VNc4iGbxjDEhe/n7gNnlpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl
rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168C73, serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Validity
Not Before: Feb 19 01:29:23 2026 GMT
Not After : Feb 26 01:29:23 2026 GMT
Subject: CN=69966773-1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a5:13:3b:b8:ed:b8:c0:a3:6a:90:95:0c:fe:
6d:f8:b4:d4:0c:26:7f:ea:bb:0a:f7:90:31:cb:f6:
d0:bc:a9:39:9d:0a:8f:b1:61:d1:e6:b7:98:7e:29:
06:42:ea:cb:4f:a3:8f:7c:46:da:6d:da:90:59:3d:
bc:7b:9f:52:c9:21:db:e2:5b:ef:76:90:be:34:e0:
d2:b4:a2:d3:42:45:06:61:3e:aa:3d:79:15:01:b0:
e4:1d:d6:72:b4:54:a8:9e:b2:2d:6b:7e:f2:97:2b:
67:d6:b0:4f:b3:39:0c:8d:a5:e7:85:19:4d:8d:1d:
fa:ae:af:4a:3f:ab:e6:b0:26:d6:19:2d:91:f3:fc:
8d:51:66:9e:5f:24:19:b2:bf:32:54:39:90:a3:67:
c7:f5:ad:b7:c7:32:1d:14:a2:ff:7f:f1:72:04:28:
24:b7:c0:d2:da:e6:e8:d4:e3:88:80:de:f9:94:cc:
57:80:ff:14:27:a3:43:c5:d5:b9:01:f1:6b:66:16:
11:c3:16:ed:94:e6:b4:dc:dc:8a:f4:dd:3a:1c:9f:
45:18:ac:56:fd:13:4c:cb:26:2e:b6:b5:b2:b2:24:
78:42:26:fc:7f:c5:2d:d0:7f:fc:3b:11:8c:c4:b1:
1d:8d:43:2a:a5:f1:cc:36:14:0e:71:cc:e8:40:7c:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:19:E9:91:23:91:43:08:68:49:11:2D:06:B0:1A:C0:6E:B9:F1
X509v3 Authority Key Identifier:
keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:01:86:a3:b3:fe:50:0a:86:54:2a:b9:20:70:77:a2:ac:00:
84:92:ac:f5:30:11:1a:9b:a9:3a:2f:f4:50:01:ba:0b:5c:c2:
91:bb:6e:b9:38:a8:a5:9f:84:06:1b:25:60:68:50:7e:04:8d:
01:8a:9e:3a:b1:15:09:6c:03:33:a8:83:63:40:07:8e:dd:29:
bd:c9:0d:7f:4f:7b:35:51:7b:9b:8e:a3:11:b2:cb:c7:62:ed:
1c:70:d5:1b:9d:88:2d:8b:fa:72:22:e7:3a:b0:ae:11:7c:fd:
e9:d3:04:0a:46:d6:22:fc:f7:6a:3d:d1:00:27:1a:3e:31:7b:
90:f2:24:49:24:8f:91:26:90:0a:d0:ed:43:5a:a2:66:41:5b:
5d:9b:02:1c:a3:bf:44:f7:94:d3:47:b9:4c:3d:9a:88:c8:0e:
be:7e:42:58:b3:69:5e:8b:2c:aa:6d:43:a8:46:fa:26:2d:ab:
d3:8b:37:37:12:0e:da:a6:ea:3d:22:16:ce:f3:06:cd:65:63:
32:d1:48:e9:fe:ad:72:ea:05:a3:08:17:01:16:0c:6f:ff:55:
f0:98:64:6a:b0:8e:e6:9b:52:cb:4f:52:5c:aa:02:fc:b3:1a:
c6:40:44:a5:dc:9f:d6:f5:13:4c:14:bd:37:d6:b6:8e:d6:7f:
64:5c:bb:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhDNzMxMTAvBgNVBAUTKDBBNjE1MjgzNEUxMjk5QzExQ0Y2RTA3ODY1Rjc2NUIy
Mzg2NTYzODkwHhcNMjYwMjE5MDEyOTIzWhcNMjYwMjI2MDEyOTIzWjAYMRYwFAYD
VQQDDA02OTk2Njc3My0xYmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9qUTO7jtuMCjapCVDP5t+LTUDCZ/6rsK95Axy/bQvKk5nQqPsWHR5reYfikG
QurLT6OPfEbabdqQWT28e59SySHb4lvvdpC+NODStKLTQkUGYT6qPXkVAbDkHdZy
tFSonrIta37ylytn1rBPszkMjaXnhRlNjR36rq9KP6vmsCbWGS2R8/yNUWaeXyQZ
sr8yVDmQo2fH9a23xzIdFKL/f/FyBCgkt8DS2ubo1OOIgN75lMxXgP8UJ6NDxdW5
AfFrZhYRwxbtlOa03NyK9N06HJ9FGKxW/RNMyyYutrWysiR4Qib8f8Ut0H/8OxGM
xLEdjUMqpfHMNhQOcczoQHwgmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw0GemR
I5FDCGhJES0GsBrAbrnxMB8GA1UdIwQYMBaAFAphUoNOEpnBHPbgeGX3ZbI4ZWOJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEM3My84RTVDOUNDMEMz
MTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21jRWM5dUI0WmZkbHNqaGxZ
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NtRlNnMDRTbWNFYzl1QjRaZmRsc2pobFk0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEM3My84RTVDOUNDMEMzMTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21j
RWM5dUI0WmZkbHNqaGxZNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkAYajs/5QCoZUKrkgcHeirACEkqz1MBEam6k6L/RQAboLXMKRu265
OKiln4QGGyVgaFB+BI0Bip46sRUJbAMzqINjQAeO3Sm9yQ1/T3s1UXubjqMRssvH
Yu0ccNUbnYgti/pyIuc6sK4RfP3p0wQKRtYi/PdqPdEAJxo+MXuQ8iRJJI+RJpAK
0O1DWqJmQVtdmwIco79E95TTR7lMPZqIyA6+fkJYs2leiyyqbUOoRvomLavTizc3
Eg7apuo9IhbO8wbNZWMy0Ujp/q1y6gWjCBcBFgxv/1XwmGRqsI7mm1LLT1JcqgL8
sxrGQESl3J/W9RNMFL031raO1n9kXLve
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:26 2026 by rpki-client