
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
File: DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json)
Hash identifier: ILtqUYi7oOB5fkpGcilybvWP3XG7UUiqrOYQLmd6rXU=
Subject key identifier: DE:0D:5D:E8:AF:C9:5C:82:05:40:EF:53:25:4C:32:44:3A:02:15:B6
Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
Manifest number: 8C
Signing time: Thu 19 Feb 2026 05:54:39 +0000
Manifest this update: Thu 19 Feb 2026 05:54:39 +0000
Manifest next update: Thu 26 Feb 2026 05:54:39 +0000
Files and hashes: 1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: p0SODDcoo1nMff9AHsnwmI0y3rygeglQE9g1kXd+wxA=)
2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: ZBkz59AFukUtQQhUm9VALKebhx4SAnS6KuBa7oNjdTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Validity
Not Before: Feb 19 05:54:39 2026 GMT
Not After : Feb 26 05:54:39 2026 GMT
Subject: CN=6996a59f-259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:fe:4e:ce:6d:b7:80:95:22:e1:59:68:44:
fb:5f:e4:7b:cf:46:07:b5:47:1b:a3:b2:36:f2:13:
fb:88:59:ce:c5:51:03:db:b1:e4:3a:64:0d:7e:63:
70:40:cb:5b:37:5c:f9:33:94:90:19:77:66:0b:1c:
1b:fe:48:52:ed:7c:a9:06:2d:ba:73:69:64:2a:2b:
ce:d7:94:bf:1d:88:70:7f:e3:55:ee:db:7b:4a:bf:
5f:9c:c2:d6:27:ab:c8:c7:5f:f2:a7:18:60:6e:18:
d5:a2:26:7a:98:c8:b8:1d:d0:03:7c:f7:92:f8:b5:
bc:cb:f2:ba:3e:a2:f1:47:f3:44:6e:cb:b7:55:68:
9d:c0:70:53:f6:c5:e9:3b:44:ba:fd:13:f8:e4:d8:
88:be:cc:fe:05:ba:db:3c:3c:a8:d1:c9:f5:a3:d2:
7e:21:e5:24:da:f5:c9:81:cf:f9:d4:ee:cc:58:1c:
83:63:e1:69:30:8c:83:af:f9:1d:f2:07:97:2e:a6:
be:87:50:a8:d2:90:88:93:9d:ae:bb:04:e8:67:28:
5f:1b:55:94:08:59:eb:c7:87:3b:37:09:33:b6:e5:
61:a1:bb:ee:c7:57:ea:dc:ca:39:41:85:6e:a0:9b:
ad:21:b7:df:a9:d0:9c:5c:f0:71:c8:d4:f7:a8:ed:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:5D:E8:AF:C9:5C:82:05:40:EF:53:25:4C:32:44:3A:02:15:B6
X509v3 Authority Key Identifier:
keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:e3:32:35:da:70:81:41:74:67:be:c2:2e:f4:1a:82:7f:
68:02:3e:90:58:c6:e1:53:92:1c:81:66:3d:65:3f:b7:96:10:
8b:49:26:02:36:21:4d:01:6b:a3:d4:f1:fb:1f:2e:29:08:4f:
60:7a:42:9b:3b:b4:10:e5:11:3e:dc:af:b5:e2:5b:ac:a9:e2:
b1:d6:ed:21:1b:99:10:2d:bb:4c:38:a5:c0:bc:57:6e:e9:a5:
b6:ec:80:db:dd:69:78:f3:38:fa:cd:59:ef:65:83:c4:2f:60:
a2:ab:24:d8:7f:1c:fc:98:82:d3:92:f5:91:9b:d0:41:47:b5:
f3:58:69:6a:87:67:16:57:de:3d:2d:bc:4c:7f:26:f8:c8:73:
69:8e:06:98:84:5a:66:2b:b1:a3:d7:9e:e8:4b:cc:3a:69:ac:
e6:91:78:61:1c:bf:91:e1:7e:bf:55:71:13:af:3e:c1:66:4d:
e8:6c:1b:f8:12:15:37:a2:d4:50:04:91:9e:e1:68:fe:92:1c:
17:73:61:67:07:ba:dc:88:39:c0:3d:5f:8e:c7:fb:9f:0d:99:
76:67:8c:14:bd:78:9d:f1:68:f1:bc:d4:9b:ea:76:91:d4:6f:
c6:fc:88:f3:28:f9:c8:b9:f1:8b:f8:43:df:43:12:81:c9:37:
b0:74:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:29 2026 by rpki-client