
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json)
Hash identifier: IaVDbEF2IWzeuEkMPpbscIxjsO2VNapDPBiDl7DsK8M=
Subject key identifier: B7:EF:C6:92:55:57:28:1B:07:5F:E6:92:13:7C:57:0D:1B:60:59:48
Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
Manifest number: 2D
Signing time: Thu 19 Feb 2026 06:56:50 +0000
Manifest this update: Thu 19 Feb 2026 06:56:50 +0000
Manifest next update: Thu 26 Feb 2026 06:56:50 +0000
Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: XX9m8A7Lijso2PgrSzwFkFTsjdg4Dqm7DeI59+2VhLw=)
2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: meg/lA1QwqDySKhpjEzkoudVyA+mOqqQd/Xz1Ox0z9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Validity
Not Before: Feb 19 06:56:50 2026 GMT
Not After : Feb 26 06:56:50 2026 GMT
Subject: CN=6996b432-bb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:83:f5:24:fa:15:f3:e6:ca:ec:fc:27:c5:
fd:8c:8a:ea:c7:f0:32:f3:1c:52:a1:23:9b:26:be:
f5:c2:db:31:8d:df:0e:2c:f7:18:68:e5:d8:8c:6e:
ed:e4:96:66:d9:6b:82:14:3a:82:a6:10:6d:6c:95:
06:ce:97:a2:ac:61:d0:41:29:f0:db:e9:b8:52:4b:
d5:32:fc:4a:06:8e:bd:27:14:35:48:1c:c2:d8:f5:
9d:bd:19:7f:62:88:95:04:41:13:95:4b:f8:d4:52:
8c:f9:bc:fe:b9:80:cc:91:d1:d6:91:c6:1d:a8:4d:
46:6c:15:81:24:d3:8d:07:0a:db:9c:02:72:06:2e:
0f:5d:d5:9f:ce:16:f1:c3:13:a0:9b:85:fc:62:ee:
f8:08:b5:eb:7f:39:c3:d3:bb:70:e7:dc:53:38:f6:
32:71:c7:d1:8e:a6:40:5a:ca:e8:a5:54:11:55:11:
da:2f:c0:3c:cc:6c:1a:dd:ff:80:73:5a:52:7c:c0:
5b:b0:a9:76:00:e1:fd:04:c0:25:98:7e:14:93:0a:
4f:0b:dc:7d:71:fd:65:f7:c1:c7:ad:b4:2e:5a:a2:
86:bd:43:3c:9b:ba:81:aa:1f:43:c5:9e:ee:da:45:
3f:9d:d0:08:ca:85:d7:77:a6:3f:41:ba:5a:84:d8:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:C6:92:55:57:28:1B:07:5F:E6:92:13:7C:57:0D:1B:60:59:48
X509v3 Authority Key Identifier:
keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:0d:9f:5b:a7:75:5a:4c:a3:40:2b:a6:b1:75:0d:0e:66:80:
7b:0c:31:39:40:78:ec:e8:87:d1:b9:e2:72:81:2b:0a:e9:a4:
2a:28:cb:ed:33:d6:3a:dc:d2:0a:92:c6:d6:cd:92:a7:0b:7a:
f0:62:f9:85:f4:cd:e2:de:d1:1b:1c:3a:ec:20:54:81:09:12:
e1:72:a1:91:81:24:73:64:1e:4d:fa:be:6a:83:08:73:b1:6e:
e4:3b:ec:97:92:38:69:6d:70:7c:e7:a3:81:b1:8c:d5:4d:6a:
4b:f5:1a:a0:1b:91:b9:20:16:75:8a:1e:a1:0e:71:66:5a:8e:
ca:79:e1:27:b4:f5:3f:64:8f:98:2d:2b:80:f1:3c:1c:e1:48:
fa:bc:06:d2:e5:2d:43:c8:c8:4e:c5:7b:27:24:b8:5b:22:ef:
90:4d:95:d6:6b:74:0a:e5:fb:0c:97:56:5b:da:ce:fb:6a:fc:
0e:fe:db:c6:96:7b:e9:f5:e3:df:1e:97:1e:7d:cd:2a:25:9e:
82:f7:66:19:3e:f2:16:ee:17:a9:13:14:58:5b:0c:9d:d4:77:
46:43:0a:11:1f:81:4a:c7:30:12:b3:1a:f9:a6:57:07:f1:33:
79:7c:1a:1c:83:00:84:1f:6b:3e:9b:f7:b6:a0:56:2f:61:00:
e8:14:b5:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NEZFODExMC8GA1UEBRMoQTg0QTMzNjVFQTUyM0JEQTRGMjMzQTYxRTUwNzdGMzEx
OEQ2M0Y3ODAeFw0yNjAyMTkwNjU2NTBaFw0yNjAyMjYwNjU2NTBaMBgxFjAUBgNV
BAMMDTY5OTZiNDMyLWJiMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbSYP1JPoV8+bK7Pwnxf2MiurH8DLzHFKhI5smvvXC2zGN3w4s9xho5diMbu3k
lmbZa4IUOoKmEG1slQbOl6KsYdBBKfDb6bhSS9Uy/EoGjr0nFDVIHMLY9Z29GX9i
iJUEQROVS/jUUoz5vP65gMyR0daRxh2oTUZsFYEk040HCtucAnIGLg9d1Z/OFvHD
E6Cbhfxi7vgItet/OcPTu3Dn3FM49jJxx9GOpkBayuilVBFVEdovwDzMbBrd/4Bz
WlJ8wFuwqXYA4f0EwCWYfhSTCk8L3H1x/WX3wcettC5aooa9QzybuoGqH0PFnu7a
RT+d0AjKhdd3pj9BulqE2LsPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt+/GklVX
KBsHX+aSE3xXDRtgWUgwHwYDVR0jBBgwFoAUqEozZepSO9pPIzph5Qd/MRjWP3gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RkU4LzMyMkFBQjRDQ0M0
QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlwUEl6cGg1UWRfTVJqV1Az
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcUVvelplcFNPOXBQSXpwaDVRZF9NUmpXUDNnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0
RkU4LzMyMkFBQjRDQ0M0QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlw
UEl6cGg1UWRfTVJqV1AzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIkNn1undVpMo0ArprF1DQ5mgHsMMTlAeOzoh9G54nKBKwrppCooy+0z
1jrc0gqSxtbNkqcLevBi+YX0zeLe0RscOuwgVIEJEuFyoZGBJHNkHk36vmqDCHOx
buQ77JeSOGltcHzno4GxjNVNakv1GqAbkbkgFnWKHqEOcWZajsp54Se09T9kj5gt
K4DxPBzhSPq8BtLlLUPIyE7FeyckuFsi75BNldZrdArl+wyXVlvazvtq/A7+28aW
e+n1498elx59zSolnoL3Zhk+8hbuF6kTFFhbDJ3Ud0ZDChEfgUrHMBKzGvmmVwfx
M3l8GhyDAIQfaz6b97agVi9hAOgUtZY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:21 2026 by rpki-client