
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier: Y/R+TDmuQnVG4Np4oqZE5NaUehzBx+XMbkBwx62QLjQ=
Subject key identifier: 0F:CE:CB:CD:80:10:DA:4E:AD:E9:C7:35:B4:9B:B9:9E:39:0B:3B:2F
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 195C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number: 194A
Signing time: Wed 18 Feb 2026 16:13:39 +0000
Manifest this update: Wed 18 Feb 2026 16:13:39 +0000
Manifest next update: Wed 25 Feb 2026 16:13:39 +0000
Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: nSOaTT7awm6Z+LWiP8LFCwppwGXHOThQ/a8rxk/HgP8=)
2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: LY7vLpDfVXZjs8mY5Lmcq8YY4mbx+XwbeXcZe9sNvfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6492 (0x195c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Feb 18 16:13:39 2026 GMT
Not After : Feb 25 16:13:39 2026 GMT
Subject: CN=6995e533-9de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:c9:14:7b:32:03:1a:77:1c:28:30:ca:4b:
ec:9e:75:de:72:53:68:ca:91:59:02:b8:49:7a:68:
40:df:93:b9:a4:ab:e2:f7:a1:2e:f6:47:7b:31:30:
a7:3b:ce:9c:8c:fc:5b:17:cd:23:3f:1e:46:dc:da:
e0:a1:d0:dd:98:2e:d8:6c:70:ff:1e:d6:f5:68:93:
74:f6:81:7b:66:96:cd:71:02:b9:b9:9b:19:37:a7:
9b:d5:bf:45:0b:4b:b9:8b:4e:60:8f:c8:ec:9c:29:
d8:12:da:08:5f:01:2c:3c:13:32:81:40:d9:d1:c3:
8d:a5:bb:ed:40:d1:b1:27:f0:fc:ce:a7:5e:f9:85:
54:b6:4f:5e:40:17:f1:5c:77:3d:8b:77:e4:40:8c:
a6:63:7d:dc:eb:4e:65:9a:4c:20:5a:be:b0:7c:91:
6b:60:8d:28:51:55:76:ce:ea:99:fe:ed:11:d8:e4:
be:35:e7:97:2f:ca:49:31:8e:a7:c5:88:57:8a:3e:
56:95:aa:5d:43:75:bd:35:ae:e8:52:da:41:62:aa:
ac:5a:13:1c:31:37:33:d8:10:22:d7:09:62:c0:eb:
13:98:0e:5d:b7:75:e1:d3:ca:e0:2a:14:30:b0:82:
23:32:59:67:3d:ac:a0:21:1a:ee:b6:28:9b:4e:bd:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:CB:CD:80:10:DA:4E:AD:E9:C7:35:B4:9B:B9:9E:39:0B:3B:2F
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:bc:79:f7:d6:06:a8:58:7a:5d:cd:30:6b:1f:27:9e:20:
b1:06:9f:73:69:0c:e5:8b:2e:30:18:8e:51:05:88:f4:48:42:
56:b3:d7:b4:12:6b:94:cf:ce:2a:20:cf:31:52:11:cd:eb:34:
2d:23:cb:8f:19:5a:74:aa:8e:44:30:32:78:70:a9:b7:b2:5b:
df:6f:44:58:f9:68:47:c5:85:c5:4f:c6:06:ba:57:70:24:b9:
20:04:ad:04:40:fe:b7:49:95:e6:ca:03:15:69:28:46:f9:f5:
d4:4c:ca:04:17:c5:27:4a:47:3c:ee:3c:cd:6d:76:7d:11:15:
b2:36:6a:46:de:92:38:48:76:db:dd:15:0e:74:e1:d1:4e:c4:
27:a5:9e:df:0d:dc:ff:d8:f1:a9:a3:1b:71:4a:53:f3:25:70:
3c:20:80:a2:f9:74:c1:90:cd:99:2c:5e:18:86:1e:51:4a:35:
8e:d0:e2:0d:fe:65:c2:71:66:59:75:09:4a:a9:15:34:99:92:
d5:4e:21:40:32:7a:5c:f2:68:42:b1:14:9b:4c:ab:0f:5d:af:
57:63:ef:73:dc:a8:6c:93:47:4e:7a:5b:c6:e0:6e:1e:a5:46:
e4:fa:c7:8a:7f:a0:43:b1:66:93:8d:9b:a8:70:90:e9:be:d1:
ae:17:c3:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1
RTE4RkUxRTIwHhcNMjYwMjE4MTYxMzM5WhcNMjYwMjI1MTYxMzM5WjAYMRYwFAYD
VQQDDA02OTk1ZTUzMy05ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGXJFHsyAxp3HCgwykvsnnXeclNoypFZArhJemhA35O5pKvi96Eu9kd7MTCn
O86cjPxbF80jPx5G3NrgodDdmC7YbHD/Htb1aJN09oF7ZpbNcQK5uZsZN6eb1b9F
C0u5i05gj8jsnCnYEtoIXwEsPBMygUDZ0cONpbvtQNGxJ/D8zqde+YVUtk9eQBfx
XHc9i3fkQIymY33c605lmkwgWr6wfJFrYI0oUVV2zuqZ/u0R2OS+NeeXL8pJMY6n
xYhXij5WlapdQ3W9Na7oUtpBYqqsWhMcMTcz2BAi1wliwOsTmA5dt3Xh08rgKhQw
sIIjMllnPaygIRrutiibTr053wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/Oy82A
ENpOrenHNbSbuZ45CzsvMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky
RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy
eXpWM1VwZk90VnBlR1A0ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO4bx599YGqFh6Xc0wax8nniCxBp9zaQzliy4wGI5RBYj0SEJWs9e0
EmuUz84qIM8xUhHN6zQtI8uPGVp0qo5EMDJ4cKm3slvfb0RY+WhHxYXFT8YGuldw
JLkgBK0EQP63SZXmygMVaShG+fXUTMoEF8UnSkc87jzNbXZ9ERWyNmpG3pI4SHbb
3RUOdOHRTsQnpZ7fDdz/2PGpoxtxSlPzJXA8IICi+XTBkM2ZLF4Yhh5RSjWO0OIN
/mXCcWZZdQlKqRU0mZLVTiFAMnpc8mhCsRSbTKsPXa9XY+9z3Khsk0dOelvG4G4e
pUbk+seKf6BDsWaTjZuocJDpvtGuF8Mo
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:36 2026 by rpki-client