
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: lOquPFV2uMFOHn3EjjA0ZHm+C9vA69jGwov6oWcb0Ls=
Subject key identifier: 01:C2:EA:B8:6C:3D:33:0C:25:BF:D2:82:BB:E4:DE:DC:A6:EB:08:17
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 0337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 0331
Signing time: Thu 19 Feb 2026 00:14:42 +0000
Manifest this update: Thu 19 Feb 2026 00:14:41 +0000
Manifest next update: Thu 26 Feb 2026 00:14:41 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: N/nPBWWcng2V8MFPv8Sx++AZyTutNM4kjvJlaUASNr0=)
2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Feb 19 00:14:41 2026 GMT
Not After : Feb 26 00:14:41 2026 GMT
Subject: CN=699655f1-353f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:0d:d7:c7:2d:9b:9d:a1:96:5a:c3:8c:66:
bb:72:b5:72:9f:ce:4a:47:a2:6a:fb:bc:ac:db:1d:
61:f3:b3:76:bf:02:f0:12:52:60:29:69:25:98:49:
0c:ce:19:a1:23:8f:c7:63:29:ed:20:42:c7:00:20:
04:00:3e:c5:75:85:8c:80:bf:ae:13:bf:0a:c8:65:
94:44:e7:58:22:1f:f7:49:74:71:77:df:cc:d7:fd:
56:5e:20:79:27:5d:16:f2:7c:91:b4:4a:2a:05:b2:
44:3d:bf:bf:46:00:d4:87:79:2b:cc:74:33:07:6c:
8b:3c:18:c9:7e:47:fe:8c:3b:2d:54:6f:bf:2b:79:
d7:5c:4a:66:cd:c3:50:b2:d0:27:80:a3:2e:99:9b:
e4:11:cc:b1:c3:7c:ab:4f:fe:c7:8b:64:24:71:a8:
bc:26:df:d3:31:09:2e:3f:cf:fc:47:1b:1c:b8:2e:
e9:b1:5b:18:c1:17:72:f9:9e:13:5c:e4:c8:ab:f9:
7d:5e:a3:27:93:f0:8e:f9:a5:4e:e6:71:9b:0c:6d:
c7:92:c0:c1:23:fb:29:cb:42:b7:b8:9e:d0:4f:c7:
5f:66:92:0d:a2:72:8c:24:f7:ae:73:97:99:ff:59:
8b:0d:e8:70:ba:65:6d:81:e4:b2:69:cd:56:75:cd:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C2:EA:B8:6C:3D:33:0C:25:BF:D2:82:BB:E4:DE:DC:A6:EB:08:17
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:ff:6f:9d:3c:31:f0:ed:bd:42:4e:68:04:0d:d2:88:ed:
21:ec:68:6a:ce:d4:01:30:82:59:5a:2e:49:b5:d5:65:bd:35:
0a:1c:27:34:13:83:84:e8:91:60:34:0f:8b:71:8c:99:40:69:
8d:cc:d0:d0:28:e3:ee:ab:44:22:f0:ce:f9:eb:73:0c:0e:00:
d4:65:54:e5:86:72:06:ee:4c:33:45:73:36:bb:78:62:cd:14:
c8:b2:cd:c8:2d:78:43:25:aa:f9:e0:cb:c9:2f:30:9b:35:0b:
7d:8e:95:fb:af:72:dd:16:12:e4:d4:ac:76:0f:3a:bd:c8:e7:
9c:cb:ef:c1:8c:46:66:5c:b1:66:35:d3:f0:72:6c:e5:74:31:
7f:56:9c:07:7d:2f:07:78:d3:f7:20:8a:05:e5:be:b7:44:6a:
e0:64:50:e7:30:ab:25:0c:73:b6:21:74:fd:15:6e:96:f7:b3:
a2:08:72:a5:2b:27:e0:b1:80:27:de:d1:48:91:b1:ae:3b:54:
73:5c:93:83:90:a8:3d:4f:de:08:2e:6e:e8:0e:90:17:1b:cf:
6b:c1:ef:22:99:dc:3d:26:fb:17:b3:66:af:60:59:74:2e:09:
07:60:dc:68:18:4d:8d:c1:0a:4a:04:9b:cc:da:e7:bc:6c:67:
c6:00:9c:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4
NTJDRjA1QkMwHhcNMjYwMjE5MDAxNDQxWhcNMjYwMjI2MDAxNDQxWjAYMRYwFAYD
VQQDDA02OTk2NTVmMS0zNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5oN18ctm52hllrDjGa7crVyn85KR6Jq+7ys2x1h87N2vwLwElJgKWklmEkM
zhmhI4/HYyntIELHACAEAD7FdYWMgL+uE78KyGWUROdYIh/3SXRxd9/M1/1WXiB5
J10W8nyRtEoqBbJEPb+/RgDUh3krzHQzB2yLPBjJfkf+jDstVG+/K3nXXEpmzcNQ
stAngKMumZvkEcyxw3yrT/7Hi2Qkcai8Jt/TMQkuP8/8RxscuC7psVsYwRdy+Z4T
XOTIq/l9XqMnk/CO+aVO5nGbDG3HksDBI/spy0K3uJ7QT8dfZpINonKMJPeuc5eZ
/1mLDehwumVtgeSyac1Wdc1r1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHC6rhs
PTMMJb/Sgrvk3tym6wgXMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC
ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ
SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAteP9vnTwx8O29Qk5oBA3SiO0h7GhqztQBMIJZWi5JtdVlvTUKHCc0
E4OE6JFgNA+LcYyZQGmNzNDQKOPuq0Qi8M7563MMDgDUZVTlhnIG7kwzRXM2u3hi
zRTIss3ILXhDJar54MvJLzCbNQt9jpX7r3LdFhLk1Kx2Dzq9yOecy+/BjEZmXLFm
NdPwcmzldDF/VpwHfS8HeNP3IIoF5b63RGrgZFDnMKslDHO2IXT9FW6W97OiCHKl
KyfgsYAn3tFIkbGuO1RzXJODkKg9T94ILm7oDpAXG89rwe8imdw9JvsXs2avYFl0
LgkHYNxoGE2NwQpKBJvM2ue8bGfGAJyN
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:26 2026 by rpki-client