
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
File: 3q8cjeT-PFHGkVP8r5_owq1vjiY.mft (raw, json)
Hash identifier: zlzsSH+EFy5PVkpTaQ7UR8IrSuNTwiOXFRCfpSLM7ME=
Subject key identifier: 6B:83:C4:4D:55:2B:B5:9F:03:5B:78:27:D5:86:4D:A5:71:20:2F:5C
Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
Certificate issuer: /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
Manifest number: 019E
Signing time: Thu 19 Feb 2026 02:45:58 +0000
Manifest this update: Thu 19 Feb 2026 02:45:57 +0000
Manifest next update: Thu 26 Feb 2026 02:45:57 +0000
Files and hashes: 1: 3q8cjeT-PFHGkVP8r5_owq1vjiY.crl (hash: u+x0xMJ3SBBRRDM6BJo92ikTcrbkZJ/yPWD5uvT4rbY=)
2: 1C2EA330925011EE9571EE40C4F9AE02.roa (hash: g1vuB/s+fKkz9lQDwgz7uwUHIIgwyYOpfROfbA+7Aro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Validity
Not Before: Feb 19 02:45:57 2026 GMT
Not After : Feb 26 02:45:57 2026 GMT
Subject: CN=69967966-4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:c6:4c:c4:f1:16:ff:96:56:f7:4f:56:20:
ae:9a:47:d3:5d:e9:27:26:d2:1c:f4:65:2c:dc:97:
c4:47:fe:b1:5c:cc:2f:06:d3:47:81:18:a0:e6:02:
1c:17:b6:7a:a3:bf:2c:31:c4:b2:35:54:4c:6b:b2:
e1:d0:6d:79:20:93:c8:ca:90:9d:0b:ca:c6:1c:2f:
4b:40:73:5e:99:4a:a7:e3:ea:7c:15:62:2c:ed:dc:
bd:0e:07:25:1f:a7:48:a1:a9:dc:01:4d:3a:39:b4:
f8:a3:c9:4d:74:f0:fc:24:72:8d:b7:8e:85:c9:6a:
83:c2:5e:69:3b:7f:70:60:8e:f6:38:c3:68:b3:a8:
6a:7a:66:65:c8:5d:f1:02:9d:c4:ac:d1:87:40:98:
c6:f6:1f:41:19:d8:a9:bb:ef:56:d5:37:51:99:97:
2a:3a:f1:56:b0:55:13:e1:72:c2:8a:4d:5b:55:00:
89:66:7a:86:85:a7:c7:02:b0:42:af:33:21:71:0b:
c9:e8:57:16:aa:dd:9a:32:0f:54:7d:68:e0:f3:fb:
32:6a:3d:19:19:59:40:2c:b9:cb:51:67:94:0a:05:
94:0e:82:28:8d:75:cd:53:51:77:14:17:d4:99:df:
c1:3a:08:71:45:5e:e2:f7:06:3a:db:21:72:8f:98:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:C4:4D:55:2B:B5:9F:03:5B:78:27:D5:86:4D:A5:71:20:2F:5C
X509v3 Authority Key Identifier:
keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:3e:74:16:40:2c:fd:06:85:39:dc:69:bf:ee:ca:70:cb:
25:db:1e:d9:5c:68:04:fb:8b:b4:fa:45:36:88:32:b0:69:f7:
41:99:79:bd:3e:03:3c:cc:a6:a9:65:b0:7b:cd:e5:82:2b:35:
b0:05:61:03:6a:52:b9:d3:bd:62:84:00:bf:1e:03:71:26:fb:
e7:69:39:b2:1f:27:50:e7:7b:c6:2a:77:97:34:e3:57:c2:4b:
94:46:f6:96:17:0d:6f:55:6c:b0:d8:b0:f3:bc:b9:f4:52:4c:
9d:39:63:cc:0e:b1:dc:d1:e9:f1:11:37:7b:a3:6b:d7:60:4c:
e0:7a:f9:11:d2:a4:ff:67:b9:94:29:61:ce:16:57:61:45:1e:
7e:d6:96:cb:a1:91:66:37:c1:0d:7d:9d:8c:5f:80:c2:68:53:
e8:3a:a6:43:97:21:a5:f5:d7:43:85:e6:ad:a3:64:51:3e:c9:
50:9e:4e:ff:4c:66:66:a4:44:22:d2:3f:d9:83:c1:5b:22:b3:
1d:dd:43:3e:0e:bd:33:05:51:90:17:17:c8:e3:5e:15:8a:c3:
ef:3a:0a:e7:91:f4:35:e8:53:d8:40:20:ff:8d:c9:34:8a:47:
8c:29:a3:66:83:c7:3e:38:3e:f3:08:26:07:61:6b:0b:10:3b:
fc:d9:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:40 2026 by rpki-client