
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier: WuaKTEqMVG+dIlxGTmtabFH3gHSVLDM6ubMNvbFeFKM=
Subject key identifier: 2B:BD:65:83:20:F2:8E:D2:8B:EB:81:1E:58:8E:63:BE:5D:75:C6:E2
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number: 01D9
Signing time: Thu 19 Feb 2026 02:11:36 +0000
Manifest this update: Thu 19 Feb 2026 02:11:35 +0000
Manifest next update: Thu 26 Feb 2026 02:11:35 +0000
Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: /oCUGyESdQowoYB+L98v5DoW6f7XZ+uF0RLHBLVkOpM=)
2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: GFGPvdmy2vrmiAyM3NUeTKYyq91wUi+ACbGsbCoh47g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Validity
Not Before: Feb 19 02:11:35 2026 GMT
Not After : Feb 26 02:11:35 2026 GMT
Subject: CN=69967157-779f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:ff:45:f7:40:68:4a:a7:e6:bd:e2:47:7b:
16:d2:c7:4b:22:c2:80:ea:95:e9:00:f5:87:36:ed:
cc:5e:64:9a:59:8c:15:80:3a:9a:8c:79:12:cb:7a:
03:21:9e:eb:54:b6:79:f6:38:6c:97:43:82:40:f3:
3c:bd:0c:10:f7:72:f9:58:ca:fe:1d:ee:d0:2d:2a:
0c:5c:ca:bf:cd:4b:35:52:38:6d:36:1c:5c:24:40:
f1:8d:62:77:e1:6a:31:07:78:5b:d7:67:f7:83:37:
44:38:90:38:c7:78:05:54:1a:41:1f:09:ca:c7:82:
22:dc:1b:ef:6f:cb:bc:a8:7b:eb:25:6e:dd:d2:07:
0f:0b:f1:ee:04:9d:1c:46:94:32:69:33:d6:90:7a:
88:40:53:53:02:8c:81:05:e2:99:b9:4f:59:b3:6b:
20:62:f3:9b:aa:bf:c8:14:f0:52:d4:4b:64:39:db:
1e:19:1e:7e:d7:69:00:f2:79:b4:5b:0f:11:42:d8:
00:8d:14:a3:9f:3d:40:b5:8d:b0:1e:11:ed:13:e6:
78:30:a9:23:55:5f:b4:1f:22:26:d9:b0:cc:6d:c2:
8f:df:10:07:1c:26:35:a0:96:e9:e7:f9:04:8f:f7:
f4:e9:6d:d9:86:df:f3:47:45:33:22:36:0a:3f:e6:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:65:83:20:F2:8E:D2:8B:EB:81:1E:58:8E:63:BE:5D:75:C6:E2
X509v3 Authority Key Identifier:
keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:d2:bf:fa:87:39:44:3f:d5:be:d5:79:a0:af:74:b3:09:c9:
bf:67:d8:9f:ee:74:23:1a:29:bd:20:16:ea:91:e1:31:09:ef:
62:92:0c:2c:dd:c0:53:e8:a1:78:8f:72:ec:e2:e4:eb:e8:b9:
56:86:c4:bb:97:66:c8:13:13:21:ee:a9:d0:9b:2c:84:e7:f4:
9b:55:ef:8b:cf:1f:58:dc:45:24:d0:95:8e:af:d9:fc:4e:06:
fb:51:a3:25:8b:ae:a4:68:bb:07:15:5d:31:fa:3d:88:b7:3e:
5f:f5:2a:1d:f1:8e:50:53:d7:28:46:6e:78:8c:15:ab:7b:58:
34:c5:d8:f4:ba:b6:d5:2b:14:58:72:36:6c:2d:49:78:60:6a:
7b:9e:19:51:61:1a:79:7f:e3:27:98:24:3b:0b:ad:3c:cf:68:
33:e5:6d:e9:ce:ca:94:e8:a6:8d:b0:a5:5c:8f:39:d9:d7:9d:
4c:78:70:36:e4:32:1e:5a:e8:35:c5:be:c5:6f:9f:ba:bb:76:
ff:24:14:77:ae:3a:df:ae:9c:b1:2f:7e:be:6e:96:32:36:f9:
43:62:0c:a2:64:70:0f:c0:55:e9:e3:0c:64:10:4a:96:73:2c:
c7:3d:4c:68:02:da:ae:9e:2f:67:47:fb:5d:58:cd:2f:09:05:
bf:35:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:20 2026 by rpki-client