
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json)
Hash identifier: FPSND+7M2QkqvPnMdT4FU/l/lUApubjVLkiQ1/VZ8cI=
Subject key identifier: A2:C7:B0:1D:AA:8F:E4:0C:65:A2:57:25:C3:DC:FB:4A:57:CC:02:90
Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F
Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F
Certificate serial: 0552
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
Manifest number: 054B
Signing time: Wed 18 Feb 2026 22:44:27 +0000
Manifest this update: Wed 18 Feb 2026 22:44:27 +0000
Manifest next update: Wed 25 Feb 2026 22:44:27 +0000
Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: ECT3RxUzFqy56YhX56/NXRVfwq9YfVmnTgSg2eiQ2cE=)
2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: WA0g9RnykAtUExLfaZP3OVzcBqkoQ/6xGucY55FekVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl
rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F
Validity
Not Before: Feb 18 22:44:27 2026 GMT
Not After : Feb 25 22:44:27 2026 GMT
Subject: CN=699640cb-698a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:6a:12:cc:b1:79:4f:0f:f7:78:c4:bf:ba:
45:e9:36:1e:7f:6b:b6:06:02:1d:2f:07:e3:45:27:
1f:ae:ab:78:53:df:4f:ac:66:ff:ee:2a:02:db:0f:
96:67:33:03:86:bc:47:50:a7:4a:81:fe:ff:9b:4c:
cb:3e:c8:58:5b:79:b3:46:05:4b:05:ef:0e:d8:94:
12:58:d6:7b:07:2f:37:8a:c7:52:b3:d1:ac:12:f2:
5b:fc:9e:6c:04:da:7a:93:e4:dc:9d:d4:7c:98:e9:
83:84:d8:a3:b8:e9:0b:8c:41:95:a0:1c:6e:d4:a9:
ed:3d:b7:4f:43:ba:3d:65:f7:6c:0a:01:c9:49:71:
d0:b9:7f:02:b1:62:e3:9e:b1:0c:07:b2:0f:7f:42:
c5:f6:9b:a5:55:44:77:22:2b:5a:db:d1:76:e4:31:
1e:c7:9f:ba:ff:70:0e:30:01:5a:84:89:36:da:a0:
3a:dc:2e:fe:1f:26:9d:76:d8:05:19:61:9b:1a:a1:
9f:0f:ea:64:48:b7:52:7e:29:6c:24:07:e8:4e:ea:
54:0b:97:c1:05:b7:79:80:d1:85:88:bd:67:67:6f:
fa:04:23:c9:b4:74:72:39:14:d4:35:a5:7c:e0:d9:
c3:4c:1c:44:c4:22:e6:b4:0b:ba:5e:fa:5e:c3:38:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:B0:1D:AA:8F:E4:0C:65:A2:57:25:C3:DC:FB:4A:57:CC:02:90
X509v3 Authority Key Identifier:
keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f0:a8:82:c9:25:7e:73:55:12:73:db:a2:6f:1b:d6:a7:be:90:
19:3c:74:4a:be:61:8b:a3:fe:cd:60:e1:20:0f:f5:f2:f6:42:
b9:9f:35:34:93:18:df:f5:d4:50:1e:71:dd:a6:4b:c0:0e:e6:
49:d9:dc:d6:51:51:bb:e6:02:26:bc:3f:ed:73:8a:20:36:12:
96:ed:c6:be:b2:ef:09:5a:bb:63:b7:9d:c3:57:fd:18:96:82:
a7:68:9b:ef:be:92:c5:43:98:b2:57:de:70:ad:d3:3b:38:70:
a0:82:17:d5:6c:a8:91:ab:d4:8f:f7:44:ec:20:76:7a:93:1f:
dd:fa:e2:e5:8c:7e:e4:b9:a2:6b:19:e2:38:30:69:f9:54:4d:
23:63:70:8d:e7:aa:ab:5f:66:e5:56:5d:34:6f:e2:99:b2:0d:
42:ca:47:ea:08:f3:c2:5e:92:25:55:b7:8c:97:4b:07:b4:a7:
6a:13:71:99:8d:c7:76:5c:af:54:4e:3f:7e:69:40:b4:d0:08:
d0:c3:4f:9f:c0:15:5b:e1:15:8d:72:9d:88:5f:1d:35:4a:68:
a0:b5:91:e0:6c:02:11:5b:a5:f7:03:43:cb:a2:23:d4:f6:a5:
a7:2c:81:19:91:b7:20:66:cf:df:c6:b9:50:1c:c1:9d:c9:50:
a9:ea:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:55 2026 by rpki-client