
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier: AkN4V83xKte9vf/Sn2gp4EzR6laaI663EkpT/FMQSu8=
Subject key identifier: 57:64:E8:51:B6:D2:11:B0:7C:EA:53:37:34:C6:E5:C6:1E:7C:03:A4
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number: 0159
Signing time: Thu 19 Feb 2026 01:40:44 +0000
Manifest this update: Thu 19 Feb 2026 01:40:44 +0000
Manifest next update: Thu 26 Feb 2026 01:40:44 +0000
Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: f/lC+dYKC6+ywXI7oKPCqRKemYrMmuo1GK1DoELuXrQ=)
2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: nFQQw/dyghkb1sXKy9uupZRqxzdAPtcnxFOFgRiXGi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Validity
Not Before: Feb 19 01:40:44 2026 GMT
Not After : Feb 26 01:40:44 2026 GMT
Subject: CN=69966a1c-fe39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:9d:d4:d1:31:66:89:13:be:2a:df:b1:ca:
51:ed:47:55:ba:a7:0f:15:6c:f0:ca:57:f6:68:ac:
84:8a:2c:9e:0f:ba:94:5c:c8:8f:60:f4:57:08:94:
eb:87:48:fd:1e:e0:95:0e:3b:dd:32:e5:de:23:b1:
f2:5d:4d:2d:62:f4:c1:1a:ac:9e:05:d3:37:07:9f:
8e:b9:ba:e4:66:69:54:45:36:32:03:12:f0:a9:b2:
59:de:b5:19:e4:d8:f6:32:0a:ea:b2:65:9b:57:ff:
5b:18:0c:c3:39:c8:b8:33:bf:7e:42:9f:5d:50:07:
d0:77:8e:bc:f8:ef:96:30:7e:2b:fe:b0:92:62:1b:
d3:b3:23:f6:5c:62:96:df:09:35:14:6e:07:3e:25:
77:d0:0c:4e:69:69:50:32:0e:10:84:17:3b:50:35:
6d:ee:10:da:f5:5d:39:70:68:e1:fd:c1:05:fa:f1:
67:fb:9e:0e:27:bc:53:3e:ee:92:4a:70:fb:e5:60:
90:df:3f:eb:22:aa:c9:e4:04:7f:f2:53:43:85:a6:
e5:8f:f9:9a:5d:f5:30:dc:40:6f:a3:2c:09:0c:be:
b2:18:54:da:87:96:e0:c9:cb:bf:7d:30:45:dd:7c:
b6:59:84:6d:c8:3d:10:f1:62:34:b3:89:d2:a8:cf:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:E8:51:B6:D2:11:B0:7C:EA:53:37:34:C6:E5:C6:1E:7C:03:A4
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0f:34:77:1a:b3:51:98:97:2f:ee:e2:3d:d3:30:7f:40:8f:
69:77:02:03:08:70:67:87:90:f7:c6:48:dc:62:b7:6a:4e:9c:
38:ee:f8:6d:0c:98:8d:15:50:97:4e:6b:0b:1e:75:90:6d:c4:
66:21:dd:d5:5c:04:19:27:ab:ca:64:1a:ee:d7:8b:e2:b1:57:
75:f7:ff:72:51:6c:30:23:f8:43:98:b5:a9:7b:a9:6b:4b:53:
5d:a4:b3:5e:cc:be:d7:54:c7:a7:6a:cf:da:67:ae:db:e0:f8:
9a:38:97:a9:7c:8e:38:09:0c:23:26:07:52:f8:7f:4f:5d:ee:
19:31:9c:f5:0f:6a:ae:6f:41:78:42:5a:b0:ea:0a:8d:3c:f2:
ae:18:67:77:f4:59:a9:c7:84:50:26:49:c8:8e:3b:bb:03:c4:
76:40:39:dc:3d:7c:3c:8f:47:3a:af:59:bc:0a:04:75:28:1f:
e1:18:03:9f:4d:d8:67:ab:6e:a9:b2:99:36:e0:05:77:4b:bf:
02:16:69:e7:cf:6b:a4:c7:e4:8b:89:cb:b7:17:3f:bd:15:c8:
55:d0:2d:23:64:1d:86:d4:1e:ce:09:1f:c4:e8:c4:04:97:24:
2b:84:d0:db:4c:0f:d7:e3:ce:4f:a0:95:25:de:b4:92:32:de:
d5:8f:86:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE
QURCNTIxMkEwHhcNMjYwMjE5MDE0MDQ0WhcNMjYwMjI2MDE0MDQ0WjAYMRYwFAYD
VQQDDA02OTk2NmExYy1mZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4ad1NExZokTvirfscpR7UdVuqcPFWzwylf2aKyEiiyeD7qUXMiPYPRXCJTr
h0j9HuCVDjvdMuXeI7HyXU0tYvTBGqyeBdM3B5+OubrkZmlURTYyAxLwqbJZ3rUZ
5Nj2MgrqsmWbV/9bGAzDOci4M79+Qp9dUAfQd468+O+WMH4r/rCSYhvTsyP2XGKW
3wk1FG4HPiV30AxOaWlQMg4QhBc7UDVt7hDa9V05cGjh/cEF+vFn+54OJ7xTPu6S
SnD75WCQ3z/rIqrJ5AR/8lNDhablj/maXfUw3EBvoywJDL6yGFTah5bgycu/fTBF
3Xy2WYRtyD0Q8WI0s4nSqM8pOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdk6FG2
0hGwfOpTNzTG5cYefAOkMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy
QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS
X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8DzR3GrNRmJcv7uI90zB/QI9pdwIDCHBnh5D3xkjcYrdqTpw47vht
DJiNFVCXTmsLHnWQbcRmId3VXAQZJ6vKZBru14visVd19/9yUWwwI/hDmLWpe6lr
S1NdpLNezL7XVMenas/aZ67b4PiaOJepfI44CQwjJgdS+H9PXe4ZMZz1D2qub0F4
Qlqw6gqNPPKuGGd39Fmpx4RQJknIjju7A8R2QDncPXw8j0c6r1m8CgR1KB/hGAOf
Tdhnq26pspk24AV3S78CFmnnz2ukx+SLicu3Fz+9FchV0C0jZB2G1B7OCR/E6MQE
lyQrhNDbTA/X485PoJUl3rSSMt7Vj4Z1
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:49 2026 by rpki-client