
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json)
Hash identifier: WAE376Vt9JBgM7jV//IhJxRWlqXh/R5oKFU8uW9jRCI=
Subject key identifier: C2:1B:08:60:91:A0:E6:62:9D:4A:B9:42:09:9F:23:FA:C8:C4:78:91
Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
Manifest number: 0813
Signing time: Wed 18 Feb 2026 20:29:54 +0000
Manifest this update: Wed 18 Feb 2026 20:29:54 +0000
Manifest next update: Wed 25 Feb 2026 20:29:54 +0000
Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: CMTrtBmBWlmKPVtt65jPLgByhHZNsTOIwUx5+MbZCho=)
2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: x1swDqDbdRpW1YcvJW4XZPVqkw29NgcBcxcpOtDQ400=)
3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: faGNUns0UIB/6rsiDFhIe2V0V3MDd2DqirXM6CF0Z8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl
rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Validity
Not Before: Feb 18 20:29:54 2026 GMT
Not After : Feb 25 20:29:54 2026 GMT
Subject: CN=69962142-54d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:4d:39:b0:c7:d6:62:85:80:20:de:d6:50:
09:91:6a:e9:63:33:4c:7d:88:6d:fe:8a:89:c1:52:
dd:23:73:0b:02:19:db:d2:93:85:d3:14:31:a4:9c:
c2:b8:cb:9e:ec:8f:71:60:77:c8:13:bf:ad:05:0f:
ba:66:10:e4:ca:b3:d1:af:83:4d:2f:17:af:d5:13:
27:6b:07:b4:59:eb:88:18:3f:79:e2:1f:61:a3:24:
af:a4:94:59:98:78:af:d4:13:95:21:e8:df:49:23:
3c:be:c8:ed:63:f5:14:bb:47:18:cf:f6:06:f3:cf:
2a:aa:6d:db:ee:8f:bc:7d:a0:11:87:fa:42:fd:18:
27:f4:b9:96:2d:4e:e0:1e:09:28:21:51:6d:bc:39:
76:d7:46:83:0b:26:58:27:27:19:b3:46:55:23:5a:
42:a6:4b:51:98:42:0f:a1:05:15:08:c9:02:18:c6:
b1:43:cf:01:13:67:c6:03:e2:6d:2d:e0:78:24:ca:
1d:2a:7a:b9:04:93:43:c3:43:4c:d8:6c:6e:8b:ea:
58:0e:9c:63:a5:97:01:f2:a9:09:68:74:76:c8:4c:
4f:4e:fe:f0:db:e5:b3:24:22:30:0a:dc:57:36:59:
35:91:16:15:68:95:27:3d:c6:01:93:84:d6:df:ee:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:08:60:91:A0:E6:62:9D:4A:B9:42:09:9F:23:FA:C8:C4:78:91
X509v3 Authority Key Identifier:
keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:37:7f:d6:47:e3:85:70:b3:45:72:0e:5c:7a:82:2c:dc:6b:
d3:07:fd:9e:18:72:6f:6d:e9:08:20:bc:0b:85:5f:5e:a7:c6:
48:60:7f:6d:5a:53:c7:ef:08:b9:b2:b6:f2:0b:89:f2:c6:ff:
f2:91:0d:be:07:dc:27:21:51:9b:3d:55:70:ac:e1:51:0e:c1:
90:59:ea:d3:b8:13:90:6f:d2:11:d1:36:5a:65:9b:2d:f2:bc:
dc:99:be:96:ff:d3:c4:a4:06:4c:10:b4:fc:bf:1d:3f:24:3a:
67:5b:57:5f:48:de:fe:35:83:3d:a6:65:5f:57:77:50:64:b8:
68:20:0f:9c:7c:e0:e0:1e:92:34:58:fa:d1:ff:d0:1d:77:73:
49:0d:4c:65:66:0f:b6:fd:36:57:00:7d:2d:c9:e5:a5:0b:22:
65:e5:c7:9e:25:4b:d1:ad:f1:8e:21:fc:73:16:c2:cb:34:b6:
e4:64:a4:d9:c9:8a:0a:09:25:c2:8e:8f:ec:62:55:c3:9e:e1:
98:fd:6e:4b:de:c6:01:39:d1:d3:1f:41:8a:ff:cf:b6:ee:ed:
98:45:17:f7:f3:97:31:b9:9f:e0:eb:23:5a:a3:70:66:b9:48:
1a:da:23:9c:69:aa:f2:c4:f2:07:3c:8e:dc:c8:c7:52:22:d5:
89:9e:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:32:24 2026 by rpki-client