
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json)
Hash identifier: MYC2f1ykvPg9I6qxVEh7rdD1x2OBf0COiJs3GBToXTQ=
Subject key identifier: 37:27:36:63:8B:EA:BA:1B:FD:9A:2A:D3:34:59:6F:D5:E5:58:E1:9F
Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
Certificate issuer: /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
Manifest number: 19
Signing time: Thu 19 Feb 2026 07:09:32 +0000
Manifest this update: Thu 19 Feb 2026 07:09:31 +0000
Manifest next update: Thu 26 Feb 2026 07:09:31 +0000
Files and hashes: 1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: 39tyfHXLdWylm6H0aCIk6cSyOlsk4SXr2c0v+quYzUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl
rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
Validity
Not Before: Feb 19 07:09:31 2026 GMT
Not After : Feb 26 07:09:31 2026 GMT
Subject: CN=6996b72c-a43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:c2:bc:02:c5:8f:06:c7:e6:d0:3f:2a:5d:
83:e0:f2:0d:57:f3:83:c1:22:c4:d3:b2:e9:07:08:
39:dd:63:5b:0f:e5:b1:a6:23:ac:63:fc:30:6e:3b:
53:08:25:9f:25:83:a0:ff:8c:4c:cf:8a:56:79:8d:
66:b1:c6:ff:4e:bf:26:df:07:67:4f:58:bc:39:2f:
13:98:98:6e:9e:5c:22:86:57:1d:71:ad:57:ee:f3:
73:d9:20:35:33:e6:91:d5:b9:25:1f:3b:80:19:07:
c4:ee:6a:1d:36:36:d0:8a:26:d8:c2:42:0e:c8:6a:
b0:fd:94:c7:77:0b:b3:82:e0:81:68:6f:01:ec:d8:
37:b9:3a:2d:43:b3:6c:26:b7:dd:a7:85:23:7f:04:
a2:04:b0:7a:74:28:67:3c:84:14:4a:8b:06:8e:98:
7c:bd:df:ee:74:27:e3:33:51:f2:64:69:0b:b7:33:
fc:97:fd:c8:ac:b7:fd:81:dd:aa:1a:c2:41:44:76:
0f:14:d5:21:65:1a:05:57:d0:f6:a6:5b:1b:78:2a:
ca:78:04:0b:7f:7e:1c:6b:59:a2:8f:cf:26:9e:e9:
a7:fe:5e:ac:68:80:af:2c:d6:bb:d1:14:2c:46:4d:
fe:d5:74:52:94:08:ca:0b:3f:ae:7c:64:be:12:5b:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:27:36:63:8B:EA:BA:1B:FD:9A:2A:D3:34:59:6F:D5:E5:58:E1:9F
X509v3 Authority Key Identifier:
keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:f8:3b:ae:d0:b6:01:1c:62:d7:20:39:2f:e8:0d:75:ed:93:
94:d4:ea:0c:61:e1:65:c3:b9:f5:c6:71:2c:e3:7d:a8:a1:8f:
8b:7b:23:de:91:94:bc:b3:46:55:2f:48:ec:09:08:13:cf:fa:
c8:1e:4c:a7:3d:fb:ec:71:1f:e2:b0:29:79:7b:02:eb:70:88:
f5:e9:c1:69:ab:0a:96:58:e2:61:f2:43:dd:c2:37:c0:11:a9:
76:da:64:08:76:aa:c5:82:e1:1d:d3:86:53:3d:6e:b0:49:c5:
86:0c:d4:de:f0:62:1d:e5:aa:97:4f:cf:73:49:d8:80:09:84:
a1:eb:5c:9d:b0:88:a5:e6:d6:84:88:d4:61:32:cb:23:5d:6e:
ea:99:df:51:52:b5:7c:93:3e:b5:dd:1b:d8:c4:0c:ef:40:05:
85:bd:fe:a7:5f:69:fb:ed:16:0f:33:65:e1:ef:52:2c:df:73:
1f:c0:db:c7:42:49:f4:a8:1a:cc:06:fe:9a:24:76:87:cd:2f:
6d:9e:39:bd:27:2f:fc:4f:4f:19:b9:46:a3:ed:b1:6e:6f:8f:
9d:ad:4c:81:88:93:76:81:48:d6:0a:a6:1d:a8:74:77:34:41:
49:57:73:33:96:cc:7a:12:d3:ca:76:88:29:78:f4:76:4b:e0:
0b:0d:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:08 2026 by rpki-client