
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier: KXk77r2oucqZb6FrSKVUDQTZtGOIdUqZoYBmkNWmQlw=
Subject key identifier: 31:26:27:D9:3A:34:3A:19:8F:0B:FA:7E:BF:2C:97:20:E8:CB:0B:56
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number: 0229
Signing time: Thu 19 Feb 2026 01:30:41 +0000
Manifest this update: Thu 19 Feb 2026 01:30:41 +0000
Manifest next update: Thu 26 Feb 2026 01:30:41 +0000
Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: avEX6oBGDqQ1chOpxOdxBCjvv+BP1y/76x11HsbRCOs=)
2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: vTjIWL+7U0681ZWCBVmHMtqcTBbPy9kNb1m5t3OENUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Feb 19 01:30:41 2026 GMT
Not After : Feb 26 01:30:41 2026 GMT
Subject: CN=699667c1-29ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:48:96:d8:eb:62:65:cb:73:4e:36:8d:bb:
de:b7:c5:4d:a9:ab:a2:e2:ad:4f:d0:b2:80:0c:ec:
34:b9:6c:30:de:3d:ee:f8:ac:e0:cc:97:0e:af:2c:
81:06:d2:a0:05:96:ee:16:01:04:b3:02:ff:f3:61:
ca:c2:44:c1:93:7e:76:cd:4e:53:d0:4b:c2:b0:47:
2f:4c:01:43:f6:05:89:95:a5:d4:5b:bd:c5:1e:3e:
36:4f:05:05:ff:bf:8a:5c:da:e5:a3:11:c1:b5:ca:
80:8b:d3:00:1b:be:ad:03:de:b8:a2:1a:4f:fa:01:
37:66:fc:e3:5a:b3:7f:34:ca:fc:ab:61:12:54:ac:
f5:48:c1:b1:1b:d9:b2:c8:cf:96:d0:4c:47:33:ee:
ad:8d:98:53:64:e8:59:bf:10:68:3a:c8:6d:49:25:
f6:39:0f:72:75:3d:ff:89:ea:dd:26:94:22:85:86:
02:da:e6:7d:2b:66:5d:24:19:95:93:04:c2:d5:60:
57:09:0e:ad:40:93:70:89:bb:a5:a6:4c:b2:95:48:
3d:12:2e:0a:00:9e:b4:fe:76:97:2d:58:b3:9c:5d:
50:b5:52:fe:67:c2:d9:33:1f:b1:ba:41:eb:e4:c6:
06:c8:dc:a4:b5:02:a7:61:f0:e7:82:4e:bd:ba:b6:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:27:D9:3A:34:3A:19:8F:0B:FA:7E:BF:2C:97:20:E8:CB:0B:56
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:20:4a:9e:00:44:18:a2:40:51:a6:fc:6c:5f:19:5a:1d:
ff:3a:40:fe:ec:3f:86:a4:34:88:bc:7e:8c:ea:a6:6a:f4:df:
db:3e:21:41:00:96:0a:e8:85:17:4c:a0:af:c6:4b:f9:13:9e:
57:0a:0a:89:84:52:63:65:fa:9b:b1:d0:22:03:17:f4:42:48:
e4:16:f9:a6:2a:91:3e:73:7e:a1:e7:f7:82:16:93:40:50:17:
91:ba:b4:2e:73:f3:e1:09:98:da:f1:79:48:4d:e3:84:f4:e7:
44:88:9c:53:ba:52:cd:39:20:7a:7c:01:22:bd:96:b8:b7:9d:
2a:e6:33:e3:39:d1:f2:37:ea:80:90:6d:e8:af:78:87:17:03:
25:85:be:f9:db:c2:72:f6:75:fd:11:56:66:48:89:cf:c7:df:
6a:f6:1d:96:8c:ff:df:a3:a9:cf:fc:7c:59:f1:d9:66:17:cf:
d6:7f:83:be:fc:a0:5e:18:5b:f0:37:6e:7e:83:c2:05:85:c2:
ee:76:1e:2f:1a:cb:e3:d4:fc:af:5d:b5:05:8d:6a:e8:c1:b6:
dd:99:f0:ed:25:14:ef:c1:57:fa:ee:0e:43:8a:9d:35:42:d3:
f4:ca:29:c9:85:02:0b:20:ad:59:b1:86:3f:77:e5:74:8c:44:
67:16:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:30:43 2026 by rpki-client