
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json)
Hash identifier: jerK2vfe4wMT/IGDYnuK8S+rOA9o4uhwq2o8eVic6Y8=
Subject key identifier: C2:29:83:3D:62:E9:B2:54:54:27:1F:A0:A6:8C:2B:30:3F:D6:41:12
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
Manifest number: 04C3
Signing time: Thu 19 Feb 2026 00:28:41 +0000
Manifest this update: Thu 19 Feb 2026 00:28:41 +0000
Manifest next update: Thu 26 Feb 2026 00:28:41 +0000
Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: g1VHDTgVR6XzFPvc7aJrNF4WMW++gOYU1WwbG/Y5oFY=)
2: 9BC8AC96555C11F0AF866966C4F9AE02.roa (hash: ktBWqYwJGn+fOJr07wOaX0WHMtmcG2JSCJbdyakvZ/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Validity
Not Before: Feb 19 00:28:41 2026 GMT
Not After : Feb 26 00:28:41 2026 GMT
Subject: CN=69965939-1757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:92:e6:6d:e6:43:5b:1d:e8:18:31:6d:5d:
17:fd:40:6a:ae:d2:7e:f1:71:ed:ab:ed:55:5b:be:
ed:35:16:ac:27:d6:ac:ce:f5:2d:f4:5e:f2:60:90:
af:bb:dd:ca:36:2e:ba:13:0d:e0:d1:50:c5:50:85:
44:5a:4d:9a:7e:20:b9:cd:c6:e7:db:b3:a7:66:a1:
82:77:60:ed:2d:25:c0:f3:4f:59:40:38:73:4c:86:
80:7a:c5:04:99:bc:bf:7b:45:a0:d7:bf:58:62:41:
6c:3e:a8:c5:a5:01:d5:dc:5f:c1:7b:39:45:a1:81:
a8:c5:6f:d3:f4:f0:86:70:9f:55:fd:1d:5d:93:a8:
6b:fa:96:bf:6d:fb:d1:92:4e:77:57:8b:eb:30:ac:
49:cc:a6:60:91:d6:26:fc:73:90:5d:68:28:5b:5f:
fa:65:ac:5f:e5:ae:b9:61:a9:72:a4:1f:16:c8:34:
18:32:8b:f9:ce:a7:93:88:83:49:ee:6a:92:92:6f:
a0:43:30:a4:a6:db:61:fc:8a:a8:45:10:d8:79:22:
db:31:f7:b4:46:f3:42:aa:d8:f6:c1:13:c8:40:89:
bf:2a:f7:7f:55:34:88:a8:cb:32:c3:21:0b:76:b3:
43:5c:bc:4c:c6:ef:ab:f8:f9:e2:4d:b2:1e:e6:49:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:83:3D:62:E9:B2:54:54:27:1F:A0:A6:8C:2B:30:3F:D6:41:12
X509v3 Authority Key Identifier:
keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:12:01:f9:15:e8:da:ed:b5:3c:10:79:59:dd:e4:0c:b6:d6:
63:ab:ea:5f:88:36:e5:51:62:7d:be:d2:58:0c:19:26:67:84:
a3:6f:fe:43:c0:29:c0:5d:6a:75:23:fb:3a:89:f1:72:9a:72:
fd:cc:07:ac:1f:d0:bc:ff:2a:5b:4b:fb:b4:b4:93:c8:28:63:
56:60:1c:87:a9:6b:fb:25:c3:d4:49:ef:61:56:c8:8b:f9:c2:
59:e4:1a:77:fa:d7:97:62:a9:4c:e5:15:31:de:ef:3c:f1:4b:
20:71:48:7e:92:d9:72:84:e3:eb:af:83:14:7b:1a:00:52:c7:
39:ba:77:50:77:cc:04:f0:7a:a8:dc:63:95:ed:1b:9b:93:67:
31:d3:12:b7:a5:65:98:55:6f:f6:1f:16:82:3a:29:7b:39:f6:
f9:24:41:88:7b:78:d1:66:53:b4:32:1b:ae:66:fe:4e:a1:c8:
5a:36:7a:3e:bb:85:6b:88:05:65:79:37:5c:2a:4f:cd:c5:96:
55:a5:e8:46:98:6f:c7:4c:e5:9a:e1:72:55:bb:71:4e:9f:f6:
48:c2:32:b0:29:e8:c5:f3:2d:0f:a3:92:ca:54:a7:f0:07:df:
f7:50:0e:e1:72:b8:7d:76:3a:e6:16:7f:b3:1d:d4:1c:96:c8:
a6:72:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:56 2026 by rpki-client