
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json)
Hash identifier: vR/tlq80zGE6kWBqkC9DPFIc9WXCrCrdrxlH9xjVrDA=
Subject key identifier: 0C:AA:80:A6:0E:8E:41:97:31:3A:18:AC:DB:1C:6C:60:FF:63:A2:34
Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Certificate serial: 063E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
Manifest number: 0638
Signing time: Wed 18 Feb 2026 22:05:41 +0000
Manifest this update: Wed 18 Feb 2026 22:05:41 +0000
Manifest next update: Wed 25 Feb 2026 22:05:41 +0000
Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: Vq0jr98QuT6o4ApdrNIWETH8dt9xAVhPjieliD26LLk=)
2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: mwVl4hNEaIqbBNWJudlbCJK/THwSQhv97GiC3rtYAeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl
rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Validity
Not Before: Feb 18 22:05:41 2026 GMT
Not After : Feb 25 22:05:41 2026 GMT
Subject: CN=699637b5-6c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:92:6f:a7:f9:01:08:fa:98:80:db:10:39:
02:e3:00:b4:c7:a1:44:3c:23:28:a2:72:f5:34:4c:
ba:ce:60:d4:f0:9e:b9:18:ec:f6:3f:6e:51:17:13:
58:39:f3:23:b3:5f:d2:67:0b:b5:6c:55:7f:d5:84:
aa:33:45:32:e3:d0:ae:61:3c:71:45:1b:1e:f5:e1:
c2:8c:5e:65:3f:8f:2e:c2:ea:8b:dc:d3:eb:c0:0d:
75:67:59:15:8b:f8:0d:31:c4:ea:5f:49:47:49:79:
ad:06:1e:a3:88:d3:16:bd:f2:37:e8:ff:de:b6:38:
99:86:71:16:a9:95:1d:48:ec:cc:a3:78:2c:55:61:
d7:ad:76:76:58:13:0a:96:1e:7e:1f:c9:d1:7d:ec:
a0:41:1e:dc:34:e3:ba:19:d2:31:01:e4:ac:4a:49:
8e:62:90:83:cd:af:da:cd:43:8a:4e:13:02:97:45:
e9:15:cf:0f:fc:c3:bc:8d:3b:37:5f:45:30:3a:59:
e1:b6:8e:1d:0d:44:eb:b3:0c:06:da:9e:f6:27:67:
95:cf:a7:f3:88:0b:51:0b:be:80:e0:03:73:86:63:
9c:4d:59:8d:46:3c:90:b3:cc:b2:47:8b:7c:03:02:
63:33:8b:b1:0b:d0:3b:ba:00:51:61:65:64:fd:e3:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:80:A6:0E:8E:41:97:31:3A:18:AC:DB:1C:6C:60:FF:63:A2:34
X509v3 Authority Key Identifier:
keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:11:7b:62:8b:06:d5:bf:14:70:e5:5f:1c:b7:d6:3c:47:
de:2f:1a:d9:85:65:d7:6c:e1:d3:b6:ee:eb:1f:78:64:44:ca:
aa:61:2a:97:59:c8:1d:67:a8:e9:b3:14:17:f1:ea:e3:3c:5a:
8e:0f:0d:fe:6a:f0:6e:83:28:c8:95:6b:be:a7:4f:bf:e4:1a:
e8:81:31:99:56:7d:36:a0:a5:a7:62:5b:90:8f:be:44:af:b2:
98:c3:97:90:97:64:1a:f6:07:05:61:60:03:8c:02:48:f1:2a:
37:61:5d:8f:8b:a5:19:72:0a:6e:a2:73:2b:13:4c:42:dc:f1:
24:24:dd:80:d5:91:d8:1b:60:5e:94:be:84:f9:5a:7b:7e:97:
97:d4:92:92:30:50:0a:0e:65:a2:27:38:b3:fa:90:c4:77:c7:
c2:d9:10:cb:5a:f0:60:82:be:8a:ec:6f:7d:ef:aa:83:17:5d:
63:57:a9:2b:09:74:a1:03:1b:cc:b9:37:d8:6a:14:38:63:e8:
da:78:0f:65:ab:9a:3c:bc:0f:05:6f:d3:1d:a9:5b:87:6f:38:
52:b8:5b:e9:ed:c7:aa:39:95:a3:51:09:f7:c2:b3:e1:b4:d1:
0c:15:c3:75:c7:08:16:b6:0b:c6:a5:d9:c2:f1:ed:5f:49:70:
f2:fc:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:24:54 2026 by rpki-client