
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier: IWPn1kuPH7PwD4lZI21LZ/Ww2kk1MgvnDaKnNyn08CE=
Subject key identifier: 1C:C8:93:9C:FC:EC:66:E5:25:6E:12:ED:AF:6B:1A:26:22:A2:75:DF
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial: 0B47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number: 0B40
Signing time: Wed 18 Feb 2026 18:51:18 +0000
Manifest this update: Wed 18 Feb 2026 18:51:18 +0000
Manifest next update: Wed 25 Feb 2026 18:51:18 +0000
Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: 5l3CRUciRhjKA49h+OWx622p6QC+hnFKJ4Q+dVBzfR4=)
2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: 20mwh4S1N9cV75zDwMEBAcXWu2kbD0NO7KHg8fUiIBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2887 (0xb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Validity
Not Before: Feb 18 18:51:18 2026 GMT
Not After : Feb 25 18:51:18 2026 GMT
Subject: CN=69960a26-ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:a0:76:8d:f9:21:01:ca:40:74:f4:44:df:
d1:d0:4f:be:40:45:c6:4f:4f:48:99:00:0f:72:13:
f1:0d:c7:7d:f2:6d:e9:ed:13:8d:ba:8d:19:78:3f:
bc:9c:29:f9:ad:e1:94:e4:82:03:1c:d4:61:8e:51:
4a:88:14:c8:24:b2:ed:ce:b9:64:2b:ae:f6:4b:a7:
e6:28:1a:de:9b:fc:f5:3f:d8:8c:96:c4:1d:2d:10:
67:90:c4:96:8a:47:5c:44:89:55:0f:05:5c:b7:30:
da:61:34:ef:6b:5e:0d:35:fd:b0:f8:9b:24:ec:99:
92:4f:7d:75:a8:da:89:3b:6b:22:5e:1b:31:35:fb:
bf:bd:df:61:e0:ac:15:ae:b2:ec:c3:62:ca:2a:6d:
20:d9:3e:ef:4f:29:37:0a:ea:3f:aa:eb:25:e3:9b:
4e:dd:c1:69:aa:8b:9a:9e:f6:d4:90:73:b6:78:77:
30:b3:de:9c:bc:0a:b5:82:2b:10:e0:7c:39:28:1b:
cf:d9:cd:df:75:0c:75:63:73:cb:b0:a7:8c:3e:df:
6a:c5:05:d2:05:b9:db:a4:9d:06:b6:0a:3e:5a:74:
ad:ab:7a:7d:f7:f9:21:b6:5b:f6:5f:ff:4b:33:3f:
2b:b1:27:89:4b:23:98:10:86:6e:2c:2d:c9:7c:03:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:93:9C:FC:EC:66:E5:25:6E:12:ED:AF:6B:1A:26:22:A2:75:DF
X509v3 Authority Key Identifier:
keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:fa:89:2a:ff:08:dc:57:b3:62:1a:49:6f:d2:c9:71:32:97:
8b:64:44:a5:b6:f3:b6:8d:d7:b8:c4:93:d0:93:95:9f:84:ba:
ff:44:3c:45:47:f3:2d:f1:8f:b5:c6:13:73:3f:8a:85:cc:0a:
9b:3b:b2:3a:10:4a:99:e2:01:a3:fd:c9:8a:89:50:bd:88:01:
19:00:a6:53:22:f2:eb:1f:1b:72:4b:86:38:38:14:4b:5f:31:
c8:90:9a:f5:e6:f6:3b:bb:a1:a4:4c:8c:82:ca:d8:58:c8:7f:
75:0a:de:10:f0:0f:ca:71:89:36:5e:54:cf:0d:9b:4e:d7:45:
fa:3b:bf:cb:ce:eb:ea:89:0b:ec:30:e8:25:d2:1a:05:06:67:
18:54:e6:2e:5e:8d:31:6d:66:ff:0a:65:6a:16:bf:d9:16:de:
8a:70:ab:f0:5f:ce:0d:a9:3c:11:08:55:a9:33:d8:66:ac:9b:
1c:4c:f8:3f:29:c1:d1:7c:63:eb:d7:65:3b:43:c3:e7:2b:9b:
89:fb:21:66:e4:0e:99:56:de:1b:cb:d7:02:62:99:96:bd:49:
f7:dc:25:d9:92:6d:47:fe:2b:66:8e:69:78:8e:61:f0:34:db:
9a:a7:e0:96:25:42:3c:45:1f:30:e5:5a:35:ba:f2:5c:d5:5a:
a5:b7:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:43:18 2026 by rpki-client