
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: 5TcvyHILaAaKVnAydkJN9qzmlCa5T2NDHfMLAo/pRAo=
Subject key identifier: 21:E9:9F:95:E6:C2:59:9C:25:65:D7:1E:F7:B1:46:3E:C7:23:68:9F
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1835
Signing time: Wed 18 Feb 2026 16:36:54 +0000
Manifest this update: Wed 18 Feb 2026 16:36:53 +0000
Manifest next update: Wed 25 Feb 2026 16:36:53 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 55g18JKuRWxFbMgyFo3m7gQ9MGntD5PJDxqhLh49/+Y=)
2: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
3: 11E8BC20FFE611F0A90394AA756F56BC.roa (hash: vppnJfYJe6zVwO+h6lFIzWjo2MRbQB2VJ2ft+A/VSmc=)
4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
5: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
8: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6740 (0x1a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Feb 18 16:36:53 2026 GMT
Not After : Feb 25 16:36:53 2026 GMT
Subject: CN=6995eaa6-7100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:01:7d:67:a5:9a:86:df:d0:81:f0:39:5d:
21:15:68:05:01:a5:d3:2e:f4:1a:41:e9:71:f6:14:
5f:4f:98:62:87:30:3f:33:40:c4:52:78:43:99:54:
b8:22:2a:dc:6c:c6:1e:65:af:22:56:5e:72:77:25:
5e:ac:73:1a:bc:70:ee:c3:53:cf:63:49:89:e6:1a:
52:8b:19:cc:51:a5:30:49:2e:11:99:56:65:13:59:
19:88:e3:97:eb:a2:b4:99:f0:47:c7:14:5d:cf:ff:
b0:28:90:47:5f:8f:72:91:45:91:79:02:98:51:90:
90:4e:67:34:9c:94:6c:4e:5a:73:7c:07:49:77:d2:
f1:31:dc:65:54:cc:1d:7a:91:f9:51:af:95:bb:a8:
fb:56:91:bb:73:42:b7:de:23:9e:c1:2c:58:67:f5:
7d:f6:79:78:e9:08:7d:a6:9b:63:6e:61:85:ff:d2:
57:93:3e:5a:d1:5e:ce:b4:92:7f:ce:cd:8c:4b:f5:
65:45:98:54:3d:2c:74:d2:db:e2:8c:ca:c2:3e:a8:
c4:af:d8:9f:4f:5f:c6:ed:5f:92:47:09:31:8b:9c:
df:d5:63:3b:79:ad:c7:ab:fd:bf:f4:9d:0e:c4:b5:
40:b7:03:69:7d:46:20:31:1b:b5:1a:a1:e1:99:b0:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:9F:95:E6:C2:59:9C:25:65:D7:1E:F7:B1:46:3E:C7:23:68:9F
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:26:bb:fe:6b:d9:7e:3b:3a:6c:e9:a3:ac:1c:d5:8d:2d:b5:
f6:42:b9:34:ed:83:57:e6:f7:7f:48:58:3c:fa:d1:e8:dc:fa:
69:9a:c5:65:31:c8:8d:e4:b3:77:3c:d9:07:f6:e8:f2:e0:b9:
c2:d8:19:93:66:93:06:00:e7:c7:9b:5a:21:97:65:27:64:4e:
2e:08:d9:dd:0b:2f:6a:4e:2f:14:12:8c:5d:b6:16:ae:e0:82:
30:a1:ef:83:7d:95:fd:fb:b1:9a:41:c0:c6:e2:e8:3a:f6:0f:
97:7b:ac:0c:03:87:9e:1b:88:b0:40:99:88:8b:fd:8a:6e:48:
31:f1:36:8b:50:c3:e6:57:9c:99:a5:a0:60:7f:c3:1e:7a:b5:
4a:6e:a0:36:8a:e6:07:27:8e:cf:06:b5:de:92:d1:6b:4e:30:
84:a0:8a:42:9d:53:15:a9:64:5b:77:85:dd:0b:c9:34:e0:90:
95:2c:3f:10:3b:bb:61:ba:cf:25:57:cf:f6:10:c8:38:02:4b:
58:32:02:3e:7a:02:7d:af:14:48:40:3b:97:8c:d0:74:3c:fe:
4f:74:da:4a:a9:a3:b1:54:a6:47:3b:a7:ad:5f:62:bd:1d:5f:
9e:7b:15:bc:69:27:ec:67:69:18:02:33:48:3d:fb:f0:92:84:
9b:d1:c7:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2
NDI5RDg4QjgwHhcNMjYwMjE4MTYzNjUzWhcNMjYwMjI1MTYzNjUzWjAYMRYwFAYD
VQQDDA02OTk1ZWFhNi03MTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnbgBfWelmobf0IHwOV0hFWgFAaXTLvQaQelx9hRfT5hihzA/M0DEUnhDmVS4
IircbMYeZa8iVl5ydyVerHMavHDuw1PPY0mJ5hpSixnMUaUwSS4RmVZlE1kZiOOX
66K0mfBHxxRdz/+wKJBHX49ykUWReQKYUZCQTmc0nJRsTlpzfAdJd9LxMdxlVMwd
epH5Ua+Vu6j7VpG7c0K33iOewSxYZ/V99nl46Qh9pptjbmGF/9JXkz5a0V7OtJJ/
zs2MS/VlRZhUPSx00tvijMrCPqjEr9ifT1/G7V+SRwkxi5zf1WM7ea3Hq/2/9J0O
xLVAtwNpfUYgMRu1GqHhmbD/pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHpn5Xm
wlmcJWXXHvexRj7HI2ifMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT
em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFJrv+a9l+Ozps6aOsHNWNLbX2Qrk07YNX5vd/SFg8+tHo3PppmsVl
MciN5LN3PNkH9ujy4LnC2BmTZpMGAOfHm1ohl2UnZE4uCNndCy9qTi8UEoxdthau
4IIwoe+DfZX9+7GaQcDG4ug69g+Xe6wMA4eeG4iwQJmIi/2Kbkgx8TaLUMPmV5yZ
paBgf8MeerVKbqA2iuYHJ47PBrXektFrTjCEoIpCnVMVqWRbd4XdC8k04JCVLD8Q
O7thus8lV8/2EMg4AktYMgI+egJ9rxRIQDuXjNB0PP5PdNpKqaOxVKZHO6etX2K9
HV+eexW8aSfsZ2kYAjNIPfvwkoSb0cfN
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:03:48 2026 by rpki-client