
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: ylFDfDyrWq5VXknDI3T/8YaWKNrsIWRqCT62hYwn6XA=
Subject key identifier: 6D:9A:02:B3:E5:9F:12:1F:9C:F0:AC:65:F6:4D:2B:42:2F:4C:5D:2C
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1834
Signing time: Mon 16 Feb 2026 16:37:42 +0000
Manifest this update: Mon 16 Feb 2026 16:37:42 +0000
Manifest next update: Mon 23 Feb 2026 16:37:42 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: Tq5+9ausEQlO2gQwkHyYiEvVwk47UbwQPoo/JblEkiw=)
2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
3: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
5: 11E8BC20FFE611F0A90394AA756F56BC.roa (hash: vppnJfYJe6zVwO+h6lFIzWjo2MRbQB2VJ2ft+A/VSmc=)
6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
8: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 16:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6739 (0x1a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Feb 16 16:37:42 2026 GMT
Not After : Feb 23 16:37:42 2026 GMT
Subject: CN=699347d6-aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:a9:4a:5d:86:3d:35:28:b3:37:13:53:77:
7c:81:b9:61:0a:de:dc:a0:3e:9a:a6:c2:f4:bb:59:
22:5b:99:a4:c4:76:24:1e:fc:b8:ea:fa:0a:de:7b:
70:3a:cd:51:55:f4:87:9e:43:a6:5b:d7:70:0d:99:
f5:7d:3c:33:38:64:91:70:d3:15:7e:83:91:6a:f8:
29:e4:bf:8b:3b:3d:d5:ec:31:87:e8:8b:d9:f7:3a:
f3:ce:ac:60:e9:ca:06:0d:32:3c:02:cc:19:9c:18:
46:cb:9b:cc:99:64:ba:2b:2a:56:99:aa:c4:06:6a:
7a:b8:6e:78:fa:58:93:5f:37:a1:e2:66:d6:79:a1:
23:fc:40:e6:44:80:82:95:4a:22:f0:1c:6b:8c:c9:
6a:f3:e3:7f:52:00:2d:8b:e5:30:34:15:b6:a0:de:
ea:4e:f9:3b:63:a3:9a:6f:4b:0a:34:d7:99:a5:91:
4e:ba:d7:c9:de:d8:57:7f:ef:21:48:a1:2b:94:9b:
e8:10:12:de:bd:e3:56:99:a4:23:80:72:bb:ad:c7:
e7:bb:10:69:6e:c4:49:e8:0b:47:7d:ed:10:ee:13:
9e:e3:a3:ca:a8:a7:98:c7:fa:eb:25:df:01:74:69:
22:dc:6c:c3:11:fb:c5:4b:cc:27:6c:98:93:ba:b7:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:02:B3:E5:9F:12:1F:9C:F0:AC:65:F6:4D:2B:42:2F:4C:5D:2C
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:36:2a:29:c2:f3:bc:ed:19:f6:75:5b:de:c0:5c:91:f9:
1e:b3:bc:fe:0e:f5:c3:a3:ec:d9:a6:1b:f1:26:9c:7f:88:d2:
69:13:2f:50:06:cb:92:f2:32:01:ac:1e:08:67:87:fb:3a:36:
f8:d3:b0:e2:9d:97:de:6b:47:62:4a:f8:ca:f0:f3:da:10:63:
9d:22:2b:aa:8f:93:f5:6e:dc:2a:0b:36:27:94:12:1d:2f:21:
b5:53:97:ee:6e:0f:18:0e:9c:4e:f1:e0:7f:50:86:1e:c9:42:
f3:61:a5:a3:49:19:c4:27:a6:72:e6:bc:eb:2a:9d:3a:84:49:
9c:c8:e2:70:42:86:b0:61:f6:93:6b:65:83:4f:20:2b:3c:28:
7d:67:97:f6:88:3c:99:ff:3b:43:cd:37:9e:c2:04:ef:ed:1b:
52:2b:a3:13:91:ab:3f:8a:f9:24:9f:0d:c8:c5:da:c2:92:1d:
a7:14:e9:f6:9b:a3:26:06:86:ab:98:54:66:87:71:52:54:de:
94:d7:f7:7c:64:92:ec:e2:88:ba:a7:34:af:58:e1:53:1c:8a:
b7:75:3e:e6:60:bf:e7:b9:07:0b:b9:ce:66:30:f8:21:13:0c:
bc:27:43:00:5c:39:f0:4b:6b:bf:4b:9c:68:c2:68:7d:38:2e:
e1:10:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 21:02:33 2026 by rpki-client