
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier: wTBjczx+sJuubqCh8uC9j8+QcMSK0Lrc5QvR76SzIo8=
Subject key identifier: C1:EB:80:13:5D:14:87:57:8A:F1:E5:80:25:CA:B8:52:4D:31:62:ED
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number: 017D
Signing time: Thu 19 Feb 2026 03:23:07 +0000
Manifest this update: Thu 19 Feb 2026 03:23:06 +0000
Manifest next update: Thu 26 Feb 2026 03:23:06 +0000
Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: uEXX5LCxnlljcUo+AtNp61jyj5sZaQVek03f6qeNrSU=)
2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: CQr2hobxwoFHY9a4Ev/A2yb3z142YhpnnpTJ8f2F528=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Validity
Not Before: Feb 19 03:23:06 2026 GMT
Not After : Feb 26 03:23:06 2026 GMT
Subject: CN=6996821a-b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:77:59:2e:41:d3:be:92:11:40:88:10:83:
48:4f:b0:bb:25:36:bc:37:35:18:8d:25:f8:40:b2:
ad:41:41:92:b5:e9:5c:29:5a:91:0f:57:4a:f3:32:
fa:65:93:8a:61:c3:0b:cd:64:17:34:06:70:d1:3a:
fa:b8:4f:fb:70:a0:21:7b:82:d4:2c:7a:ce:70:cb:
26:ea:74:e2:09:ae:c0:d7:91:08:ab:ba:07:78:99:
0d:ad:22:da:ef:c5:24:f1:02:de:e5:31:c9:eb:f7:
a4:6d:b2:8f:15:94:6f:e6:46:54:e9:09:33:11:b4:
7e:a8:79:33:73:e9:d6:9e:72:53:1b:55:05:a8:c7:
a1:29:41:ab:55:ae:3d:48:54:af:c6:98:6f:45:38:
06:6b:9a:da:9e:0e:3a:e6:80:2c:b6:97:e7:b9:97:
e2:db:ba:50:ba:11:d9:a7:e6:48:40:d0:ff:41:e1:
f7:f7:3a:4a:8f:0e:e1:ac:99:80:d1:b6:21:a2:64:
05:4d:0e:af:7a:e6:97:27:7b:81:35:36:5b:a3:8a:
5a:d0:ba:2b:37:e6:ba:1f:e2:02:a0:fc:3e:7b:af:
ae:f0:2e:f3:ac:ee:36:28:f8:f0:13:9f:6b:35:8e:
82:14:e8:ac:1b:17:6f:47:b8:e9:34:36:6a:3e:93:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:80:13:5D:14:87:57:8A:F1:E5:80:25:CA:B8:52:4D:31:62:ED
X509v3 Authority Key Identifier:
keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0a:31:e4:37:60:4f:fe:29:b5:38:eb:a0:ec:54:03:a1:4d:
c4:1f:47:8a:e4:46:03:58:01:4a:f8:aa:27:fc:71:28:7e:3f:
e3:c1:95:4e:9b:3c:69:2f:ee:36:fa:46:f5:0c:d2:6b:5b:0c:
c7:03:16:d2:26:4e:45:41:b0:cc:f8:ce:c2:bf:1f:bd:aa:b7:
be:a2:17:63:53:3f:c1:2f:a8:8e:78:fb:f3:b2:82:d4:d7:5a:
6b:5c:88:de:8a:15:a2:4c:d3:1d:72:01:c3:db:59:69:f7:8b:
f4:e7:80:ce:5f:2e:5e:f4:4b:77:c4:15:99:e4:1c:3c:54:0b:
d7:24:85:aa:77:69:3b:f1:4b:ee:35:6a:f5:94:2f:75:79:b9:
00:ef:85:9e:de:27:b0:d5:f0:7f:78:89:6b:de:97:55:88:52:
b3:95:7e:1f:b1:9a:72:44:8f:75:68:eb:92:cc:4c:de:d0:f0:
70:2b:ee:12:94:5c:17:5c:ea:e9:69:90:87:cd:4e:4d:a4:83:
64:a5:39:bc:0a:39:b7:aa:80:e0:7e:d5:8f:a6:58:d5:70:82:
1a:5a:8c:ae:18:25:77:69:84:a9:1d:ee:f4:03:3f:76:01:95:
9a:aa:2d:6a:17:ba:71:6c:03:ba:b2:a5:07:9c:a7:b8:f9:9a:
15:75:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:58:58 2026 by rpki-client