
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
File: CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json)
Hash identifier: CMxOC01lElV0g06HQo8dC9hD9SHtd+XmQ/9wupL7Vto=
Subject key identifier: 23:53:7A:72:46:27:1F:83:94:1A:BB:3E:AE:E3:CF:C6:FB:FE:6C:44
Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
Certificate issuer: /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
Manifest number: 46
Signing time: Thu 19 Feb 2026 06:37:01 +0000
Manifest this update: Thu 19 Feb 2026 06:37:01 +0000
Manifest next update: Thu 26 Feb 2026 06:37:01 +0000
Files and hashes: 1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: f6TcocFwuDwLMtozTQBcHRJtjPdY7gwqZe1YegkcUgg=)
2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: Ff+TM86OU28LuAjmuMsbEF6hmH/6fMci4W3OBvaxsAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Validity
Not Before: Feb 19 06:37:01 2026 GMT
Not After : Feb 26 06:37:01 2026 GMT
Subject: CN=6996af8d-f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:32:49:9b:37:7a:80:1c:64:5a:19:f3:f0:
aa:dc:6a:b2:4d:43:e3:49:c4:85:0b:cf:5c:74:9b:
6b:bc:1d:47:09:59:d8:3f:7a:7e:a2:9e:e2:73:b1:
78:8a:a7:4e:a6:46:c3:e1:7b:ca:29:64:6b:88:85:
5a:c3:04:a7:14:e9:c2:33:93:8a:ac:4b:2e:00:66:
96:78:4d:e7:62:fb:67:e8:0f:1e:bc:db:b4:1e:64:
b5:13:bf:a4:92:23:90:8a:53:20:7d:27:46:69:ae:
37:04:e9:d8:4e:38:ba:a5:fd:6d:3d:e6:25:3d:93:
9b:5f:da:42:cc:37:9e:d3:07:58:8a:ac:7b:68:2f:
61:74:8e:08:69:75:21:41:b7:a8:d8:82:99:a7:54:
97:85:e8:5b:59:a5:1d:a7:51:d3:5b:be:b5:fb:45:
79:be:95:c0:2c:38:d0:b4:7c:bd:9b:8f:5f:9f:de:
4a:77:a6:cc:39:1a:10:7e:36:a1:a3:f9:60:dd:42:
88:c0:f0:1e:24:7f:07:6a:65:b8:a1:9f:22:92:76:
d2:0e:b6:51:15:80:27:71:c1:17:b2:47:5d:0b:d2:
d1:bd:ac:21:4b:4a:c3:c4:92:1b:1d:99:e5:dd:d7:
c6:6d:96:2e:2d:88:d4:62:6b:6d:8d:cd:f1:85:ba:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:7A:72:46:27:1F:83:94:1A:BB:3E:AE:E3:CF:C6:FB:FE:6C:44
X509v3 Authority Key Identifier:
keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:3a:d8:f9:6f:39:13:20:d1:86:34:b2:13:d6:50:f9:07:c8:
91:ec:41:31:50:de:e5:77:ab:f7:7d:04:a3:ec:c0:3b:e7:e3:
d4:2a:64:4e:a7:7f:c3:25:c9:4f:2d:e2:80:2b:3a:1f:61:57:
fa:05:09:73:6f:b3:ae:72:66:4b:9f:b5:aa:11:28:cc:2f:c5:
61:f7:16:ff:ad:6a:bf:fb:a7:c8:7d:e8:d4:88:49:d6:17:1c:
f8:ae:05:7d:6e:1a:64:fb:a2:7a:96:cd:4d:6b:d3:cc:03:43:
8f:a3:37:29:95:9f:51:67:17:2d:9f:82:8a:24:e7:1c:b4:65:
fb:f5:f3:41:58:3c:8e:1f:79:6c:a0:50:4d:c9:5c:e9:b0:b1:
5a:a1:5e:5d:bf:9d:21:84:c6:47:03:74:de:5b:f1:52:53:74:
cc:ba:12:d2:c2:67:d4:12:28:00:84:b9:ec:85:bb:0a:c6:16:
80:fb:b8:42:f1:56:71:3e:89:c3:6c:7e:66:c3:b3:1d:ac:07:
4f:c0:e2:7e:b5:65:0e:a8:a2:e3:61:8f:70:24:9d:e5:b9:f8:
08:33:70:a9:10:01:d3:e9:d5:0d:41:50:b3:bb:3f:44:ff:d5:
0a:3c:3d:33:8f:69:59:cb:2a:b4:1b:79:37:61:c6:1b:52:8f:
b7:0e:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:32 2026 by rpki-client