
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier: jLwavHKe0phFleYMtJy17LCzaig+HlwrHQ9a1MAn36k=
Subject key identifier: 8B:81:A7:9E:AD:56:EB:E9:BB:A9:58:E4:79:63:7A:EE:BE:64:58:24
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial: 0A64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number: 0A5D
Signing time: Wed 18 Feb 2026 19:12:02 +0000
Manifest this update: Wed 18 Feb 2026 19:12:01 +0000
Manifest next update: Wed 25 Feb 2026 19:12:01 +0000
Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: KJZdMIC8oyAHpioYzxsU96lbQ5PnnTZAqIoKXOD/y98=)
2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Validity
Not Before: Feb 18 19:12:01 2026 GMT
Not After : Feb 25 19:12:01 2026 GMT
Subject: CN=69960f02-408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:14:b7:0a:c6:ee:72:43:32:d5:26:5b:53:
5f:1d:98:3a:87:50:5c:d2:79:93:2f:49:50:13:2b:
e6:7e:7b:ae:1d:75:4f:1c:aa:10:a8:68:72:ce:e6:
98:da:a7:9d:37:df:76:63:a9:c0:f6:72:ee:3f:dc:
45:3a:3c:c7:02:37:27:1f:f2:72:45:f3:a4:66:90:
9f:8b:5a:a1:8f:7b:48:a6:2e:86:92:b6:4a:59:27:
50:4e:b9:40:8f:82:ad:6d:10:ef:06:2e:35:4e:62:
fd:69:c6:7c:f2:3a:ba:30:20:a8:8a:6f:d2:af:ba:
79:03:66:18:f0:73:48:c1:a6:55:32:a6:14:55:b8:
96:56:8d:f1:36:1d:5e:36:a8:97:93:8c:6c:27:b7:
c9:4a:3a:29:f4:72:cf:48:0e:0b:bf:b6:f1:6d:c1:
5d:1e:62:24:c3:3d:f2:cf:ad:e3:38:c7:39:cf:e0:
96:4e:63:f3:3f:f6:d9:7d:0f:4c:7f:73:8d:4e:86:
31:04:36:00:20:fc:28:5d:4d:a8:0e:59:74:e3:8a:
14:a4:38:0e:64:06:17:b7:d2:67:6f:b5:23:5e:97:
ef:2b:20:0d:67:2a:21:33:5b:68:9e:50:32:b5:13:
4a:2a:18:3f:bd:07:8d:a4:9d:b9:ca:37:11:5a:2a:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:A7:9E:AD:56:EB:E9:BB:A9:58:E4:79:63:7A:EE:BE:64:58:24
X509v3 Authority Key Identifier:
keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:7b:49:9f:5b:fe:86:8d:82:fb:ac:60:e7:1b:fe:ac:4e:
43:33:c7:b5:35:6a:5e:a2:be:e6:87:72:96:e2:62:96:c5:61:
ff:6e:93:3f:5b:c6:2f:b4:33:33:04:97:51:61:7a:f0:af:60:
ad:a8:84:bd:30:56:e2:45:a7:2f:89:8f:c8:e2:bf:4c:54:df:
8f:22:31:84:8a:0b:5a:7f:db:c5:0f:49:a0:e9:37:e2:46:29:
07:ef:b2:d9:8d:64:cc:94:a6:28:95:90:e7:32:0c:2c:20:ce:
0a:41:e1:40:23:e8:f5:9b:48:87:81:3a:29:57:ac:ea:b0:3d:
a5:a6:67:87:0d:ba:3b:46:d6:e5:f0:d7:c2:97:73:15:0b:27:
c2:53:99:3a:1b:b1:80:e2:0f:36:c7:18:4d:2f:7a:b5:b2:a2:
4f:0f:25:3d:00:97:a5:60:e2:1c:1a:9a:ae:48:2a:9f:61:df:
4a:40:c2:8e:04:0b:74:77:d9:84:c8:c2:4a:d8:14:d7:0d:84:
ec:a2:6e:7d:1c:f8:45:13:ed:4d:f0:aa:63:56:5f:29:a6:53:
12:2c:59:c5:78:c1:33:0b:7b:2a:53:e9:6d:32:6f:99:22:87:
9e:42:c3:34:c9:c4:8f:2e:d6:ec:43:ec:2a:89:0c:cc:66:d2:
f4:2e:68:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC
OERCN0NGMkQwHhcNMjYwMjE4MTkxMjAxWhcNMjYwMjI1MTkxMjAxWjAYMRYwFAYD
VQQDDA02OTk2MGYwMi00MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UoUtwrG7nJDMtUmW1NfHZg6h1Bc0nmTL0lQEyvmfnuuHXVPHKoQqGhyzuaY
2qedN992Y6nA9nLuP9xFOjzHAjcnH/JyRfOkZpCfi1qhj3tIpi6GkrZKWSdQTrlA
j4KtbRDvBi41TmL9acZ88jq6MCCoim/Sr7p5A2YY8HNIwaZVMqYUVbiWVo3xNh1e
NqiXk4xsJ7fJSjop9HLPSA4Lv7bxbcFdHmIkwz3yz63jOMc5z+CWTmPzP/bZfQ9M
f3ONToYxBDYAIPwoXU2oDll044oUpDgOZAYXt9Jnb7UjXpfvKyANZyohM1tonlAy
tRNKKhg/vQeNpJ25yjcRWirthwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuBp56t
Vuvpu6lY5Hljeu6+ZFgkMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF
MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV
c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAewXtJn1v+ho2C+6xg5xv+rE5DM8e1NWpeor7mh3KW4mKWxWH/bpM/
W8YvtDMzBJdRYXrwr2CtqIS9MFbiRacviY/I4r9MVN+PIjGEigtaf9vFD0mg6Tfi
RikH77LZjWTMlKYolZDnMgwsIM4KQeFAI+j1m0iHgTopV6zqsD2lpmeHDbo7Rtbl
8NfCl3MVCyfCU5k6G7GA4g82xxhNL3q1sqJPDyU9AJelYOIcGpquSCqfYd9KQMKO
BAt0d9mEyMJK2BTXDYTsom59HPhFE+1N8KpjVl8pplMSLFnFeMEzC3sqU+ltMm+Z
IoeeQsM0ycSPLtbsQ+wqiQzMZtL0Lmid
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:12 2026 by rpki-client