
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
File: r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json)
Hash identifier: YgOvaJprIkdjUFPkQUOwgqu2nVd88CEF3RN7ym9Qks0=
Subject key identifier: 8C:D2:02:27:BD:23:44:1C:97:39:E5:2B:F5:D7:50:D2:FF:0B:51:F8
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial: 0C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
Manifest number: 0C40
Signing time: Wed 18 Feb 2026 18:20:51 +0000
Manifest this update: Wed 18 Feb 2026 18:20:51 +0000
Manifest next update: Wed 25 Feb 2026 18:20:51 +0000
Files and hashes: 1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: IPyUIEQCA1BWgQsRgjfVSOFrZ0Zi0EA69TCPMpIRE6c=)
2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: GOn5I83uJZSyXlxS2nqYANbi3ziYR8hFxpWIpKnwdbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Validity
Not Before: Feb 18 18:20:51 2026 GMT
Not After : Feb 25 18:20:51 2026 GMT
Subject: CN=69960303-c9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:c0:c4:fb:cc:32:eb:ac:d8:2f:50:e7:63:
18:23:8d:63:50:96:23:6b:3d:a2:64:a7:68:b8:25:
3d:80:1a:b2:b7:31:b4:ed:44:24:92:88:d7:d3:ca:
29:7f:77:3a:ab:2c:b1:0e:c8:51:de:86:a4:f0:9c:
67:ab:ad:87:85:67:76:ce:be:67:77:73:c5:2f:63:
d7:b8:5c:a7:67:c0:df:a8:d1:47:74:76:c0:07:de:
80:ee:c8:dd:f5:39:c9:04:73:29:41:31:f7:cb:86:
19:a7:82:27:15:97:c9:91:8a:d3:bd:28:01:14:7c:
cf:26:82:a2:b0:d0:d9:f9:ca:10:75:e7:83:6a:9a:
3a:72:38:33:99:c2:4b:c2:dc:64:07:9b:4b:27:e1:
b5:4d:b0:f5:cb:4a:76:e5:39:9c:b0:bb:76:38:11:
62:aa:a4:3d:ac:82:49:08:7c:00:f3:7c:71:0f:a6:
6a:90:64:98:bc:85:0c:5f:ec:22:9e:b1:16:a5:61:
5b:da:ca:e2:8b:bb:fe:01:6e:7f:c1:96:c5:2d:c6:
b2:40:88:e0:08:1f:d9:cd:a8:e6:95:9e:b2:af:e3:
14:0b:5c:da:ff:12:83:0a:92:14:eb:8f:49:2e:f4:
b4:d2:4b:86:7a:83:ab:a9:10:ff:b7:e6:89:8b:b8:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:02:27:BD:23:44:1C:97:39:E5:2B:F5:D7:50:D2:FF:0B:51:F8
X509v3 Authority Key Identifier:
keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:06:d8:1f:4b:a7:12:67:f9:3a:04:58:fa:06:0e:05:d8:
22:b8:ab:10:83:eb:a1:3f:53:06:1b:c8:1b:d1:be:bf:7c:87:
d8:0f:f7:60:18:ba:93:49:fc:64:77:5f:d0:e9:f0:1f:50:09:
bb:ff:00:cf:13:f1:0e:0b:28:eb:00:18:4b:eb:12:e8:21:69:
b9:44:fa:29:dc:6f:f8:17:54:42:da:d9:2f:12:b2:4e:80:21:
ea:64:3d:86:21:35:64:d9:ec:5a:2e:f1:d8:58:59:94:bb:9e:
0d:db:d9:f5:7e:19:5b:88:41:73:f6:43:67:13:5c:e7:f9:59:
4a:59:64:f6:a3:43:80:e7:c1:41:48:39:b7:05:c1:4f:d4:79:
70:79:8e:af:60:96:3a:04:83:ab:60:a5:fa:19:9c:f9:37:e8:
21:b3:b3:f1:25:5d:32:20:33:5a:ce:13:06:06:54:1c:9b:cd:
04:8d:97:fc:b4:a3:a2:f8:80:f8:3a:2e:ba:c9:ce:0c:5d:70:
d0:ff:c9:70:59:37:6f:4e:27:5a:c1:7d:0b:83:a4:1f:26:f0:
44:97:73:3d:c7:a6:85:35:b3:f3:0b:6b:05:19:ff:24:94:80:
a5:88:a7:7b:a3:6d:03:0d:2f:e0:4c:71:b8:17:ce:cb:bd:21:
49:14:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:06 2026 by rpki-client