
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier: aRewGTbzpZCg45fIX0w1MaRx/xTSgJK71vKk9cKYXv4=
Subject key identifier: B5:6D:07:34:47:F5:D7:58:4C:84:B6:58:A9:81:43:D8:CE:D3:7D:CD
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number: BF
Signing time: Thu 19 Feb 2026 05:18:03 +0000
Manifest this update: Thu 19 Feb 2026 05:18:02 +0000
Manifest next update: Thu 26 Feb 2026 05:18:02 +0000
Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: KKt6Tnj4rkirSYIGzT0T7jSLw1VGqLgPjej9tQbpOD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Validity
Not Before: Feb 19 05:18:02 2026 GMT
Not After : Feb 26 05:18:02 2026 GMT
Subject: CN=69969d0b-4d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:f6:bb:89:02:51:46:39:29:fe:a8:3c:3c:
46:04:a1:f0:28:a2:c0:2c:07:03:cb:15:cb:36:8e:
f3:80:8f:e6:e7:de:cd:4e:6e:50:fc:9c:d3:56:6b:
fc:ad:56:4b:27:65:41:c9:cf:58:1d:8b:69:01:1e:
66:f2:da:a5:30:8b:f1:77:e5:ad:45:87:cc:43:9d:
d8:8d:57:d0:58:81:cb:2f:27:61:b1:6e:70:64:ad:
67:49:5c:81:5e:69:68:1e:16:0c:32:38:44:dc:1c:
c6:8b:64:f2:1c:41:55:7e:58:7b:45:3b:9b:ec:97:
50:f4:ec:e6:9d:0b:b9:76:2d:b7:64:7f:d7:bb:81:
d3:3d:02:8a:7a:a6:85:f4:07:64:a9:55:0a:a9:50:
cd:de:28:8c:28:4b:22:76:8b:05:44:6a:97:dd:06:
ff:d3:ca:44:de:3b:6a:46:dc:6c:26:c5:ed:1c:3f:
73:49:8c:e2:dc:20:28:0a:3e:cc:b5:10:86:ac:e2:
14:0b:09:1b:a3:55:8f:c5:df:56:7f:93:a5:51:26:
a3:c8:43:b0:d0:cc:f4:31:e7:35:32:5d:1d:66:71:
b9:8f:c8:01:00:0c:55:9f:5f:c6:4b:ee:78:ec:30:
4b:21:13:b9:ec:b4:b4:e9:a7:7f:18:42:4a:8b:c5:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:07:34:47:F5:D7:58:4C:84:B6:58:A9:81:43:D8:CE:D3:7D:CD
X509v3 Authority Key Identifier:
keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:c7:99:b0:04:4c:ed:8c:fd:6c:fb:8b:df:8d:8b:e2:e4:
7c:98:84:b8:6c:0e:c7:74:6a:14:09:99:40:d8:db:25:b3:36:
cc:e6:a5:85:90:b9:6d:27:dd:8b:5e:18:26:27:e5:3d:f1:e2:
67:1d:7e:32:af:78:db:d1:d9:64:d5:ba:7e:f4:ec:73:30:c8:
37:a3:72:7f:6c:21:92:bb:e2:c4:97:d1:0b:80:7e:2b:f3:ab:
88:14:1f:a1:f4:35:a7:25:28:be:7d:ab:9c:6f:2a:cc:6e:14:
77:2d:04:9a:1f:64:e2:2a:8d:a6:26:4d:66:e0:6a:f4:23:4d:
26:95:9a:09:f4:00:3b:cb:77:0c:e2:65:8c:ae:a0:2d:60:e2:
c8:98:f0:4d:19:7d:fa:d2:c2:d9:f2:de:04:5c:b8:92:28:4a:
23:a3:8a:f4:dc:96:9f:a3:3c:a3:33:4e:18:c0:6b:ce:cb:6d:
d1:21:c8:93:12:33:28:42:97:25:8c:07:e0:b6:4b:26:2c:e9:
74:b6:8c:9f:23:3d:78:26:68:ea:d9:b7:7c:fc:7d:cf:4d:e1:
2a:8c:15:3b:3f:35:ef:00:96:52:63:0b:7d:00:1e:02:63:d9:
07:53:01:af:c9:b7:7a:69:38:3f:d3:da:98:d2:bd:0e:b1:d4:
f9:4b:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:09 2026 by rpki-client