
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: iPalFSQf7MVmGRI/4LDERDpac8GFC9q2zXpmYLsaLKk=
Subject key identifier: 4D:38:61:EF:6D:1E:4C:32:91:3F:98:8D:15:22:3F:58:AC:F6:58:5B
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 3608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 3585
Signing time: Wed 18 Feb 2026 14:25:07 +0000
Manifest this update: Wed 18 Feb 2026 14:25:06 +0000
Manifest next update: Wed 25 Feb 2026 14:25:06 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: MezuBIhJiEKuqxTMifOXqgd4vWhrN4h+zSc96ifcHqU=)
2: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: Wb0omWMGDcuIWJtZzO5aYUeXeBS3PzZ1jDUa5EAiIV0=)
3: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: 2cUDNv3hrrgYqWPFe+1g+j6W4a5daevt2vyg7mc5Jv0=)
4: 02C97520985011F083EA2077C4F9AE02.roa (hash: iDndSBoFAc9uhUgvXQuDJ/5b7tXkUPKhNkfuD+XgWIQ=)
5: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: Uy1brxvBZUOgYCz25E+l8hAge6tUCO1Wj1Oolb03hHo=)
6: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: 1BgAAovkYb1AJSpU1SPJu/hRuo7VBc+isEUKAmqAK38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13832 (0x3608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Feb 18 14:25:06 2026 GMT
Not After : Feb 25 14:25:06 2026 GMT
Subject: CN=6995cbc2-a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:70:20:f3:6f:8a:2f:18:a9:21:a9:10:bd:
55:d5:16:72:37:74:1e:34:6c:4e:66:8d:96:d6:8f:
dd:d6:84:8e:ef:65:3e:89:ca:9c:1a:99:7c:ca:dd:
59:65:76:1b:96:ed:4a:51:47:5f:0a:ca:0e:d4:57:
0a:e5:d2:c9:b4:4b:8b:b3:09:41:bc:32:56:76:72:
e3:c3:38:2f:70:2b:6d:cf:91:6c:44:5a:71:fa:f2:
8f:69:ae:85:c7:ac:a1:ed:d3:e6:5e:a5:d1:5f:ce:
35:26:23:0d:ae:6c:62:04:4d:19:78:2f:f9:26:e1:
20:04:f5:9d:39:79:df:37:15:52:76:20:d9:46:d0:
2d:0b:d7:7b:84:20:ea:f0:fa:9d:6b:91:57:c7:3a:
bb:13:00:2f:93:f0:d9:26:71:5a:53:5e:d0:c8:fc:
44:cd:e7:92:2e:44:dc:f5:32:b4:5c:79:88:b8:09:
bc:10:2b:eb:14:5f:8f:7f:d7:0b:c8:c6:b8:1f:12:
19:05:52:fe:3a:67:24:91:fd:be:d5:8c:57:f5:42:
27:03:f0:ce:9e:1d:3a:c7:76:4d:43:8c:1e:1b:42:
48:7e:c2:b0:39:26:0d:92:ba:28:ea:4e:88:04:ad:
a9:b1:60:07:e1:50:0b:e9:5e:3f:73:99:18:4e:fa:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:61:EF:6D:1E:4C:32:91:3F:98:8D:15:22:3F:58:AC:F6:58:5B
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:91:97:d4:cf:71:59:22:0a:b4:88:28:17:ab:15:43:00:43:
f5:86:26:e5:5b:20:f0:ca:46:d9:fb:ec:f7:42:80:f7:13:2b:
e8:a0:35:ae:82:84:7c:0d:62:a3:38:47:2f:57:8f:5d:61:93:
fc:c8:ed:1b:b2:3c:00:c8:2f:e0:d3:f0:9d:d9:2b:8c:33:f7:
15:58:19:5c:ce:a8:19:10:99:8c:c9:ef:ed:93:57:93:36:c1:
b6:6d:d0:da:3b:65:a1:b4:fd:d4:55:e9:3c:b5:20:01:98:9e:
12:39:21:c0:c8:70:1b:6d:8b:3a:98:d4:99:d4:54:d8:7b:dd:
f0:d8:c8:11:b1:b5:06:c9:55:24:18:c1:b7:3b:0f:e0:2d:87:
77:3b:29:72:2b:ec:b7:55:e4:50:ec:a9:8e:44:73:6f:a4:dc:
c1:0a:3e:e5:11:21:4b:a3:55:e0:c7:ec:75:98:55:e4:f8:1c:
c1:b9:71:53:1a:58:8c:7b:bf:e1:da:ac:c4:f7:0d:e8:61:17:
c5:66:56:18:60:e2:72:de:fb:91:d0:d4:ae:a1:1b:b4:f5:38:
3b:4f:a1:68:a6:ab:1d:23:df:8f:4b:ca:ad:54:07:28:68:74:
72:a4:22:63:50:20:0d:49:ef:05:6e:5e:82:20:a7:b3:5b:1d:
28:1b:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:45 2026 by rpki-client