
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: eitCtwIq3Gz0z6Dl/aXM/nEFP9OhKBdlwDVunf8Bp1o=
Subject key identifier: 39:28:86:15:AA:06:A8:93:C1:CD:01:A2:9A:5B:7B:F4:A7:95:C1:7B
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0E97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0E7D
Signing time: Wed 18 Feb 2026 17:29:02 +0000
Manifest this update: Wed 18 Feb 2026 17:29:02 +0000
Manifest next update: Wed 25 Feb 2026 17:29:02 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: Sot9BSWhYclA603jIC4Jc76l7XemuJIRmAu0vr5fIxY=)
2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: VBr+pukLq0d7d7l0WansKQoitqcdk+EQkYoI9tvJptw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3735 (0xe97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Feb 18 17:29:02 2026 GMT
Not After : Feb 25 17:29:02 2026 GMT
Subject: CN=6995f6de-5d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:ae:93:c6:ac:b6:65:57:4f:9c:69:f0:ea:
f8:8f:0e:b0:1b:30:29:a2:77:85:7c:5e:34:8e:c5:
30:7b:4a:89:cf:85:93:0e:c7:9e:c6:2e:cc:d3:82:
a3:a5:60:eb:3a:e0:da:a5:52:95:7e:21:94:aa:09:
35:14:b7:ed:e7:36:cf:80:34:38:5b:1b:81:60:00:
c9:e3:62:cc:87:e8:4b:4c:64:fb:e8:eb:5b:82:0d:
c2:f7:23:eb:60:f7:a8:3f:7c:b3:04:42:3d:7a:4a:
b3:35:79:2a:9a:f9:69:23:61:7e:9a:b2:b9:08:ee:
06:88:bd:30:78:c8:ab:d4:52:7b:7d:c4:f9:89:e3:
50:50:9c:4f:95:f4:f9:94:d4:51:81:7a:60:29:12:
d2:3c:0b:6f:eb:fb:89:1d:71:60:47:cd:57:f2:c5:
17:4b:ce:34:44:15:b1:73:3a:60:d5:84:09:1d:a1:
ab:fa:95:0e:ef:2d:bf:c2:28:bf:07:33:e4:8c:a7:
c0:b6:03:c4:44:d8:60:af:05:e3:e5:45:a1:16:e6:
d7:8c:79:ce:1a:0d:39:d4:67:8c:f3:0d:e8:90:5a:
7d:ec:f5:97:bb:40:33:a3:6b:c7:36:ea:4f:45:5f:
86:10:a2:06:53:99:3a:62:23:ea:c4:f9:37:69:2c:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:86:15:AA:06:A8:93:C1:CD:01:A2:9A:5B:7B:F4:A7:95:C1:7B
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:0a:29:fc:13:c2:4d:14:ea:26:c6:b2:f2:4b:c4:94:45:
58:0e:97:50:7b:89:90:37:96:20:2f:b7:82:8b:88:10:84:85:
c4:a3:5c:e5:ec:f4:8a:0e:80:30:c2:46:40:70:43:4e:5b:ea:
f5:68:a5:85:57:cd:b1:e8:33:87:96:29:af:15:87:5b:a2:69:
e7:83:31:97:ec:35:b6:da:11:37:1b:86:ea:cb:d3:f5:81:6c:
75:00:5e:26:b3:35:c6:ce:91:e5:21:42:b6:d2:fc:dc:70:a3:
e9:72:6c:44:c1:54:df:ef:ab:88:b1:2e:f9:a8:40:4c:e1:96:
a3:70:40:73:c8:66:3a:92:1e:21:06:f1:7d:e8:f0:2e:ab:af:
09:f3:14:aa:cd:27:97:aa:0a:43:c8:71:0a:9f:15:ac:19:11:
6e:27:43:2f:e8:62:96:e7:5b:66:14:d0:9b:cd:3b:83:a2:a5:
52:e4:4e:a1:bd:5a:52:f8:68:5e:ba:58:20:2c:1b:b2:21:ba:
38:44:7b:73:cb:16:a4:4d:f0:34:44:a5:e5:37:cc:56:aa:65:
3f:1d:ca:33:4c:71:d7:60:78:67:0c:96:8f:f5:a6:a5:e7:05:
74:52:2d:89:f8:1d:22:58:66:7c:7d:76:bd:a4:09:88:91:f5:
1a:ce:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:08 2026 by rpki-client