
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File: WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier: JdCHhpSPJaOljq+VKwqnReMAK+ZTu3gUX1sP60jev9U=
Subject key identifier: C0:67:6D:2A:F0:B6:F7:A7:D2:75:A9:2C:5C:49:3C:1A:F9:15:5B:57
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer: /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number: 2C
Signing time: Thu 19 Feb 2026 06:58:17 +0000
Manifest this update: Thu 19 Feb 2026 06:58:16 +0000
Manifest next update: Thu 26 Feb 2026 06:58:16 +0000
Files and hashes: 1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: OCUFJgv4O3TZyHC8eoTC0kYz78wV86ZYXEqR0REo8ys=)
2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: peAS/ngmPwYZnb97WFQxinsPTC6bCf5NaFTKHcSyPQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Validity
Not Before: Feb 19 06:58:16 2026 GMT
Not After : Feb 26 06:58:16 2026 GMT
Subject: CN=6996b489-3402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:49:86:67:a8:f2:9b:3d:76:97:d3:68:0c:
a9:02:68:36:e2:fa:5b:1c:3e:68:c9:56:13:71:71:
ca:06:36:dc:b7:9b:3b:49:b6:cf:23:42:de:f2:b4:
0f:74:fb:27:a1:81:3a:ed:f8:00:17:d7:c3:fc:41:
d6:32:08:84:0c:4b:68:e1:fa:3f:fb:83:83:0a:63:
e1:f1:52:ca:5a:33:16:50:17:4b:b2:1d:88:3e:d5:
eb:dc:be:b9:1d:d8:87:4e:bc:9c:fb:ac:42:83:d2:
b6:94:54:a4:29:a8:49:f7:e8:95:40:04:48:b4:92:
a1:d1:42:9a:b6:77:35:21:51:e8:93:dc:97:36:88:
9d:5c:ca:43:11:96:b1:80:98:89:97:7f:cd:2e:2a:
ad:98:3b:56:31:e7:8c:ad:c7:0f:54:01:fd:fa:f9:
ec:aa:aa:f9:3f:f0:cc:8a:e1:35:5e:e4:b7:a1:a8:
3c:52:a4:44:39:ec:e0:a3:b8:77:8b:46:73:da:38:
aa:29:c7:fd:77:68:3d:27:cd:05:32:39:48:e7:16:
fa:15:c6:d1:6a:a8:53:b4:e6:51:87:90:5b:1c:50:
21:ea:6f:0e:7e:41:f1:a2:bf:17:41:fb:3c:88:8d:
fe:32:30:b4:f3:23:2a:7f:a6:93:6f:8c:fc:be:4a:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:6D:2A:F0:B6:F7:A7:D2:75:A9:2C:5C:49:3C:1A:F9:15:5B:57
X509v3 Authority Key Identifier:
keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:03:16:2b:b8:ce:a2:24:db:10:3c:5e:7b:09:2d:49:81:
10:bd:c8:af:d3:67:2d:47:b8:04:e3:9a:ac:a3:93:b9:3d:19:
b1:3f:d5:2f:18:c7:48:88:4e:05:8f:ad:27:89:17:e4:c5:8d:
40:fd:0b:71:bc:26:00:0d:be:d3:58:4e:16:e4:22:15:58:27:
dc:92:e8:7d:ee:db:ce:03:16:26:48:60:49:69:0e:c0:24:81:
61:e1:e7:f4:ec:34:2c:3f:64:43:e7:45:db:85:41:c0:cf:3a:
4e:03:0b:f6:ab:ec:37:cc:ac:13:63:f0:6d:e6:3a:e5:a4:98:
9f:e4:4c:7f:f9:f8:2d:de:b5:71:e3:bf:f9:51:1f:61:ca:79:
9c:02:7e:fe:1d:ee:f2:20:53:a0:e3:49:ce:04:f4:cf:7e:af:
10:f1:33:03:a8:94:be:36:9c:7c:5e:af:cd:5c:a8:67:9c:6b:
bb:37:56:26:3d:8f:64:ad:92:34:72:8a:4e:ad:95:80:25:77:
73:10:f8:05:4f:2b:3a:c7:7a:a6:e8:bb:3f:3c:e7:44:d9:4b:
f1:a1:4c:56:75:8b:92:52:54:7b:b2:d4:a8:be:cf:e3:00:2e:
76:37:71:0f:03:b7:e3:c2:fa:6e:09:93:79:28:3e:c8:3f:2e:
27:ee:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:28 2026 by rpki-client