
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft
File: He4XpqM4DuSI7ztuISW4eOZAckg.mft (raw, json)
Hash identifier: /xftyp8scYJ4vriM83j1NO9qtb0rSFBkC1PmC6UDJmw=
Subject key identifier: 48:22:D5:F9:C4:71:64:3F:B5:52:DC:10:A4:17:FE:36:C9:D2:77:9E
Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48
Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft
Manifest number: 0200
Signing time: Thu 19 Feb 2026 01:49:30 +0000
Manifest this update: Thu 19 Feb 2026 01:49:30 +0000
Manifest next update: Thu 26 Feb 2026 01:49:30 +0000
Files and hashes: 1: He4XpqM4DuSI7ztuISW4eOZAckg.crl (hash: Ujsy5qGdNocqlrPdbH6uooUoViIYpjSuMg7TJPwa+Eo=)
2: 805A2E74660311EF90397033C4F9AE02.roa (hash: kr3XK/LA3ME6CWbcxw7hFQfhU6QavtLWXc2+mP6aHgc=)
3: 8405155C69EB11EF933A993CC4F9AE02.roa (hash: Nc218pLJmDdsf2Z9Kv612BkBE9ixmiOBUD2+vg6KRQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl
rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248
Validity
Not Before: Feb 19 01:49:30 2026 GMT
Not After : Feb 26 01:49:30 2026 GMT
Subject: CN=69966c2a-32ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:62:b6:dd:66:f7:d7:46:da:1f:45:2a:7b:
2d:68:2e:fe:ac:4a:15:02:e6:81:f5:53:88:b1:d8:
89:b0:e7:fb:96:5e:83:1c:76:59:80:07:d1:33:0b:
ea:29:2c:8f:f8:8f:b2:15:96:b3:d8:3d:57:94:24:
e0:fe:69:ab:8c:a3:3f:91:42:cf:7a:e3:5f:92:ee:
1a:52:f1:ea:97:33:b5:9a:75:20:d2:96:2f:3f:54:
32:10:1c:db:9c:25:42:03:66:e9:e3:6f:f1:43:ec:
ed:ad:ac:9c:98:1b:ee:11:f1:8a:bd:fb:80:83:64:
2a:b8:13:e9:e7:0c:f3:23:ea:a7:41:7f:8e:1b:dc:
fa:4f:c9:b5:45:35:74:bc:3c:42:f1:75:72:d3:0c:
05:f2:71:58:9e:0e:10:9e:d0:14:f2:64:5b:c0:23:
a6:d9:f9:0f:5c:cb:77:fc:cc:2b:3c:7b:d5:6a:15:
e7:ab:3e:a3:63:68:50:54:e2:b2:1f:5f:14:cf:0d:
5a:f3:d8:cf:48:18:14:8b:f5:a3:b8:56:64:21:b6:
f8:6f:05:43:fc:68:92:7d:40:66:36:fa:e3:b6:a2:
8b:ac:f2:f0:ce:d4:37:18:83:f9:3d:4e:d7:14:07:
4f:d3:87:4a:b2:80:70:40:71:c8:8d:b7:37:ba:d8:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:D5:F9:C4:71:64:3F:B5:52:DC:10:A4:17:FE:36:C9:D2:77:9E
X509v3 Authority Key Identifier:
keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:95:9d:7c:9f:d7:31:21:3b:e8:e5:2d:56:e1:2a:ee:0f:ea:
72:bb:62:4f:f2:75:bb:18:ce:c8:c5:f7:91:7a:d0:d3:66:31:
57:b6:f8:dd:a4:1f:65:48:1e:f5:a6:1f:98:64:09:6d:c9:5e:
76:8c:a7:9d:79:bf:90:05:95:f2:a5:4d:41:3e:4a:02:13:35:
ad:b7:0a:82:4d:1e:9b:31:69:47:32:44:0d:3d:b7:b9:ea:88:
cc:25:91:68:c7:94:7e:ca:48:06:8c:83:9a:ee:59:a0:1c:94:
59:7e:71:2e:82:32:32:e4:26:2f:e5:57:d2:71:fc:da:1c:9c:
7a:df:0d:35:02:7b:f5:9d:0d:47:b3:79:6c:19:20:44:f8:9f:
f1:d0:00:b8:93:27:3a:69:72:39:9c:99:2e:80:7e:99:f0:fa:
eb:ea:29:20:43:14:76:14:90:e6:53:50:2a:14:65:a6:4e:c0:
f8:6d:88:f3:e8:12:3b:1f:b8:88:79:93:8b:e0:3d:fe:8e:ce:
23:cc:a3:95:bd:7e:fa:81:f2:f5:bc:10:b1:27:95:3d:f0:6b:
89:8d:f3:1a:a4:1c:53:ee:e6:b6:bc:d1:ab:2b:90:54:64:d8:
b0:3f:15:b9:1e:77:98:5c:a4:38:00:eb:5b:0e:87:be:bd:0f:
42:a6:e5:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4
RTY0MDcyNDgwHhcNMjYwMjE5MDE0OTMwWhcNMjYwMjI2MDE0OTMwWjAYMRYwFAYD
VQQDDA02OTk2NmMyYS0zMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+Fitt1m99dG2h9FKnstaC7+rEoVAuaB9VOIsdiJsOf7ll6DHHZZgAfRMwvq
KSyP+I+yFZaz2D1XlCTg/mmrjKM/kULPeuNfku4aUvHqlzO1mnUg0pYvP1QyEBzb
nCVCA2bp42/xQ+ztraycmBvuEfGKvfuAg2QquBPp5wzzI+qnQX+OG9z6T8m1RTV0
vDxC8XVy0wwF8nFYng4QntAU8mRbwCOm2fkPXMt3/MwrPHvVahXnqz6jY2hQVOKy
H18Uzw1a89jPSBgUi/WjuFZkIbb4bwVD/GiSfUBmNvrjtqKLrPLwztQ3GIP5PU7X
FAdP04dKsoBwQHHIjbc3utj6twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgi1fnE
cWQ/tVLcEKQX/jbJ0neeMB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE
RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQyMi8zRjdENjhBOEZERTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1
U0k3enR1SVNXNGVPWkFja2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWlZ18n9cxITvo5S1W4SruD+pyu2JP8nW7GM7IxfeRetDTZjFXtvjd
pB9lSB71ph+YZAltyV52jKedeb+QBZXypU1BPkoCEzWttwqCTR6bMWlHMkQNPbe5
6ojMJZFox5R+ykgGjIOa7lmgHJRZfnEugjIy5CYv5VfScfzaHJx63w01Anv1nQ1H
s3lsGSBE+J/x0AC4kyc6aXI5nJkugH6Z8Prr6ikgQxR2FJDmU1AqFGWmTsD4bYjz
6BI7H7iIeZOL4D3+js4jzKOVvX76gfL1vBCxJ5U98GuJjfMapBxT7ua2vNGrK5BU
ZNiwPxW5HneYXKQ4AOtbDoe+vQ9CpuWF
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:51 2026 by rpki-client