
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: 2aqAAa2chEpj2sq8RSep48lg9mV4lf0xFACYr57D3J0=
Subject key identifier: 28:26:1B:9B:31:63:8F:04:3A:5A:C6:53:56:EF:10:2E:49:B3:30:4F
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 0581
Signing time: Wed 18 Feb 2026 23:32:16 +0000
Manifest this update: Wed 18 Feb 2026 23:32:15 +0000
Manifest next update: Wed 25 Feb 2026 23:32:15 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: qVa9uGDVQmNQ970ojXwMq36TWvEB5+blA/Goo9QGIns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Feb 18 23:32:15 2026 GMT
Not After : Feb 25 23:32:15 2026 GMT
Subject: CN=69964c00-0d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:42:94:21:ec:a5:f3:98:05:a0:17:f4:a5:
48:8e:b3:6b:7f:94:99:7f:72:39:a2:80:d6:d7:b6:
f9:52:30:7b:60:07:70:a4:40:c4:69:c8:08:bf:71:
de:11:9e:35:0a:b6:b0:2f:f7:55:92:b0:79:71:ed:
6e:81:0f:c1:ea:09:f7:45:1f:06:d1:1d:dd:57:e7:
91:a3:b5:a6:c7:c5:d2:6f:8b:85:44:5a:5b:0b:50:
a9:b5:e6:ec:2d:b0:64:d5:5f:6a:2a:c5:a2:b7:ac:
95:1a:8c:ed:81:d9:ee:ce:27:ed:56:7a:af:85:56:
a3:f8:eb:25:e5:27:0f:36:12:7f:22:63:dd:1e:38:
b1:1e:7b:ff:f0:66:2d:0e:1b:7a:b1:8c:92:65:70:
7a:04:ba:67:ef:00:f2:9c:7b:02:16:20:3e:e8:da:
ae:40:5f:75:87:39:ef:8a:1b:41:22:79:93:25:22:
c8:67:a9:4e:54:ab:a5:ea:c7:2a:c7:69:fe:e7:7d:
f0:65:3f:83:8a:0a:56:ba:2c:56:c9:c9:33:04:6a:
41:86:73:1b:4e:a6:35:48:14:15:1a:1b:89:c3:af:
aa:0a:3a:d1:d4:5c:88:1f:60:a4:04:0c:eb:49:73:
51:4c:42:d0:f4:86:7f:1d:04:83:42:0e:9e:9e:c8:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:1B:9B:31:63:8F:04:3A:5A:C6:53:56:EF:10:2E:49:B3:30:4F
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:a9:46:aa:a4:dc:98:ac:46:38:e0:aa:26:af:41:39:17:
85:66:45:f0:1b:e2:f3:21:f5:83:d3:62:d0:1f:9f:30:94:db:
42:45:03:9f:75:01:b3:fb:98:0a:68:49:aa:92:04:4b:53:80:
53:c5:17:0a:e7:78:cb:e8:9f:b8:93:8c:83:2a:9b:71:40:74:
59:6f:68:99:95:f5:3b:b5:db:b9:ca:74:74:87:e1:d8:20:91:
29:4b:3e:52:29:79:99:f4:d3:ca:c8:1c:47:32:01:38:0c:b9:
e2:ef:9a:aa:8e:6a:37:7b:5d:af:6f:bd:d3:a2:6e:d6:2d:7a:
e3:78:37:7b:98:8f:fe:6e:ce:c0:d9:94:33:a8:9f:1c:3b:7e:
2c:70:ca:b0:33:8b:0a:2a:5f:61:3a:2b:09:62:cc:95:c2:40:
d9:13:0a:e8:79:c1:b3:51:2d:ee:1f:84:3e:5a:02:6b:2c:39:
56:38:cd:9f:95:b6:76:5b:68:3f:db:74:33:40:0d:05:55:17:
fb:5f:c8:d9:6e:7b:b4:f2:90:e7:83:33:fb:73:28:24:62:73:
eb:94:3a:cc:a3:0b:c0:55:33:88:9f:2d:26:39:59:15:c8:68:
4d:67:f0:20:8c:af:2b:a3:01:24:31:b4:3c:bc:4a:34:c9:95:
51:7c:c3:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw
NTBGRDFENDYwHhcNMjYwMjE4MjMzMjE1WhcNMjYwMjI1MjMzMjE1WjAYMRYwFAYD
VQQDDA02OTk2NGMwMC0wZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUlClCHspfOYBaAX9KVIjrNrf5SZf3I5ooDW17b5UjB7YAdwpEDEacgIv3He
EZ41CrawL/dVkrB5ce1ugQ/B6gn3RR8G0R3dV+eRo7Wmx8XSb4uFRFpbC1Cptebs
LbBk1V9qKsWit6yVGoztgdnuziftVnqvhVaj+Osl5ScPNhJ/ImPdHjixHnv/8GYt
Dht6sYySZXB6BLpn7wDynHsCFiA+6NquQF91hznvihtBInmTJSLIZ6lOVKul6scq
x2n+533wZT+DigpWuixWyckzBGpBhnMbTqY1SBQVGhuJw6+qCjrR1FyIH2CkBAzr
SXNRTELQ9IZ/HQSDQg6ensid5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgmG5sx
Y48EOlrGU1bvEC5JszBPMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1
NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF
MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClSalGqqTcmKxGOOCqJq9BOReFZkXwG+LzIfWD02LQH58wlNtCRQOf
dQGz+5gKaEmqkgRLU4BTxRcK53jL6J+4k4yDKptxQHRZb2iZlfU7tdu5ynR0h+HY
IJEpSz5SKXmZ9NPKyBxHMgE4DLni75qqjmo3e12vb73Tom7WLXrjeDd7mI/+bs7A
2ZQzqJ8cO34scMqwM4sKKl9hOisJYsyVwkDZEwroecGzUS3uH4Q+WgJrLDlWOM2f
lbZ2W2g/23QzQA0FVRf7X8jZbnu08pDngzP7cygkYnPrlDrMowvAVTOIny0mOVkV
yGhNZ/AgjK8rowEkMbQ8vEo0yZVRfMMf
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:31 2026 by rpki-client