
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier: opWW7DSdcntU4T9ExJheS4t1lnA/002zk6Ct5l+r2yA=
Subject key identifier: 4C:B2:12:A9:76:1D:0E:FC:09:F9:2B:33:35:1C:87:B1:A1:14:F5:9A
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number: 0418
Signing time: Wed 18 Feb 2026 23:37:52 +0000
Manifest this update: Wed 18 Feb 2026 23:37:51 +0000
Manifest next update: Wed 25 Feb 2026 23:37:51 +0000
Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: raoABBKQDN2jkoBtwJ2uxIgAcbWWcD0eWs+Hov/mALc=)
2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: n9RCBLHpgjOAFQhIl7OXxEtavy0mL+5/7gM0zNsjfBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Validity
Not Before: Feb 18 23:37:51 2026 GMT
Not After : Feb 25 23:37:51 2026 GMT
Subject: CN=69964d4f-a658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:1d:b1:4c:35:25:26:4c:d1:16:80:0d:ea:
3e:78:5b:e3:73:6e:d3:70:7a:fd:8c:77:c2:ec:00:
45:5f:35:53:e3:7c:40:ab:47:b1:f4:f0:4a:20:67:
e3:15:eb:34:dd:86:5e:e8:0d:de:e5:e5:77:16:7d:
16:d0:19:00:68:c7:20:8e:f3:3b:66:8d:20:a2:11:
73:be:d2:e4:81:8c:7e:b7:a4:fd:8d:99:c9:57:1d:
ac:02:c8:0c:94:91:0f:cb:b6:98:2f:ba:a8:a5:f9:
91:be:45:0a:bc:04:75:5e:df:db:d5:7b:1c:c2:0b:
62:d3:27:a9:ca:d3:46:3f:32:04:05:77:87:39:8b:
50:6b:96:1c:cc:9a:60:13:fb:b7:2c:23:87:d2:17:
ec:34:30:a2:75:b8:63:d0:dc:cc:cc:5d:23:0c:52:
94:34:4a:d6:9a:63:b4:02:ee:2b:ce:1f:c5:a2:50:
7b:2d:64:05:83:6b:bc:c3:ec:3f:bf:0a:1f:3a:aa:
c1:65:02:e3:b1:3a:0d:f5:de:6b:3a:f1:5e:a3:2c:
22:8e:93:2b:d3:1a:fa:8d:df:17:f1:22:1e:31:ee:
dc:6c:d5:d9:4a:19:15:27:f0:eb:04:a8:be:5f:9a:
33:68:ff:ff:cc:05:97:dc:f1:8d:5d:cb:a8:e3:82:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:12:A9:76:1D:0E:FC:09:F9:2B:33:35:1C:87:B1:A1:14:F5:9A
X509v3 Authority Key Identifier:
keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:9f:43:c7:18:b9:84:78:79:56:f8:17:12:06:cc:34:07:12:
bd:24:ac:7c:1b:79:f0:2d:52:fe:fc:4c:a7:d3:40:db:be:ea:
d3:83:75:0d:27:e1:be:a9:37:c6:68:26:1d:ad:19:8f:51:91:
21:de:b6:68:de:a7:df:e3:6d:1a:c5:d8:ad:ae:67:37:19:3a:
7f:76:e0:3b:bb:23:d6:29:73:bf:49:84:4a:52:93:01:50:22:
30:ed:14:35:f2:9d:28:76:b4:64:b6:75:32:a9:18:e0:db:c2:
fc:63:19:86:be:0c:22:fc:d5:fa:fe:02:28:6e:e0:ce:12:49:
de:92:52:7b:bd:aa:8a:f4:44:9c:15:ce:6f:c6:33:68:e2:34:
78:d5:8e:27:9a:2e:47:1b:cd:a6:06:21:f0:65:e5:27:20:06:
d0:fb:84:54:df:df:28:18:a1:34:cc:86:36:27:2c:b2:df:47:
82:12:ad:87:5f:42:a5:b9:44:41:4d:f8:35:4b:7c:84:97:fa:
c3:f4:cd:06:1f:cf:a2:d7:04:5e:5d:89:0a:be:a6:b2:52:ed:
48:0e:84:68:38:e0:30:58:76:3e:38:61:59:05:55:d8:b7:35:
c8:54:0e:46:9d:8f:9e:83:0a:74:e6:83:70:be:71:bd:bf:37:
c5:c3:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:17 2026 by rpki-client