
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier: 3SZBNJL2DwHrACWBZBy2K2z72EsV4XH8FnN/8i3+KoI=
Subject key identifier: 24:67:43:75:DF:A4:EA:46:FF:12:68:A0:71:63:44:23:5E:B4:A9:CB
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number: 33
Signing time: Thu 19 Feb 2026 06:51:23 +0000
Manifest this update: Thu 19 Feb 2026 06:51:23 +0000
Manifest next update: Thu 26 Feb 2026 06:51:23 +0000
Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: q9Lug6iABWZAtpaUqYQK/vqRhPMJBB8OJDEouO9Pk5I=)
2: 681269F8087811F19439B7C20A3D8C67.roa (hash: uCizFzbivbOBctlRtQY/UGeZMCFLDUQEJVtoK0MLkDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Feb 19 06:51:23 2026 GMT
Not After : Feb 26 06:51:23 2026 GMT
Subject: CN=6996b2eb-5470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:f4:95:35:5d:d9:33:0a:bc:07:77:95:32:
4e:42:e4:1e:73:e5:c7:11:6c:8a:a6:01:fa:0d:6f:
34:bb:1f:3d:60:2c:ca:81:70:64:a7:ee:38:c2:05:
d8:6b:1c:f7:b8:b6:85:f9:b4:ad:a2:de:8d:88:34:
07:99:b1:0f:27:bf:e0:83:d1:8b:a6:f8:aa:57:f4:
56:43:13:a5:1b:e5:e2:1d:9e:cc:f6:70:68:df:4a:
e6:26:bd:21:33:66:10:d7:26:ea:76:1c:81:45:1d:
6e:fa:64:4c:ef:a1:6b:20:d1:aa:c5:8b:35:bc:f5:
76:d3:dd:9a:99:2f:63:82:ab:db:8e:2f:05:f7:e9:
74:39:e8:f7:c1:ec:3a:6b:73:83:25:a4:84:d7:24:
98:a6:3d:ab:6a:57:87:fd:20:28:c0:8a:22:42:d0:
a6:fe:1e:84:dd:c0:a3:03:09:c3:02:c5:98:5f:7f:
07:bb:e2:55:e9:e2:20:5e:2f:84:cf:e3:f8:7a:3e:
81:7f:ac:80:75:85:73:52:ba:9f:b8:bc:92:bf:ac:
47:b8:c9:c7:2e:6f:c5:0a:47:b0:4f:27:83:4b:0f:
2e:3e:12:b0:05:7d:a7:80:45:c3:87:c8:99:4e:5e:
bc:4b:03:80:3b:92:9e:c0:31:3b:99:aa:59:0d:c5:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:43:75:DF:A4:EA:46:FF:12:68:A0:71:63:44:23:5E:B4:A9:CB
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:50:f4:36:c3:7c:2f:d3:32:ba:b7:56:bf:e3:0f:d7:59:d9:
ad:3a:46:c8:48:4c:d4:36:52:c9:46:c5:fd:e4:72:96:af:01:
a9:8a:5c:22:07:3f:79:19:94:cc:31:3c:98:71:98:ce:8c:6a:
bd:fb:30:52:c5:17:16:ac:c7:28:99:19:db:9d:96:64:2e:9e:
2b:a6:2d:11:25:bd:b2:35:6a:8b:61:2c:b4:63:a2:61:8e:06:
bf:d8:57:aa:de:18:02:12:ca:19:c5:2d:ea:b7:df:dc:05:92:
e1:06:c7:b3:55:a3:66:a6:e2:20:73:6a:a6:ca:00:70:bf:fe:
68:1c:6f:b3:30:94:ae:ab:1f:7c:97:e9:45:b3:0e:ea:d0:c9:
48:cd:f9:90:f1:3a:ae:7c:a9:fc:0f:3e:7a:eb:b3:45:89:e6:
a9:6b:f6:cb:d8:0c:bb:19:c4:70:39:cd:2e:01:da:54:df:46:
57:dc:8c:71:20:e8:16:df:8e:dc:20:a4:f3:e5:44:e1:8a:80:
c4:02:a6:33:55:b1:53:75:b1:23:cb:04:4d:a7:f6:2b:f4:3a:
77:eb:7c:12:4a:6a:73:eb:e4:d6:6f:81:92:77:0a:2c:e4:a5:
d2:ff:27:db:64:29:38:06:cc:64:28:4b:c7:04:17:9d:8d:30:
26:25:3a:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RkVBODExMC8GA1UEBRMoNzc4NDg4MTQ4RTNBRTJGMTRBRDQwODU0RjdBMkZBNTk1
Nzc1QzU3NTAeFw0yNjAyMTkwNjUxMjNaFw0yNjAyMjYwNjUxMjNaMBgxFjAUBgNV
BAMMDTY5OTZiMmViLTU0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZBPSVNV3ZMwq8B3eVMk5C5B5z5ccRbIqmAfoNbzS7Hz1gLMqBcGSn7jjCBdhr
HPe4toX5tK2i3o2INAeZsQ8nv+CD0Yum+KpX9FZDE6Ub5eIdnsz2cGjfSuYmvSEz
ZhDXJup2HIFFHW76ZEzvoWsg0arFizW89XbT3ZqZL2OCq9uOLwX36XQ56PfB7Dpr
c4MlpITXJJimPatqV4f9ICjAiiJC0Kb+HoTdwKMDCcMCxZhffwe74lXp4iBeL4TP
4/h6PoF/rIB1hXNSup+4vJK/rEe4yccub8UKR7BPJ4NLDy4+ErAFfaeARcOHyJlO
XrxLA4A7kp7AMTuZqlkNxdarAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJGdDdd+k
6kb/EmigcWNEI160qcswHwYDVR0jBBgwFoAUd4SIFI464vFK1AhU96L6WVd1xXUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGRUE4LzA2OEU3NjdBQzU5
RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhY
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZDRTSUZJNDY0dkZLMUFoVTk2TDZXVmQxeFhVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG
RUE4LzA2OEU3NjdBQzU5RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZG
SzFBaFU5Nkw2V1ZkMXhYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGVQ9DbDfC/TMrq3Vr/jD9dZ2a06RshITNQ2UslGxf3kcpavAamKXCIH
P3kZlMwxPJhxmM6Mar37MFLFFxasxyiZGdudlmQuniumLRElvbI1aothLLRjomGO
Br/YV6reGAISyhnFLeq339wFkuEGx7NVo2am4iBzaqbKAHC//mgcb7MwlK6rH3yX
6UWzDurQyUjN+ZDxOq58qfwPPnrrs0WJ5qlr9svYDLsZxHA5zS4B2lTfRlfcjHEg
6BbfjtwgpPPlROGKgMQCpjNVsVN1sSPLBE2n9iv0OnfrfBJKanPr5NZvgZJ3Cizk
pdL/J9tkKTgGzGQoS8cEF52NMCYlOuQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:00:22 2026 by rpki-client