
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json)
Hash identifier: 5f5ZLX+eDFvBPBproP0urJJOs/AWOrhT/7AN/blvgy8=
Subject key identifier: B3:C6:83:60:66:F3:64:14:55:28:F4:5B:E3:00:2F:FA:35:02:7C:07
Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
Manifest number: 01A1
Signing time: Thu 19 Feb 2026 03:14:34 +0000
Manifest this update: Thu 19 Feb 2026 03:14:33 +0000
Manifest next update: Thu 26 Feb 2026 03:14:33 +0000
Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: on/AxsaRD0+1vbmjKLx0cpqWjeiQkEmNJANIfKXbdHk=)
2: 2FEF460CD41D11F09C0AFC45C4F9AE02.roa (hash: rdQn4B0Eo4gv/K/Yqr8j8ThR1Ni5qGM9wHTsGAWKsWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Validity
Not Before: Feb 19 03:14:33 2026 GMT
Not After : Feb 26 03:14:33 2026 GMT
Subject: CN=6996801a-0b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:fc:29:23:34:a7:08:7e:2b:1b:2a:8b:94:
74:20:88:d4:d6:d0:dd:b0:d9:0a:a4:9a:1b:34:7f:
c6:6c:7e:91:5a:d5:77:35:b2:42:fc:42:00:e0:a8:
b3:44:0d:ce:fb:79:ee:d3:b7:01:4e:fe:bf:96:14:
cf:3a:9b:f2:e2:18:08:d4:1d:b2:d8:7b:b4:d3:23:
d0:47:92:86:71:1c:7d:a3:e3:91:b3:ee:8b:48:60:
3a:54:9b:6f:f6:3b:af:34:7c:74:d2:17:be:46:09:
2a:73:4c:6f:da:cd:06:34:2e:4b:5e:f1:64:25:24:
e7:3d:a4:9a:b7:b9:fd:2b:44:ca:a6:a8:4c:ea:e9:
30:dc:37:c9:84:c1:aa:92:27:49:c1:1d:50:55:a8:
56:6c:fc:1b:4f:bb:2c:ad:68:68:a5:9c:42:38:78:
aa:42:7a:f0:0a:75:d1:e8:45:22:d2:7d:c9:79:0d:
d3:0e:9e:da:c7:6e:eb:dc:ac:12:8a:4c:89:a1:27:
d1:6a:ad:97:a7:3b:21:c6:c4:b9:0f:73:ac:60:dc:
ec:d6:c2:d6:9f:32:54:a2:4d:12:17:de:15:5a:16:
11:58:d3:5e:09:d0:97:ad:2a:1d:ef:48:73:34:69:
95:8f:7c:6d:2e:ba:b2:01:5a:b3:05:d5:e6:f6:ca:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:83:60:66:F3:64:14:55:28:F4:5B:E3:00:2F:FA:35:02:7C:07
X509v3 Authority Key Identifier:
keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:32:86:ba:7f:80:4b:04:50:56:3f:e7:2b:b8:cd:d5:09:d2:
4e:89:57:71:94:28:97:12:ab:2a:e4:63:ff:7e:2a:9a:c8:de:
09:7f:02:3e:bb:74:58:03:ec:58:40:cd:cd:1c:33:51:90:35:
b4:34:27:da:a4:fb:f7:13:cd:eb:1b:ba:4e:3a:07:f9:1a:c0:
af:81:8f:89:85:76:99:9a:08:35:f9:e9:61:51:7c:50:96:59:
1d:03:4c:a8:08:17:45:ac:98:b0:60:94:56:4a:18:7e:cd:74:
06:18:f4:0b:35:24:2f:5b:df:dd:ba:a9:11:eb:b6:f4:67:e9:
33:c0:c5:77:80:b4:39:f4:7d:08:d5:cf:6d:ed:09:9e:1f:83:
c2:01:87:46:14:22:68:cb:5b:8b:f7:ed:fa:6e:91:69:a3:82:
21:bc:d4:9f:d4:de:11:78:ca:f4:5b:12:30:a0:0e:7a:c6:db:
6e:f6:fb:d0:73:70:50:46:43:54:1f:b1:cf:78:94:ae:f4:37:
71:3b:b2:dc:f9:8c:78:a3:3c:40:0b:84:30:9e:24:26:fa:05:
d4:72:7f:44:91:aa:80:65:7b:dc:71:a9:60:5e:5e:be:3a:0c:
cb:6a:2a:29:ed:17:b6:67:b5:c4:85:d0:52:22:26:73:68:87:
0b:bf:ff:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB
Q0Q1RURBOEEwHhcNMjYwMjE5MDMxNDMzWhcNMjYwMjI2MDMxNDMzWjAYMRYwFAYD
VQQDDA02OTk2ODAxYS0wYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRX8KSM0pwh+Kxsqi5R0IIjU1tDdsNkKpJobNH/GbH6RWtV3NbJC/EIA4Kiz
RA3O+3nu07cBTv6/lhTPOpvy4hgI1B2y2Hu00yPQR5KGcRx9o+ORs+6LSGA6VJtv
9juvNHx00he+Rgkqc0xv2s0GNC5LXvFkJSTnPaSat7n9K0TKpqhM6ukw3DfJhMGq
kidJwR1QVahWbPwbT7ssrWhopZxCOHiqQnrwCnXR6EUi0n3JeQ3TDp7ax27r3KwS
ikyJoSfRaq2XpzshxsS5D3OsYNzs1sLWnzJUok0SF94VWhYRWNNeCdCXrSod70hz
NGmVj3xtLrqyAVqzBdXm9sqpjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPGg2Bm
82QUVSj0W+MAL/o1AnwHMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx
RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO
bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkMoa6f4BLBFBWP+cruM3VCdJOiVdxlCiXEqsq5GP/fiqayN4JfwI+
u3RYA+xYQM3NHDNRkDW0NCfapPv3E83rG7pOOgf5GsCvgY+JhXaZmgg1+elhUXxQ
llkdA0yoCBdFrJiwYJRWShh+zXQGGPQLNSQvW9/duqkR67b0Z+kzwMV3gLQ59H0I
1c9t7QmeH4PCAYdGFCJoy1uL9+36bpFpo4IhvNSf1N4ReMr0WxIwoA56xttu9vvQ
c3BQRkNUH7HPeJSu9DdxO7Lc+Yx4ozxAC4QwniQm+gXUcn9EkaqAZXvccalgXl6+
OgzLaiop7Re2Z7XEhdBSIiZzaIcLv/9v
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:09 2026 by rpki-client