
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json)
Hash identifier: ohVXnKcLQfZ0C4jbwXIrF9NV6c/fgLvtjiU59AnjvNM=
Subject key identifier: 8A:1F:61:66:02:FE:66:00:A9:C6:F6:47:80:5B:0A:50:32:E0:90:5D
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1703
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
Manifest number: 16CE
Signing time: Fri 20 Feb 2026 16:27:07 +0000
Manifest this update: Fri 20 Feb 2026 16:27:07 +0000
Manifest next update: Fri 27 Feb 2026 16:27:07 +0000
Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: 9o+K5x9Fqea/0kpXb+7K4NzxHDOVLtq0S3rR+uWEBzI=)
2: A923DDA2BE0211F090AD9F13C4F9AE02.roa (hash: rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=)
3: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=)
4: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: wdVUeFPPp5Pt9fuTweBdrE45i6lKsYNin+xhFp9XCWU=)
5: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=)
6: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: USmtuTTmRco0BEBl+7v5NzI0IPVnUkLZyU5TqgVNBVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Feb 2026 16:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5891 (0x1703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Feb 20 16:27:07 2026 GMT
Not After : Feb 27 16:27:07 2026 GMT
Subject: CN=69988b5b-9e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:53:a3:d6:f8:05:a7:c5:88:08:fc:0e:52:
10:b6:5a:41:d0:41:d2:88:22:09:83:59:c2:27:69:
6f:67:28:c3:0e:e7:bf:e1:f0:d9:53:bc:97:56:b0:
97:52:7b:01:77:e7:49:cb:b9:4e:99:bc:a5:3f:c7:
5a:00:0d:ef:bf:51:78:09:16:96:ea:a4:06:7d:3e:
4b:94:3b:b3:23:19:35:a0:f2:1c:ba:3c:14:e6:8f:
4b:a1:c8:fc:4b:f2:a1:52:83:a5:d2:0f:dc:c3:50:
d6:68:a3:a4:ab:76:38:a5:52:78:97:d3:81:02:d2:
eb:1d:2a:d1:eb:eb:75:72:9a:9c:e5:97:dc:18:90:
f2:d4:95:a4:33:76:ed:db:86:62:8a:0b:e4:32:93:
10:fc:1f:5a:94:e9:f4:cd:a6:01:19:23:00:30:19:
99:41:55:df:f9:4c:a2:7d:8e:be:97:7c:08:9d:ad:
a9:9e:dd:5f:dd:e6:6b:43:5a:ee:f8:5a:44:62:36:
de:a6:c3:f9:f6:31:04:5a:8f:a9:97:52:e7:27:0c:
49:4f:31:46:93:7f:72:5b:cb:48:74:0d:ca:03:56:
aa:01:5e:ef:5f:a8:38:21:98:3a:e8:2b:91:ac:2a:
2f:b0:ac:f7:37:b8:b1:00:eb:18:36:c5:f3:3a:21:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:61:66:02:FE:66:00:A9:C6:F6:47:80:5B:0A:50:32:E0:90:5D
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:8b:79:07:50:d3:be:9c:ae:25:49:09:cc:a4:49:f9:5b:
e0:53:3f:14:ec:5b:e8:24:cb:5e:eb:25:56:cc:bd:d5:7b:98:
4b:5b:99:9e:d6:7d:7c:74:30:66:91:fb:15:e2:8e:8a:11:9e:
de:1b:ca:38:08:7a:45:69:2e:49:7b:e7:16:3e:9b:74:92:5e:
d4:38:5a:12:a5:a6:e1:20:5c:86:d4:b1:3f:70:26:b1:33:87:
4e:db:2a:35:77:0a:1e:f4:f9:fb:bf:2a:a4:21:1f:c8:de:5a:
95:11:fc:d3:f9:c0:48:42:55:4b:68:99:87:85:03:0e:58:ad:
e2:5a:28:fc:9b:88:5f:83:4f:0f:c6:67:c3:84:1f:38:9c:bd:
f7:05:4c:b0:ce:3f:29:b4:ac:3b:29:f2:84:15:c3:9e:6b:f2:
51:b6:6a:59:ac:67:c4:77:c0:3a:75:ff:03:e6:9d:86:51:ef:
e9:05:8e:79:88:c4:b9:81:98:2b:98:56:70:a2:11:4a:07:61:
c6:ec:4c:55:50:1e:10:ca:92:8c:3b:a7:46:0a:77:53:cf:ec:
bf:92:b9:83:b3:3e:62:35:47:13:87:ee:3c:77:e0:69:80:ce:
ee:fb:9c:f6:e0:7f:59:f0:f0:2d:18:62:00:b2:ea:9c:27:0f:
89:89:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 05:13:26 2026 by rpki-client