
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: b6nBnh/zEQY6yUA9vcq79DiHINRLKFHvIbucwVau3xc=
Subject key identifier: AA:3C:7C:1B:12:2F:CE:59:81:B1:9C:C9:B9:06:90:FE:AB:CE:7C:8C
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 01E2
Signing time: Thu 19 Feb 2026 02:07:00 +0000
Manifest this update: Thu 19 Feb 2026 02:06:59 +0000
Manifest next update: Thu 26 Feb 2026 02:06:59 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: A8TDc58AmFmVoGz2xjUOns6Wu9h2/aTT2w68FkZkeh8=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: OGHGgQb+3PBwou4AsZu2wzKOHXe+QeebDoI1v2VznA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Feb 19 02:06:59 2026 GMT
Not After : Feb 26 02:06:59 2026 GMT
Subject: CN=69967044-e133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:38:92:e6:16:21:45:4a:3b:00:db:78:db:
91:1b:12:91:02:21:ec:d4:9e:7c:a9:9b:b8:68:88:
04:21:fd:d5:59:ca:04:12:96:72:b1:48:6a:11:47:
28:e4:32:ee:f6:0c:b5:91:de:b5:30:10:d0:32:5d:
b3:a4:c9:26:bf:53:9e:98:6f:89:f0:8d:66:03:1a:
91:c3:ec:f7:39:9b:8b:1e:00:f8:e8:e0:13:bb:f3:
d9:8b:ab:96:19:aa:b6:99:ec:20:55:ec:3e:11:e4:
01:01:0d:36:4f:21:46:51:a7:e1:d2:ad:bb:54:9b:
6f:92:6f:06:58:a6:20:58:25:9c:24:f3:31:b5:cb:
70:31:3a:fc:73:c4:be:b7:87:dc:a0:d8:4e:05:f8:
95:9c:8c:f9:c5:33:9d:63:5d:e9:55:e1:ba:c8:40:
4d:31:16:84:5d:80:c9:b2:39:84:b4:91:3d:71:d5:
a1:86:31:19:e3:89:5c:16:a7:2e:18:57:c9:64:8c:
fe:e1:48:3c:f2:3c:b2:c1:79:9e:32:c6:d5:18:f0:
2e:42:b9:3b:f1:fa:74:e4:5b:7d:ca:dc:c0:12:64:
09:aa:01:4a:cb:da:a8:58:1b:02:a6:07:3f:91:75:
99:8a:ed:40:7a:95:dd:0f:c9:d4:2e:09:de:77:18:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:7C:1B:12:2F:CE:59:81:B1:9C:C9:B9:06:90:FE:AB:CE:7C:8C
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:bf:d7:af:4d:3a:a7:47:29:c3:1a:3d:f2:be:25:bb:7d:
3f:57:70:68:99:2e:c4:fd:e6:b2:0a:fc:2e:0c:17:e3:78:45:
a3:14:c3:ce:1d:e2:f8:5b:6d:6a:54:5e:c3:13:e9:32:09:a4:
5d:fb:67:eb:5b:dd:13:3e:a4:9a:a9:d0:02:34:b8:00:6e:70:
57:a9:b4:57:02:62:66:31:38:d4:9b:38:e2:a7:28:61:89:09:
9f:95:a6:98:4b:b2:a1:e1:e1:e5:f5:45:51:30:13:a5:e0:58:
14:78:a1:cf:52:e8:1f:0a:ca:1f:9b:d3:71:92:2a:51:56:4b:
a2:08:7e:48:f8:9a:8f:7d:91:f2:f5:79:dd:e6:9c:16:8c:e9:
15:00:ee:99:0a:ad:c9:2e:63:55:ca:73:b3:d1:0f:db:81:49:
da:4c:24:5f:e4:f4:20:d3:21:0a:f6:dc:ac:10:86:0f:ec:8f:
4b:cc:1d:5e:54:33:4b:ce:4c:42:11:9b:e2:cc:a2:34:af:c7:
26:95:5e:56:67:4b:da:b9:93:27:0d:49:ba:1b:3f:dd:19:e4:
af:5a:c6:d2:ad:14:05:b9:80:2d:63:35:08:9d:74:86:c1:95:
48:e1:cf:d3:77:03:ab:41:57:d9:23:6f:6c:41:0b:70:6f:43:
82:80:1d:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND
OEJGREEwRTcwHhcNMjYwMjE5MDIwNjU5WhcNMjYwMjI2MDIwNjU5WjAYMRYwFAYD
VQQDDA02OTk2NzA0NC1lMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSI4kuYWIUVKOwDbeNuRGxKRAiHs1J58qZu4aIgEIf3VWcoEEpZysUhqEUco
5DLu9gy1kd61MBDQMl2zpMkmv1OemG+J8I1mAxqRw+z3OZuLHgD46OATu/PZi6uW
Gaq2mewgVew+EeQBAQ02TyFGUafh0q27VJtvkm8GWKYgWCWcJPMxtctwMTr8c8S+
t4fcoNhOBfiVnIz5xTOdY13pVeG6yEBNMRaEXYDJsjmEtJE9cdWhhjEZ44lcFqcu
GFfJZIz+4Ug88jyywXmeMsbVGPAuQrk78fp05Ft9ytzAEmQJqgFKy9qoWBsCpgc/
kXWZiu1AepXdD8nULgnedxiksQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo8fBsS
L85ZgbGcybkGkP6rznyMMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG
NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du
MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZK7/Xr006p0cpwxo98r4lu30/V3BomS7E/eayCvwuDBfjeEWjFMPO
HeL4W21qVF7DE+kyCaRd+2frW90TPqSaqdACNLgAbnBXqbRXAmJmMTjUmzjipyhh
iQmflaaYS7Kh4eHl9UVRMBOl4FgUeKHPUugfCsofm9NxkipRVkuiCH5I+JqPfZHy
9Xnd5pwWjOkVAO6ZCq3JLmNVynOz0Q/bgUnaTCRf5PQg0yEK9tysEIYP7I9LzB1e
VDNLzkxCEZvizKI0r8cmlV5WZ0vauZMnDUm6Gz/dGeSvWsbSrRQFuYAtYzUInXSG
wZVI4c/TdwOrQVfZI29sQQtwb0OCgB3I
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:00 2026 by rpki-client