
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier: cMSP71VRBgilprV0OqXbw+yyTx7dkxq49XNcBcs5F9g=
Subject key identifier: 7D:21:B4:48:A8:A5:D8:EF:15:23:9D:10:B1:E2:EB:BF:41:DF:CA:EA
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 071F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number: 070B
Signing time: Wed 18 Feb 2026 21:20:10 +0000
Manifest this update: Wed 18 Feb 2026 21:20:09 +0000
Manifest next update: Wed 25 Feb 2026 21:20:09 +0000
Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: Z7TXW5Jm0ia09qdVH4PyXfpc5d8IR9n34c2ps0JhbG8=)
2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: wKKFIbG6rZYzWOquPQsQVLcMaVWXvSfOn3rpMeiquU4=)
3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: 0UszszQSlIl4E2WZV6BiPk26HX6TF60w5QFwSAW1SPk=)
4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: IAiqZ7+h+k8237T4xv3w1ZM4/F+z2G79r7OGY4bCxVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Feb 18 21:20:09 2026 GMT
Not After : Feb 25 21:20:09 2026 GMT
Subject: CN=69962d0a-f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:5c:9c:23:39:49:70:57:1f:0c:28:df:7f:
b7:56:1a:cd:c3:a2:e9:b7:be:a1:d2:8a:78:61:57:
09:75:93:92:3d:d5:c5:8e:cc:75:fd:54:b8:dd:7e:
6b:74:8a:d5:3b:a0:1e:6b:15:98:13:36:a5:13:50:
18:07:0e:df:5c:92:3f:f4:97:53:58:c1:09:18:87:
38:e3:ae:03:06:ac:6a:0b:05:19:09:55:61:55:76:
85:75:1d:b5:57:c1:83:69:ec:e9:ec:e0:3c:73:41:
cc:2a:98:b5:3a:46:22:ac:f9:e9:db:25:35:73:24:
a2:ef:42:3b:7e:63:d2:ea:3d:23:f2:af:f2:84:7c:
8d:90:a9:7a:b2:09:88:5a:e7:f4:26:c6:42:e9:47:
93:fe:35:d2:05:ca:27:c3:38:65:dd:71:0a:36:11:
6c:08:22:4f:14:a3:5d:5b:2b:b1:96:65:a2:7e:e3:
51:19:a9:90:6e:66:4d:72:be:93:fc:86:28:61:a9:
9b:2c:0e:c7:88:c5:0d:12:04:83:8b:bd:f7:41:c5:
a4:e6:27:b7:f5:3d:da:7d:cb:c2:e4:66:2b:53:16:
6d:5b:6a:7e:14:ad:d8:99:3e:77:82:2b:68:d4:d2:
d2:8d:ec:fa:8a:c2:a1:8b:97:c6:b0:1c:c4:d9:3d:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:B4:48:A8:A5:D8:EF:15:23:9D:10:B1:E2:EB:BF:41:DF:CA:EA
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:99:86:78:7e:79:22:2f:05:a9:ca:77:b2:83:6a:0c:56:
88:16:01:56:e6:a0:06:e2:e8:de:57:86:a9:7a:94:c6:64:16:
e2:84:bc:70:0f:aa:d9:03:f3:4d:88:7f:dc:e2:f7:6a:d0:f6:
ad:20:8f:ea:9a:54:b1:5a:d3:9f:72:22:54:fa:d8:16:e9:bf:
ce:4e:ff:f2:e9:01:2f:7f:c4:a5:c0:5d:f6:52:08:7f:2d:a6:
6d:02:c4:6e:3c:69:2a:26:8a:c0:e0:ec:63:d4:6c:ea:2f:4f:
02:dc:a0:4f:40:6f:ce:2d:44:5f:d4:68:45:66:ef:65:ba:ec:
00:6e:72:86:72:11:40:fb:11:2e:b5:71:4f:ac:c7:e4:cd:6b:
8b:a5:80:95:95:05:19:fa:6a:04:85:31:db:79:91:a2:97:d3:
f1:b1:00:fa:aa:c6:af:ac:f3:9f:bf:ec:30:a0:bf:68:df:26:
1b:d4:ad:8c:69:97:2f:40:16:b9:12:eb:be:d8:c8:6d:44:7c:
a0:d4:5f:21:f3:cd:48:63:ae:0d:27:d4:91:3b:f5:0a:53:b8:
6f:04:1b:09:c4:66:a9:10:d7:ba:f1:f2:b8:09:16:94:6c:e5:
6c:2f:de:17:c9:24:16:13:3f:13:5c:97:8a:e7:7f:e0:63:bd:
a4:a1:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:09 2026 by rpki-client