
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier: mNS/D5ATikm8TnUzYQwE77YU1+27K1zGLiZFpIuExYI=
Subject key identifier: 38:9D:29:7B:71:8E:08:A2:A7:B3:0A:8A:1D:95:6F:84:EC:68:1F:27
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number: E2
Signing time: Thu 19 Feb 2026 04:57:14 +0000
Manifest this update: Thu 19 Feb 2026 04:57:13 +0000
Manifest next update: Thu 26 Feb 2026 04:57:13 +0000
Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: Vs/6bymOnU6hsPxoediseiWeb+gKvyQ1GIF4o+7b5Gk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Validity
Not Before: Feb 19 04:57:13 2026 GMT
Not After : Feb 26 04:57:13 2026 GMT
Subject: CN=6996982a-9365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:44:0e:74:0a:3c:02:7e:06:0a:00:a2:30:
7b:93:6a:dd:d5:9c:78:9a:92:7f:ae:70:90:7c:8f:
23:00:46:3e:45:4e:46:b2:7e:c2:0c:8c:f8:78:f3:
e9:79:4f:11:4a:84:60:b2:b0:57:36:2d:9d:a5:a1:
9e:8a:30:54:25:f6:61:53:70:fd:78:f9:47:b4:ce:
e9:4c:dc:5c:9d:c9:47:f6:95:be:c8:be:cd:65:36:
93:59:52:1b:62:83:a8:1b:a3:c7:63:6b:41:47:a1:
af:8c:84:0a:79:60:54:37:10:10:61:e0:70:5a:9a:
f2:9b:63:00:d2:77:a4:f7:06:62:30:65:28:35:ea:
c8:ba:1a:1b:9f:13:3e:a9:33:60:b3:a9:20:93:e2:
88:78:cb:8b:31:88:85:38:34:1a:2c:be:e0:05:ea:
d0:5b:5b:a4:10:43:3f:99:7b:64:37:c1:14:cd:05:
d8:6b:b1:2e:1e:55:59:78:84:1b:52:9e:48:79:34:
b5:d8:5b:de:e0:cf:4c:24:b1:a3:d5:5f:56:75:ab:
f9:ee:29:bd:f7:92:b4:8f:83:74:c5:30:d8:f7:11:
9b:b3:0e:1b:12:90:e9:af:2f:5f:c3:bf:82:0d:4c:
37:09:c2:7e:48:f7:c6:c7:31:33:1d:b3:42:e3:eb:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:29:7B:71:8E:08:A2:A7:B3:0A:8A:1D:95:6F:84:EC:68:1F:27
X509v3 Authority Key Identifier:
keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ff:96:6c:a0:c1:2d:b8:be:b9:ea:70:3e:63:16:b5:f8:01:
a0:fd:23:c2:9c:a6:51:e6:5c:41:9e:22:f1:ba:5a:0b:aa:b4:
92:06:b0:79:e3:86:af:92:2a:cb:8e:9a:3c:83:54:a9:7f:f2:
be:6a:40:4e:9f:a2:0d:cc:f3:7d:86:9f:3d:33:7a:85:1b:0e:
8f:63:a1:44:1f:ae:16:23:e9:04:65:02:91:18:55:50:fe:33:
6a:84:7e:6b:5b:40:49:a7:ef:5a:9d:43:20:3b:a0:00:03:88:
68:ef:ae:c4:00:7a:6e:e0:a7:df:bc:46:e4:6a:d0:db:7c:79:
3f:49:91:68:3b:4b:c1:c5:55:3a:05:fa:9b:75:a9:29:62:aa:
c4:aa:14:33:49:9c:ba:be:a5:2a:ec:58:6a:ec:71:0a:a6:92:
8f:ce:cb:a7:f7:0e:63:1f:71:8e:88:e6:0d:b2:48:cc:68:2e:
34:c0:20:e9:e8:d3:e1:95:3c:5b:65:fd:5b:1d:16:e7:b9:3b:
33:c5:70:60:f7:f6:14:48:1f:96:f8:5f:da:c6:2d:1e:8a:19:
82:b6:d9:ce:ed:79:32:5e:ba:ce:ac:ef:37:ad:57:5b:7b:55:
05:0a:42:07:aa:3c:3b:16:d8:a3:2b:89:d6:42:8c:cc:34:50:
b4:17:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:03:15 2026 by rpki-client