
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json)
Hash identifier: v7PrS2bMHX03OS9jUpm8whjazvHRPIQ0vGU8SG+aqzw=
Subject key identifier: 21:B8:EA:21:6F:F7:36:B1:59:33:44:83:FF:A8:DF:4D:F8:1F:A6:61
Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
Manifest number: 027E
Signing time: Thu 19 Feb 2026 00:44:19 +0000
Manifest this update: Thu 19 Feb 2026 00:44:19 +0000
Manifest next update: Thu 26 Feb 2026 00:44:19 +0000
Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: 3WC2p8W6xtjzsqDtdX0BIefZZMcYpegg7bKVDjj9bHk=)
2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: tO/Vg+1jM6TnaROUPSYxvRElxqw/2z5ZN8ZDcSK7tnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Validity
Not Before: Feb 19 00:44:19 2026 GMT
Not After : Feb 26 00:44:19 2026 GMT
Subject: CN=69965ce3-6f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:97:f8:9d:8e:58:ca:67:59:3b:97:36:6d:
b3:86:ba:e3:fa:7a:0b:75:27:63:fc:38:6a:3c:2c:
4e:04:2b:f7:61:26:3c:32:91:49:fd:18:13:8c:c6:
6b:a9:e2:60:be:b1:79:3a:0b:41:1d:b3:c6:18:e5:
9c:e1:98:16:46:c6:f4:df:ce:38:20:6b:f1:02:08:
e0:01:01:49:cf:16:9f:06:e5:97:83:07:9d:38:f9:
d3:ae:15:a7:e5:39:dc:a3:4f:ba:ac:46:95:bc:5d:
25:8e:0a:03:d4:e5:83:d2:84:cb:aa:52:e4:d8:33:
af:6a:f7:96:95:fe:5a:4d:04:7b:ac:35:c1:d8:74:
16:15:52:75:3e:2f:02:17:0b:9a:f5:50:4e:2c:e1:
20:e0:59:11:68:b5:60:96:9d:30:93:05:8d:ac:fe:
89:c7:e4:05:ae:26:1a:bb:3d:26:1b:23:b3:61:eb:
13:8e:52:b8:ca:24:d2:3e:93:3b:7b:57:3b:d1:41:
9f:88:a8:23:fd:45:2d:b9:25:ff:b2:58:e4:87:7a:
7a:09:c7:4b:b1:36:b2:81:88:df:45:a1:61:ad:9d:
03:7e:65:2c:d7:e2:81:ae:91:e9:ad:e9:09:69:94:
c7:0c:15:5c:5c:5b:b5:7b:9c:34:50:83:6d:db:e0:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:EA:21:6F:F7:36:B1:59:33:44:83:FF:A8:DF:4D:F8:1F:A6:61
X509v3 Authority Key Identifier:
keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:62:e8:3e:19:5d:f7:a1:a9:66:e1:b7:ec:bd:0e:2e:67:3d:
4d:1e:80:ad:05:6a:25:bf:79:03:22:d9:2c:a6:d7:88:10:4f:
6a:e2:ca:d7:42:14:8f:d2:c5:63:4f:18:c3:79:58:66:91:03:
7a:50:92:81:ae:df:57:f4:b4:69:7e:d2:81:32:36:24:9b:7a:
22:5d:f7:60:8d:32:60:2b:89:2a:51:dc:07:28:0c:52:9c:6d:
30:d0:42:e4:9f:3e:97:42:c6:a8:bc:3e:51:b6:d3:93:29:d2:
2f:17:e5:19:43:24:37:00:cf:19:42:a8:74:36:bf:a0:b1:bc:
37:1d:a6:1a:8f:49:4f:9c:9d:a1:77:c6:8b:f0:c6:7c:0f:40:
8f:72:55:e4:d2:4c:a6:be:76:5f:4f:0a:84:7a:56:e1:b4:22:
e5:46:9c:d8:c6:32:82:25:9f:3f:e7:e3:77:33:1c:28:9f:87:
4c:a9:6c:3b:57:e8:1d:7e:e9:10:34:bd:ca:1b:65:38:96:64:
9d:08:1d:11:80:8b:c9:1e:7f:04:83:6f:d7:00:df:c6:d0:45:
7e:f4:78:f9:69:4f:93:93:c0:71:cb:84:6d:67:6f:81:16:39:
41:e2:c2:41:f1:75:46:dc:b6:83:f5:0d:b1:0b:97:fb:5a:8e:
fc:de:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:32 2026 by rpki-client