
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json)
Hash identifier: H8HmWaPEw0aevJhKNoRqC9cY1J/M0RhclXyJgBPnb0s=
Subject key identifier: B5:7D:07:F7:DE:0A:1A:F5:CD:A7:5D:8B:62:A2:45:45:4B:38:57:3A
Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
Manifest number: 01B3
Signing time: Thu 19 Feb 2026 02:34:57 +0000
Manifest this update: Thu 19 Feb 2026 02:34:57 +0000
Manifest next update: Thu 26 Feb 2026 02:34:57 +0000
Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: SKNb6K7FNbjyK4Jdemj5sCTbBxGhvv4t4Vl4CZz2tew=)
2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: WlVbAYT9fiHzzxm704tgTYSSn+rIKNtEXDFFKehNTaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl
rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
Validity
Not Before: Feb 19 02:34:57 2026 GMT
Not After : Feb 26 02:34:57 2026 GMT
Subject: CN=699676d1-5f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:d3:42:08:89:fe:5c:a3:f6:a0:51:e3:25:
57:7f:b2:49:af:ee:ca:9e:3e:f4:26:87:f6:75:5f:
ce:5f:b9:ff:92:c3:36:21:a8:c3:89:56:e8:6c:21:
07:29:47:fe:32:c4:8f:76:c0:f8:7b:41:71:6a:f8:
b7:16:e4:b0:5d:bb:7d:78:14:21:3d:95:9a:f9:73:
07:5c:8d:71:d3:dd:be:5a:55:be:08:a2:75:ca:a0:
d4:fe:b7:10:8b:e2:77:6d:44:ba:64:e9:9e:da:8b:
75:f4:18:57:8b:51:64:2c:b2:f0:6e:91:75:ad:8b:
cf:24:d5:ea:b4:8f:0b:a2:c1:d8:21:20:30:b5:c0:
6a:5d:14:c8:c5:be:db:5b:fe:58:fb:b3:6b:de:7e:
46:83:a3:de:ca:db:24:1b:af:30:31:c4:ab:09:f4:
83:30:68:32:28:40:60:61:24:58:a5:8d:e4:49:08:
c4:60:4c:ac:79:03:fa:dc:d5:da:57:08:9e:1e:45:
cc:be:1c:0b:8a:92:7c:ed:fd:ba:5f:f3:16:fc:52:
c3:25:72:76:11:70:be:57:c2:81:51:14:3a:f2:9e:
35:e7:84:b1:99:52:e9:70:fe:cb:84:6b:64:bb:32:
a0:97:b5:a8:41:56:54:4d:05:53:be:25:50:46:09:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:07:F7:DE:0A:1A:F5:CD:A7:5D:8B:62:A2:45:45:4B:38:57:3A
X509v3 Authority Key Identifier:
keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:9b:f5:de:18:e6:d2:9e:a2:6c:b5:5f:24:e1:a8:c1:3e:ab:
b3:cb:3b:0e:0a:0f:10:c3:d4:39:d0:21:ef:e2:60:fd:b6:d1:
3c:32:b3:5f:ad:62:53:75:65:c4:a1:a9:65:5f:fd:c7:cd:9c:
e5:00:ea:a5:20:f6:fc:c7:b9:14:2f:0f:d3:08:23:55:5c:6d:
e2:e2:aa:0e:77:21:61:d3:e9:27:31:3c:eb:5c:4c:a7:ff:9d:
cb:07:3d:85:b9:19:7c:b2:4c:28:d5:75:97:7b:f6:d4:31:b9:
15:ea:c7:c1:4b:91:9a:f7:62:c1:cc:50:f3:fd:f7:65:dd:d1:
a8:f2:4c:3e:2d:97:5c:f0:96:15:5b:a2:b9:79:b0:1e:52:81:
09:ff:0b:20:4f:81:a3:c1:3f:4c:29:2c:d3:cf:3c:2b:f7:ed:
5d:80:31:49:b7:32:8e:1f:b1:dd:fd:9c:42:2f:13:7e:d3:51:
03:1c:9f:eb:44:fa:bc:a1:cb:63:4d:3b:81:70:89:d2:7c:b6:
73:43:a4:02:90:92:27:31:fa:6a:b1:4a:d4:e4:e2:42:98:0d:
d9:c1:5f:c8:50:14:3b:99:ce:34:43:53:42:ee:f0:3e:f2:9d:
6d:44:f7:9b:ee:17:d6:57:7a:55:98:cc:25:28:8a:3b:c4:25:
69:48:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:22 2026 by rpki-client