
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier: EfAUujgotR0efU63gmLcXLVlbSszgbxu+T4oepyS8n4=
Subject key identifier: F4:1F:83:43:7D:65:77:C1:C0:20:50:3B:CD:38:E2:4E:C9:68:11:42
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number: 89
Signing time: Thu 19 Feb 2026 05:54:51 +0000
Manifest this update: Thu 19 Feb 2026 05:54:50 +0000
Manifest next update: Thu 26 Feb 2026 05:54:50 +0000
Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: jMP7XnRZyaxSMQgYqjqO/pbm09hKH92by+YmOIb4zF0=)
2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Validity
Not Before: Feb 19 05:54:50 2026 GMT
Not After : Feb 26 05:54:50 2026 GMT
Subject: CN=6996a5ab-3b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:fe:62:98:c1:25:5c:9c:fe:be:10:ac:1c:
ed:bf:80:66:19:17:59:ac:c1:ba:49:d5:ee:b7:63:
f9:51:48:fb:e8:ca:68:37:ae:08:a3:7b:c2:da:e6:
94:20:9d:06:38:ef:8d:8b:72:fd:3f:0d:36:3e:31:
2b:f1:d0:70:e4:78:f7:94:f6:a2:86:d6:c1:71:14:
d3:37:39:58:dc:05:70:d2:2b:24:ef:86:8d:42:4f:
e2:7d:41:cd:f1:8d:fd:9e:6d:8a:35:b3:ee:ca:36:
fe:24:48:f3:11:84:45:55:31:13:3b:20:a5:e7:22:
49:73:fd:67:77:78:4e:d0:b1:b6:9e:98:0f:36:20:
71:df:e7:bb:83:5b:b2:db:37:29:50:ab:59:49:88:
d9:61:68:92:1b:ae:e4:99:0e:d0:f7:32:e3:9a:3b:
7b:ef:17:f1:9f:5f:8f:90:14:9a:93:56:23:42:59:
8a:52:ec:8a:d0:50:24:24:72:a5:cd:b4:5e:64:c3:
f0:1d:99:bc:c5:cd:ef:10:a1:cf:34:5b:2c:18:3e:
8b:08:81:5d:31:2f:6d:99:f4:f8:d6:3d:64:6b:f0:
86:cd:aa:a1:7e:9e:8e:69:26:2e:66:e9:13:6f:30:
13:32:7e:64:b3:d1:32:5d:27:ad:40:22:fc:37:b3:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:83:43:7D:65:77:C1:C0:20:50:3B:CD:38:E2:4E:C9:68:11:42
X509v3 Authority Key Identifier:
keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:94:60:a3:88:3f:45:61:7e:f3:9e:7e:ad:7f:8a:b9:36:6e:
a7:f9:89:47:b9:f4:a9:61:3d:5c:bd:77:f6:1c:c9:6a:9e:ba:
1d:f2:6e:99:42:ad:d8:35:00:e4:2d:d1:72:bc:f5:42:91:9e:
1a:9a:e4:ef:ac:79:1d:02:0b:b0:e4:2a:44:fb:24:53:09:ea:
0c:3b:64:41:4b:e8:8c:dd:fd:85:39:54:8b:63:84:36:2a:c0:
3e:c3:8e:00:03:99:f2:a2:58:2f:cd:c6:1c:6a:79:3a:fa:73:
58:66:e4:0a:fc:e7:5a:8a:e7:d0:bd:42:9d:0c:60:1f:f4:84:
02:5b:25:69:5d:f0:df:a3:41:8b:0f:44:0b:e5:7a:9c:e4:ec:
bf:81:7a:d7:86:2a:ef:db:dd:c8:15:ac:c0:4d:1e:af:c4:d7:
e2:2f:ea:b3:95:d3:68:d1:e1:e9:e8:3c:55:33:61:e1:15:09:
9b:0c:e8:60:f0:1a:a1:24:64:5c:d9:b4:84:c8:b2:90:4d:58:
14:79:44:e5:f7:ab:dd:8c:37:57:48:1f:3d:2b:c8:65:81:67:
14:58:29:b8:f1:f9:9f:ec:30:d6:40:09:58:c3:dc:25:e2:03:
2b:fd:d3:f1:0b:6f:2e:0b:ca:a7:49:a8:8f:03:57:c6:17:79:
ed:10:ec:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0
NUU4MENCQjYwHhcNMjYwMjE5MDU1NDUwWhcNMjYwMjI2MDU1NDUwWjAYMRYwFAYD
VQQDDA02OTk2YTVhYi0zYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVP+YpjBJVyc/r4QrBztv4BmGRdZrMG6SdXut2P5UUj76MpoN64Io3vC2uaU
IJ0GOO+Ni3L9Pw02PjEr8dBw5Hj3lPaihtbBcRTTNzlY3AVw0isk74aNQk/ifUHN
8Y39nm2KNbPuyjb+JEjzEYRFVTETOyCl5yJJc/1nd3hO0LG2npgPNiBx3+e7g1uy
2zcpUKtZSYjZYWiSG67kmQ7Q9zLjmjt77xfxn1+PkBSak1YjQlmKUuyK0FAkJHKl
zbReZMPwHZm8xc3vEKHPNFssGD6LCIFdMS9tmfT41j1ka/CGzaqhfp6OaSYuZukT
bzATMn5ks9EyXSetQCL8N7N7jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQfg0N9
ZXfBwCBQO8044k7JaBFCMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC
NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6
UHRUOHFvMGlnRjFGNkF5N1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDalGCjiD9FYX7znn6tf4q5Nm6n+YlHufSpYT1cvXf2HMlqnrod8m6Z
Qq3YNQDkLdFyvPVCkZ4amuTvrHkdAguw5CpE+yRTCeoMO2RBS+iM3f2FOVSLY4Q2
KsA+w44AA5nyolgvzcYcank6+nNYZuQK/OdaiufQvUKdDGAf9IQCWyVpXfDfo0GL
D0QL5Xqc5Oy/gXrXhirv293IFazATR6vxNfiL+qzldNo0eHp6DxVM2HhFQmbDOhg
8BqhJGRc2bSEyLKQTVgUeUTl96vdjDdXSB89K8hlgWcUWCm48fmf7DDWQAlYw9wl
4gMr/dPxC28uC8qnSaiPA1fGF3ntEOyX
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:27 2026 by rpki-client