
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json)
Hash identifier: Lftakt84PA7jKuhw6+okyqTPHsZVxZL3FFJ0O10YWvU=
Subject key identifier: 0C:8A:D6:8B:0E:32:34:C9:5F:1E:5C:77:B9:88:BD:58:1E:D3:80:6C
Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
Manifest number: 0157
Signing time: Thu 19 Feb 2026 03:32:01 +0000
Manifest this update: Thu 19 Feb 2026 03:32:01 +0000
Manifest next update: Thu 26 Feb 2026 03:32:01 +0000
Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: Skk4VETuSL+HXfWQQtWxVncZEz6uGLl0+Q9xZNPkKQw=)
2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: rdcsVeSD/0uRXsupB+gdsyd8ZZ4QY82jQKGKV8TuBBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Validity
Not Before: Feb 19 03:32:01 2026 GMT
Not After : Feb 26 03:32:01 2026 GMT
Subject: CN=69968431-6440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:68:13:3e:5d:b1:2c:93:48:ec:34:b2:ba:
c5:1f:f7:14:77:3f:00:18:15:72:e6:d3:66:cb:f4:
d7:67:a6:71:18:d2:16:34:b3:20:d9:a1:a2:b8:d1:
3d:88:0f:04:80:c6:7c:02:54:9e:7b:0e:df:b2:e4:
76:aa:30:33:13:b0:8a:45:58:89:69:c6:8a:ff:8d:
21:11:71:8b:01:76:95:9f:55:c7:74:39:d6:86:37:
0e:1f:bf:81:15:81:6d:4c:61:af:ac:fd:4e:70:0f:
1a:38:ee:99:28:0e:40:a9:e0:1b:31:1b:1e:ca:d8:
55:fd:1d:8c:8f:f9:5f:8c:07:7b:a6:9c:2c:d0:6b:
af:b9:bf:8a:c6:b4:b0:36:0c:1d:59:50:a2:3b:b7:
8e:90:51:5f:9c:51:2d:08:23:75:e4:64:5b:1c:78:
ae:39:eb:e0:cd:8a:09:4b:28:4a:11:23:0e:98:ae:
47:50:99:5d:c9:8d:c5:f9:95:e2:28:f4:82:b2:1c:
b8:f9:03:35:b9:6a:3a:1b:5e:cf:7c:40:5b:92:c0:
70:34:7e:a2:79:ed:62:66:3d:8a:c9:e0:90:18:5d:
fe:63:3f:53:dc:90:e4:04:90:68:96:8d:5e:5a:0e:
7c:cb:21:8c:f5:ef:74:91:8d:eb:e3:e3:b6:23:dd:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:D6:8B:0E:32:34:C9:5F:1E:5C:77:B9:88:BD:58:1E:D3:80:6C
X509v3 Authority Key Identifier:
keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:79:ce:a3:8a:54:e3:eb:95:2b:f0:c3:d8:8e:06:94:09:
99:02:c4:4c:ca:3b:4c:cd:13:2e:8d:79:e3:3a:9d:40:99:4a:
8e:06:38:9f:c4:b7:cf:e2:dd:02:b4:f0:be:83:4e:56:e4:2d:
0e:9e:08:c9:2f:00:88:e9:30:28:b2:9a:4e:01:8d:c0:ce:70:
13:af:0e:8a:2e:a6:34:d5:7d:d5:42:81:15:a4:68:a7:bd:ba:
21:2d:a3:5a:27:cf:e8:d7:fd:db:92:26:eb:36:32:ca:78:fa:
03:7a:e7:ca:bd:7e:05:0e:20:e6:32:df:88:d6:f5:3e:e7:a8:
d4:fd:c4:f5:c5:59:e3:05:58:60:59:fc:2e:ac:e6:35:9d:88:
b7:d7:8a:df:e3:68:8f:3c:8d:c4:a8:70:1f:95:e1:a0:ae:59:
b4:f2:52:52:8b:64:46:3a:96:07:34:60:b2:40:31:01:52:78:
45:88:83:59:62:d3:09:5a:03:fc:21:02:cc:ce:8b:9f:17:cc:
8c:38:bc:a4:f1:1d:45:34:5a:f5:79:32:fe:4e:b3:29:32:8f:
4d:b4:11:55:f8:3f:56:31:c0:63:ca:8f:c4:25:0b:ac:26:36:
6b:37:14:2c:d6:63:9f:02:1b:18:b9:a1:c6:d3:f6:fe:50:06:
6b:8b:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:37 2026 by rpki-client