
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json)
Hash identifier: 3kCJsnOqJFPKIr2dKt6hvEOw8gcK6Xk4k1hwwU88ah0=
Subject key identifier: 33:09:19:C9:8E:93:3D:CD:FE:46:81:1E:2D:FB:0A:7D:72:BF:D1:95
Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
Manifest number: 026A
Signing time: Thu 19 Feb 2026 00:54:59 +0000
Manifest this update: Thu 19 Feb 2026 00:54:59 +0000
Manifest next update: Thu 26 Feb 2026 00:54:59 +0000
Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: tFA13aKU3POUOD4K4npZ+WBhLhCWDQ4rWPeQY5fjhvU=)
2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: ZpY5uVJsDRZvPgiSn1Kdljo0flynJ5D6xaJCE0zJJng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Validity
Not Before: Feb 19 00:54:59 2026 GMT
Not After : Feb 26 00:54:59 2026 GMT
Subject: CN=69965f63-9867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:eb:ab:17:c5:05:c1:f2:83:a0:6d:d5:b6:
5a:47:cb:b9:e0:1d:7c:c5:1c:c4:0b:ff:fb:e6:50:
54:69:88:52:7a:b9:c2:2d:73:dd:16:7f:d0:d6:6a:
4c:5f:6a:93:3d:f1:fa:39:f4:43:34:19:3b:8f:f8:
a4:4f:8a:d1:87:74:97:9d:5c:71:ba:68:22:62:79:
47:93:61:18:b5:94:65:80:7b:8a:cf:d1:c4:96:8f:
95:79:c4:0e:55:87:1d:39:6b:9f:3d:07:e1:7d:d2:
58:3d:6e:b1:78:95:e5:72:6b:66:9c:48:a9:53:72:
2a:60:b6:38:0a:9c:34:63:05:58:dd:10:8d:ad:f1:
7d:23:ac:1e:bf:85:28:03:25:9c:79:bd:42:d5:14:
e9:17:ee:9a:f5:e8:ac:75:2c:29:b5:31:ad:c7:28:
bb:e2:e3:c2:6a:2e:cc:91:d4:06:a2:5a:d6:3d:c2:
e9:4e:0f:23:85:13:71:40:d6:70:a0:6e:35:1c:a4:
1d:bf:bf:85:c3:3a:bb:12:28:8c:a0:de:00:7f:94:
ad:00:b9:d9:5c:26:b3:c1:8f:bb:03:2f:d2:f8:a8:
6a:c5:69:0c:cb:58:28:6e:1a:ee:d9:b6:90:27:82:
35:47:5b:5e:b1:44:6f:57:e2:17:55:9e:3c:a7:0c:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:19:C9:8E:93:3D:CD:FE:46:81:1E:2D:FB:0A:7D:72:BF:D1:95
X509v3 Authority Key Identifier:
keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6c:a4:16:52:3f:6a:d3:93:a3:46:96:d9:4c:cb:f6:dd:6d:
40:27:ff:62:88:a9:5c:90:49:71:dd:6e:f3:9b:18:d2:7d:ed:
3b:e4:3d:96:15:fb:58:7a:52:6b:3b:29:63:37:8e:74:c1:a9:
6f:07:07:ed:29:fc:2d:81:29:15:f8:27:9a:2d:7d:97:ae:29:
fa:9b:98:5c:da:e4:28:f1:01:ce:cd:60:24:d7:70:31:63:a5:
74:a5:73:3b:28:05:50:87:fd:46:a6:71:47:ac:c3:14:b6:c9:
2a:d4:32:39:9f:b7:13:76:7f:68:68:60:18:30:6f:01:9a:fe:
c1:71:c3:bb:64:cb:3a:c9:46:7b:69:b3:f4:95:bb:b0:a3:c9:
de:d0:4b:b5:47:2b:3f:f2:10:2b:26:3d:1c:ae:2a:7b:37:95:
77:2e:d2:d8:ee:5f:4a:e3:23:03:9d:f9:bc:f2:dc:0a:69:e0:
57:d3:b4:aa:32:09:ee:3c:7f:2a:f8:ca:47:5f:46:4b:7c:60:
31:11:3d:60:38:c6:06:75:0d:95:d0:03:a3:dc:1b:4a:99:a4:
a6:56:a3:54:05:96:64:d6:da:f9:85:ae:0e:c9:69:b4:03:0a:
5c:64:35:93:54:4c:32:77:43:00:3d:36:19:dc:35:84:6b:88:
89:29:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:18:08 2026 by rpki-client