
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier: dv2FLRERAreFT1unoNclC8F8i2tfpwwMDMU3W8LFdjE=
Subject key identifier: E9:CA:A2:74:E3:94:0B:BD:C8:13:5D:C8:F6:B5:F0:A6:5E:B8:33:97
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial: 1651
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number: 1648
Signing time: Wed 18 Feb 2026 16:30:00 +0000
Manifest this update: Wed 18 Feb 2026 16:29:59 +0000
Manifest next update: Wed 25 Feb 2026 16:29:59 +0000
Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: vHDlIRF2kxjZLIaqMcFIKjLAUAJu/hk1Y+Va0gEWMnA=)
2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: yneq3VCU0xUuuWqz2yd6YieZf1M20T8Wk5aQncEi7bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5713 (0x1651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Validity
Not Before: Feb 18 16:29:59 2026 GMT
Not After : Feb 25 16:29:59 2026 GMT
Subject: CN=6995e908-0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:75:4e:c0:33:b7:5b:5b:28:1d:f7:25:5a:
1a:56:0b:27:fd:1e:e2:11:90:12:a7:17:02:9a:57:
dd:85:f8:92:b3:c3:3c:a9:6a:30:71:8c:52:3e:1c:
d8:9a:ba:c6:68:d4:77:1a:fd:d4:65:35:1a:02:2f:
c4:c3:a6:17:70:87:f8:2a:82:f8:4f:a1:52:2d:ac:
e6:ea:9e:44:6a:1f:46:86:3a:dc:9e:d5:e0:d6:c7:
06:2f:71:4c:c0:b7:c9:1c:48:b1:b3:03:21:8e:ea:
aa:f0:a2:0d:1c:85:9c:aa:e0:88:69:5a:2a:2c:ba:
e6:71:a2:77:3c:31:09:a6:f7:b8:c2:fe:8a:87:13:
6a:95:93:eb:17:bb:92:f4:17:ee:c8:b3:b1:00:1a:
e7:d9:88:0b:67:ba:f0:ff:a4:6d:ba:ee:8d:f1:a6:
e9:21:a3:f8:3f:40:f1:78:64:75:e1:1e:8e:e8:7c:
72:f8:c9:9c:47:af:ab:9a:9f:83:b2:73:f8:d3:87:
19:85:87:f1:85:53:c4:a0:fc:d7:ce:30:f7:cb:d2:
bb:51:b2:7a:f2:f7:ee:7c:73:4d:21:e1:46:da:81:
39:75:2d:54:83:dd:a4:4c:be:03:25:17:e2:72:71:
5e:1b:19:f2:93:b8:55:a1:d2:80:d9:d3:7f:9d:53:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CA:A2:74:E3:94:0B:BD:C8:13:5D:C8:F6:B5:F0:A6:5E:B8:33:97
X509v3 Authority Key Identifier:
keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:f8:5e:00:c2:ed:0c:d2:b4:93:93:49:7f:0e:ee:30:d6:c9:
a5:8c:a8:06:10:37:b4:64:95:bb:42:7c:6b:c4:83:88:e3:86:
79:10:db:ff:b4:a4:94:a8:a0:fe:36:ee:76:45:3d:7c:8e:cc:
be:bd:0f:1a:ef:75:4d:67:b5:b1:1b:69:7a:7e:db:91:32:a4:
ff:65:b0:d9:e7:76:06:81:ff:83:3c:5d:fa:a3:61:72:28:83:
b8:28:cb:5b:78:cf:7e:06:f0:c2:82:19:13:9f:38:82:92:36:
43:82:44:0e:42:30:bd:42:31:e9:2f:b2:d3:5d:7a:6d:f7:bd:
2c:b2:a9:d7:8e:e0:55:5e:8b:fe:48:6b:e4:12:4b:fb:f4:ea:
5c:6b:10:02:46:03:b6:8c:1c:39:18:b1:95:4d:5f:43:65:e5:
44:3c:97:e5:5f:a5:2d:ef:af:68:cb:95:48:04:97:b2:b5:f6:
a5:35:7f:82:97:d6:77:31:3d:ce:b4:4b:c1:61:e9:6b:ee:b0:
6a:f7:16:14:79:e5:74:3e:02:e6:f4:1f:e6:ec:9d:56:c8:ce:
55:e5:d5:65:6b:7a:1f:04:62:af:ab:dc:68:7a:4e:99:01:3b:
fb:db:bf:4d:b2:d0:cf:ea:6f:02:65:27:ab:c4:fc:9b:2b:d0:
20:d1:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:41 2026 by rpki-client