
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json)
Hash identifier: KFpCAQWrZS+RNHcCGcX0TEjm2DvVk0JXd9jQ8po6VOA=
Subject key identifier: 8C:A5:56:4C:94:18:E0:99:01:7A:22:D0:C8:59:09:E4:D1:19:F8:34
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
Manifest number: 89
Signing time: Thu 19 Feb 2026 05:56:08 +0000
Manifest this update: Thu 19 Feb 2026 05:56:07 +0000
Manifest next update: Thu 26 Feb 2026 05:56:07 +0000
Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: +IGf6KsGmWYuJ0EVgTLG1ggORaxVBoVLlhtrt9xb8Tk=)
2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Validity
Not Before: Feb 19 05:56:07 2026 GMT
Not After : Feb 26 05:56:07 2026 GMT
Subject: CN=6996a5f7-4e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:34:c9:b6:5b:b7:08:4c:54:ee:fb:1a:68:
a5:81:2c:b2:3b:9f:f0:a5:a6:9f:13:7a:5b:81:91:
8b:1e:04:5c:c9:9c:07:59:b7:7a:bf:6f:a2:a0:4b:
f5:85:99:f3:11:c1:1f:bd:07:14:df:ce:8a:ca:c8:
c7:4f:8e:e9:c5:23:5b:e6:57:da:ed:0f:94:e6:8b:
9c:c9:08:60:22:48:d3:49:d2:21:e9:89:60:6a:cd:
0f:99:f0:40:7b:e4:a9:23:d4:8c:fa:4a:7a:2d:73:
fc:d7:33:2f:42:23:17:53:f2:12:94:df:72:f2:92:
19:cb:0e:5d:0c:6c:2d:55:40:cc:69:51:fe:a7:17:
c7:35:99:1b:23:5b:a7:66:1f:87:67:a0:47:4b:e6:
27:0b:27:9d:4a:d1:cb:90:82:21:b1:25:6b:a4:b3:
6a:b2:5c:94:cf:90:64:7a:72:e2:fc:5d:d3:8d:62:
1b:f7:4d:73:9c:1f:a7:8d:f7:85:d9:ee:ba:fe:b8:
6d:3e:10:fb:46:5e:7e:78:c4:36:7b:a9:45:dc:81:
f0:fc:05:9e:88:f3:e4:2d:7f:0c:1a:a6:77:bc:f0:
df:fc:46:37:54:59:62:f5:95:0d:fe:eb:56:ab:da:
39:59:7e:3f:bd:e7:e0:a7:9c:0f:53:fa:b0:3b:c6:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:56:4C:94:18:E0:99:01:7A:22:D0:C8:59:09:E4:D1:19:F8:34
X509v3 Authority Key Identifier:
keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:c4:3c:98:e5:31:b5:f8:9f:45:09:d8:07:2c:d3:43:7b:d2:
0d:53:18:de:b8:81:2f:b3:7d:db:94:33:09:e4:7a:11:df:ca:
35:71:2d:97:df:d4:21:cf:2b:12:5c:39:63:16:53:9f:bb:1c:
1b:0f:9c:0a:a4:b4:69:d9:9f:55:56:80:d4:59:61:95:c1:a3:
81:9f:cf:76:7c:a7:3a:3e:f7:1e:40:50:da:2a:ba:88:c7:54:
53:80:11:18:6d:29:c4:f1:8d:8e:64:f7:c1:1c:8a:74:48:8f:
18:41:2a:12:59:c2:b3:ca:91:13:5b:2a:23:13:93:17:03:fc:
41:93:ee:80:15:56:66:1c:b2:6f:48:d3:3c:83:0a:31:ef:c0:
96:3d:ff:da:65:c8:d3:b3:f2:4d:28:7f:be:56:1a:48:a4:fa:
74:da:3a:a7:32:eb:59:94:20:0b:d4:ea:86:b7:3f:2f:18:5b:
00:93:c9:46:a7:40:3d:02:e0:c8:6f:b1:5d:9e:d8:93:16:6a:
e7:09:0e:12:52:00:4e:01:f8:84:6c:2e:80:e4:22:17:53:77:
fb:1e:7e:0e:be:ab:eb:84:46:be:be:92:75:9f:2e:82:16:c5:
05:2d:8f:f5:aa:60:04:f6:78:ac:b0:af:91:4e:40:6f:c7:af:
73:a0:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:28 2026 by rpki-client