
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
File: 3dzECt5nfyP4p5ukFo729r7wZcc.mft (raw, json)
Hash identifier: FfBrrdb4o2ZI2oob/i6yGPioCBO7R3Bnw2qc3OOMjhM=
Subject key identifier: B0:06:17:F3:5C:7E:AE:DC:0D:F4:11:B1:85:9A:BF:41:D3:F8:E6:A9
Authority key identifier: DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7
Certificate issuer: /CN=A91CB2E2/serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
Manifest number: 56
Signing time: Thu 19 Feb 2026 06:26:20 +0000
Manifest this update: Thu 19 Feb 2026 06:26:19 +0000
Manifest next update: Thu 26 Feb 2026 06:26:19 +0000
Files and hashes: 1: 3dzECt5nfyP4p5ukFo729r7wZcc.crl (hash: +BU7qHbSOcNVNPAvTkuPXGo4jqKV7u8GC1le7jBY65Q=)
2: 240EF95E896311F0B911053BC4F9AE02.roa (hash: l/wARrq1lISnaNIca31Ucy5U5vcCEK4kZC3D4iFHaJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl
rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB2E2, serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7
Validity
Not Before: Feb 19 06:26:19 2026 GMT
Not After : Feb 26 06:26:19 2026 GMT
Subject: CN=6996ad0b-f088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:71:7b:b1:d4:d9:a6:63:46:25:c7:fd:b5:
72:bd:86:26:ee:70:2e:15:0e:2b:90:6f:56:0e:65:
8c:5c:c2:22:44:fc:0a:57:1c:15:b7:de:2c:10:fa:
07:a7:38:63:07:ef:ed:87:23:2f:c4:49:05:a2:9e:
29:a5:f8:62:a1:a6:38:a2:6b:0f:9c:7e:7d:89:78:
43:d6:24:a3:30:2e:61:4e:be:99:eb:ef:6b:7a:fb:
8f:5e:b3:9b:4d:79:f9:de:d5:10:24:15:20:dc:51:
3a:33:f9:9f:98:c6:35:79:31:8c:b7:bb:04:19:f2:
b3:6c:fe:c3:d7:04:2b:69:ae:4a:2e:a0:dd:60:b6:
b8:8f:07:36:78:4c:f8:3b:d4:0b:1d:41:4b:1d:e4:
05:a5:99:80:4a:28:1c:33:77:f9:69:f1:02:f3:5e:
32:33:6a:d7:71:40:f7:85:1f:f0:0e:af:cc:ee:e3:
d7:bb:a1:94:fb:f6:88:96:e3:24:3f:57:fe:60:6d:
42:7c:fe:db:2e:fa:40:77:0e:36:0d:42:78:80:1d:
fc:51:07:3b:31:cc:37:14:94:76:3f:89:57:2a:a8:
34:1e:2b:be:3e:26:9e:85:df:68:c7:db:e2:43:1d:
8b:79:0a:11:1a:cd:f0:37:06:76:4b:82:85:9b:8f:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:17:F3:5C:7E:AE:DC:0D:F4:11:B1:85:9A:BF:41:D3:F8:E6:A9
X509v3 Authority Key Identifier:
keyid:DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:3b:8a:fb:e3:ee:ef:1a:3b:21:e9:7b:0b:30:c1:ab:2f:9e:
8f:24:e0:23:85:1f:69:d0:76:03:dc:a5:59:71:31:0a:8a:c5:
99:08:fd:76:e9:4e:42:83:a8:b7:ba:58:4a:da:e9:ea:45:25:
0e:13:f3:c9:1c:d6:82:aa:01:db:7f:8d:08:32:70:64:f3:64:
fa:65:c1:0d:fc:56:c3:14:27:03:e6:21:bc:44:1a:de:1b:b1:
71:62:db:86:d6:6b:dd:e0:08:22:87:93:ea:65:0b:f9:2f:91:
a1:d5:9d:e8:db:93:4f:e1:ab:68:45:ab:ec:8b:67:64:f0:4a:
bb:5f:af:21:b6:2e:9b:12:2a:33:f3:77:bf:38:23:8c:9d:6c:
c2:d0:df:cc:80:ad:58:e2:dd:42:46:0d:e7:83:79:85:71:0c:
d5:6a:14:89:77:e3:23:45:0a:10:6e:6c:b7:63:37:17:05:92:
60:1a:a5:97:6b:08:5e:72:5b:56:53:3c:a0:e0:60:1d:a6:fe:
da:a4:7b:f6:d7:c2:52:cf:5a:e4:89:c3:8e:6c:8a:8a:ae:9e:
d4:22:90:30:a8:03:86:24:70:4b:77:5c:dd:81:89:ec:00:4a:
86:e4:0d:4b:39:9c:02:71:b3:ae:89:23:d6:cf:c9:bf:de:0a:
e4:43:03:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QjJFMjExMC8GA1UEBRMoREREQ0M0MEFERTY3N0YyM0Y4QTc5QkE0MTY4RUY2RjZC
RUYwNjVDNzAeFw0yNjAyMTkwNjI2MTlaFw0yNjAyMjYwNjI2MTlaMBgxFjAUBgNV
BAMMDTY5OTZhZDBiLWYwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdiXF7sdTZpmNGJcf9tXK9hibucC4VDiuQb1YOZYxcwiJE/ApXHBW33iwQ+gen
OGMH7+2HIy/ESQWiniml+GKhpjiiaw+cfn2JeEPWJKMwLmFOvpnr72t6+49es5tN
efne1RAkFSDcUToz+Z+YxjV5MYy3uwQZ8rNs/sPXBCtprkouoN1gtriPBzZ4TPg7
1AsdQUsd5AWlmYBKKBwzd/lp8QLzXjIzatdxQPeFH/AOr8zu49e7oZT79oiW4yQ/
V/5gbUJ8/tsu+kB3DjYNQniAHfxRBzsxzDcUlHY/iVcqqDQeK74+Jp6F32jH2+JD
HYt5ChEazfA3BnZLgoWbj9FNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsAYX81x+
rtwN9BGxhZq/QdP45qkwHwYDVR0jBBgwFoAU3dzECt5nfyP4p5ukFo729r7wZccw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMkUyLzQxMUM2M0IwODk1
OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQNHA1dWtGbzcyOXI3d1pj
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM2R6RUN0NW5meVA0cDV1a0ZvNzI5cjd3WmNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC
MkUyLzQxMUM2M0IwODk1OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQ
NHA1dWtGbzcyOXI3d1pjYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIE7ivvj7u8aOyHpewswwasvno8k4COFH2nQdgPcpVlxMQqKxZkI/Xbp
TkKDqLe6WEra6epFJQ4T88kc1oKqAdt/jQgycGTzZPplwQ38VsMUJwPmIbxEGt4b
sXFi24bWa93gCCKHk+plC/kvkaHVnejbk0/hq2hFq+yLZ2TwSrtfryG2LpsSKjPz
d784I4ydbMLQ38yArVji3UJGDeeDeYVxDNVqFIl34yNFChBubLdjNxcFkmAapZdr
CF5yW1ZTPKDgYB2m/tqke/bXwlLPWuSJw45sioquntQikDCoA4YkcEt3XN2BiewA
SobkDUs5nAJxs66JI9bPyb/eCuRDA9I=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:25 2026 by rpki-client