
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier: AS7t4zm1dOQYjKaKBj7YsGBEe+RaWn9kEWEUVdh1BrA=
Subject key identifier: 95:CA:8F:85:78:98:63:AB:E5:01:0C:9D:5D:94:72:A0:29:46:1C:EE
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0D0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number: 0CED
Signing time: Wed 18 Feb 2026 17:55:43 +0000
Manifest this update: Wed 18 Feb 2026 17:55:43 +0000
Manifest next update: Wed 25 Feb 2026 17:55:43 +0000
Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: F+IvC30sJiT6gkCs9O1r8NO+CKNLO6evuqnVM7ACHqc=)
2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: mSkIgywOU9dhooivn2x5OXxcwDybzq+7lQQROc67tvc=)
3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: tEULMfLQG1uBT4oJ7DeARVbztIuEbjp8uzJOUISud6I=)
4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: Feb 18 17:55:43 2026 GMT
Not After : Feb 25 17:55:43 2026 GMT
Subject: CN=6995fd1f-2c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:49:19:92:f8:3b:de:6a:22:4c:6b:4f:f3:
57:2c:52:54:64:81:4c:13:7a:20:87:54:30:ee:b4:
52:e2:3e:75:16:a1:bf:31:8a:7a:9a:b8:84:a2:f7:
b8:c0:d0:ba:e3:ca:51:e7:01:44:30:23:08:d6:58:
59:a8:39:7c:00:ec:7b:61:c3:39:4c:7e:42:85:82:
67:83:ba:86:83:3c:31:a1:f4:46:e5:14:dd:39:51:
c9:34:29:e8:6b:9d:9a:b8:b9:d8:4f:55:50:54:39:
62:1f:e5:a0:06:3c:64:d8:4a:54:8a:8a:cc:7b:54:
bd:0c:ab:17:7d:f1:76:17:1f:dd:61:9a:76:23:2b:
ce:47:fc:f1:7c:05:4b:60:0e:8f:00:d3:9d:a9:1d:
4b:06:41:60:ae:bb:8a:43:5c:e8:ef:97:c0:ac:e0:
60:0e:b5:56:1f:cb:f4:2e:75:9e:1a:21:c7:46:44:
e4:5b:ad:58:e3:6f:f8:14:07:39:75:0b:6a:9f:7c:
83:05:3f:ef:29:d6:f0:a1:00:22:26:47:44:a9:ff:
aa:84:96:3a:73:de:79:1c:84:6d:6f:1b:8a:2e:0d:
4d:cd:9d:8d:89:29:be:54:37:ed:4d:69:d0:e2:38:
fc:49:02:b3:65:30:8d:b9:9a:90:fd:fd:0a:b5:84:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:8F:85:78:98:63:AB:E5:01:0C:9D:5D:94:72:A0:29:46:1C:EE
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:81:5d:c2:af:0e:e1:7b:a5:33:e3:55:4e:7b:1f:2d:d3:96:
fc:a8:b8:1b:55:5a:ae:1f:9e:9a:c2:f8:7b:f7:be:89:f6:5b:
57:ab:d5:31:23:5e:b8:df:ac:fc:a3:ba:64:3a:bc:dd:ae:53:
4d:6f:80:73:3d:20:a3:ea:07:ba:2d:08:6e:5a:b3:da:f6:c1:
fc:ef:cf:11:8d:5c:2c:a1:fd:de:71:6e:25:44:d6:f4:a1:86:
4e:08:af:2d:ca:06:49:25:63:7f:48:b1:8a:12:84:2e:a0:b6:
53:6b:09:a5:be:21:79:56:d3:b2:f2:a2:e3:3e:da:7a:47:00:
26:38:4d:65:ae:6a:65:a1:6f:e2:71:05:01:eb:c2:31:c5:aa:
6c:ef:ef:fb:8d:34:d6:9a:56:03:2d:69:9a:f1:f7:be:65:4c:
f9:5d:b9:ba:c7:17:f6:5c:60:85:99:a5:73:2e:e1:f2:e9:f4:
8a:bd:5e:f7:10:fb:f3:a7:8c:46:ff:22:58:fd:69:b3:c3:56:
c2:c4:e1:65:53:b4:6e:ed:af:dd:12:59:58:14:a2:00:1f:9b:
de:d4:40:37:16:44:9e:76:53:89:18:d4:12:df:90:f4:31:ac:
0a:99:6e:dc:a5:24:52:3d:41:d6:1c:be:68:a7:8b:e2:ab:24:
79:a6:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:00:41 2026 by rpki-client