
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier: 3VInT8Aeuk/MUeYlxkKBab/fHs1ujI5LS0uEGxXY3bo=
Subject key identifier: 38:F5:A8:1C:FE:91:F4:42:67:06:C9:37:DE:87:22:44:F4:E2:64:3B
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial: 0A21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number: 0A13
Signing time: Wed 18 Feb 2026 19:22:39 +0000
Manifest this update: Wed 18 Feb 2026 19:22:39 +0000
Manifest next update: Wed 25 Feb 2026 19:22:39 +0000
Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: XXFDOUTG04SD1pb5Pq4VchwmT2YcPQ6yr5csPveugPU=)
2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Validity
Not Before: Feb 18 19:22:39 2026 GMT
Not After : Feb 25 19:22:39 2026 GMT
Subject: CN=6996117f-5b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:ad:78:6e:28:4a:ec:3e:e6:32:97:db:6f:
0b:b2:15:7a:87:64:a2:8f:d0:7a:94:a7:38:61:6d:
7f:32:db:9e:44:69:20:47:34:e3:31:86:cc:54:16:
4a:c1:63:bd:8b:b1:c0:d0:44:81:e0:19:e3:9a:76:
dc:e4:83:93:25:f0:27:e2:29:94:bc:fb:f0:81:c3:
7f:5a:e3:72:7c:7a:3a:c4:a9:bc:cc:43:7d:52:f6:
82:70:3b:fd:ba:97:4d:a5:0b:04:b1:24:b6:70:2f:
cd:1d:c7:eb:53:00:56:d6:85:47:e2:8a:94:e2:c6:
36:0e:b3:b5:54:e2:1d:b9:e7:29:0f:53:cc:00:bb:
dd:1e:08:0f:23:bf:4b:81:3c:ca:13:db:c7:90:5a:
34:56:8b:42:8f:9c:94:ba:39:6e:38:4b:4a:81:58:
53:69:e0:2c:47:7c:7e:6c:14:bf:37:75:03:2d:26:
27:30:33:1c:cc:74:29:02:d3:01:8a:96:f4:27:b8:
0c:fc:81:de:26:1e:7c:ea:bb:cb:0b:52:9e:33:fd:
98:50:2d:22:52:04:3c:5c:84:e6:55:c9:9f:0f:ce:
a0:52:d7:bb:3f:75:a5:d4:41:d0:03:35:55:8f:bd:
d3:2f:ac:ed:5b:9b:7c:6b:9c:62:75:1e:de:04:c5:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:A8:1C:FE:91:F4:42:67:06:C9:37:DE:87:22:44:F4:E2:64:3B
X509v3 Authority Key Identifier:
keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:e5:b0:10:cb:58:48:39:68:4d:65:38:e2:96:50:40:58:db:
86:04:3d:ba:d8:33:c1:cb:a9:0c:ec:79:6d:d1:8f:d4:76:91:
dd:3d:ef:ed:3c:a3:b8:80:e6:cf:c6:18:7b:4d:7b:56:d8:b3:
20:b8:61:40:8e:38:33:2f:b8:06:f7:95:2f:d7:ce:fd:a2:c1:
d7:a0:78:7c:29:a9:ec:06:9b:3d:ee:26:b4:7c:ae:56:be:1d:
16:56:fc:08:de:9b:19:65:e6:c6:9d:50:1e:50:03:cf:59:a4:
e9:03:a9:65:0c:58:b0:35:7d:26:6b:11:ee:3f:4c:8e:44:b5:
0d:bf:96:28:0e:25:7c:0a:5e:8e:1a:d2:4e:e9:c9:25:fd:a4:
aa:07:60:2a:3b:08:24:78:d4:3e:cc:f4:b1:aa:41:4e:8f:dc:
10:b1:6a:50:7c:a7:77:f8:f8:d7:27:92:5d:4d:03:6a:40:61:
a7:40:2a:29:09:cf:24:25:49:81:c8:f9:44:1d:88:69:65:b2:
be:b8:50:17:c7:ad:73:b4:6e:61:3c:e1:e2:36:86:6d:35:9c:
43:e5:cf:da:98:c9:4a:20:73:69:10:e6:a3:2a:c2:35:0c:d0:
10:26:42:0c:eb:3a:45:a2:99:73:c0:13:a2:f1:ae:04:bb:66:
e8:69:0e:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB
NjNDRUYwNkMwHhcNMjYwMjE4MTkyMjM5WhcNMjYwMjI1MTkyMjM5WjAYMRYwFAYD
VQQDDA02OTk2MTE3Zi01YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQSteG4oSuw+5jKX228LshV6h2Sij9B6lKc4YW1/MtueRGkgRzTjMYbMVBZK
wWO9i7HA0ESB4Bnjmnbc5IOTJfAn4imUvPvwgcN/WuNyfHo6xKm8zEN9UvaCcDv9
updNpQsEsSS2cC/NHcfrUwBW1oVH4oqU4sY2DrO1VOIduecpD1PMALvdHggPI79L
gTzKE9vHkFo0VotCj5yUujluOEtKgVhTaeAsR3x+bBS/N3UDLSYnMDMczHQpAtMB
ipb0J7gM/IHeJh586rvLC1KeM/2YUC0iUgQ8XITmVcmfD86gUte7P3Wl1EHQAzVV
j73TL6ztW5t8a5xidR7eBMXw+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj1qBz+
kfRCZwbJN96HIkT04mQ7MB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG
NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT
NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR5bAQy1hIOWhNZTjillBAWNuGBD262DPBy6kM7Hlt0Y/UdpHdPe/t
PKO4gObPxhh7TXtW2LMguGFAjjgzL7gG95Uv1879osHXoHh8KansBps97ia0fK5W
vh0WVvwI3psZZebGnVAeUAPPWaTpA6llDFiwNX0maxHuP0yORLUNv5YoDiV8Cl6O
GtJO6ckl/aSqB2AqOwgkeNQ+zPSxqkFOj9wQsWpQfKd3+PjXJ5JdTQNqQGGnQCop
Cc8kJUmByPlEHYhpZbK+uFAXx61ztG5hPOHiNoZtNZxD5c/amMlKIHNpEOajKsI1
DNAQJkIM6zpFoplzwBOi8a4Eu2boaQ51
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:19 2026 by rpki-client