
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier: fhMehYJshRBMtxztZhqIuXU601DMe2EVaNts4iMwiGw=
Subject key identifier: EB:95:CD:E4:22:C5:EF:50:35:BC:3F:04:65:01:66:A8:06:EB:8F:D1
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number: 086A
Signing time: Wed 18 Feb 2026 20:11:46 +0000
Manifest this update: Wed 18 Feb 2026 20:11:46 +0000
Manifest next update: Wed 25 Feb 2026 20:11:46 +0000
Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: K7j0FDrtLep14UpQkSnvD4H/17etr/xZJA72B92is9c=)
2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: +h3ZHBCw6Qz+t4F3LGXV8hFxYh9j7OtLHTGZFocNf1k=)
3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: rMEPct0/XVC8TEo39bfA4k3rkfghG8GcbNnIjivqw1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Validity
Not Before: Feb 18 20:11:46 2026 GMT
Not After : Feb 25 20:11:46 2026 GMT
Subject: CN=69961d02-2785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:75:f6:f6:af:d0:19:30:98:84:e8:21:e6:
8c:39:8f:96:24:e8:4c:80:67:ea:9a:6a:da:17:62:
c3:6b:63:e0:06:b2:2f:c5:9f:95:79:9a:63:34:94:
5d:83:56:ad:23:11:d4:52:2d:55:df:e5:45:9c:bc:
9b:90:0a:47:c1:8b:f3:f3:89:91:f5:22:3b:47:47:
57:1b:14:47:bb:6a:18:d5:21:2b:51:0d:bd:f9:1e:
1c:fc:9c:14:80:2f:59:6d:ce:67:5b:30:c6:b6:1d:
bb:18:41:ee:48:47:76:fd:f6:3d:7a:c9:4a:f1:48:
e8:66:29:0a:29:c8:db:94:5d:4b:b2:8f:bf:8b:0f:
62:f1:b4:e3:c9:d2:ca:44:37:10:c1:bd:91:ee:de:
1e:3c:1d:33:8e:87:3e:fc:08:a1:dc:b6:19:da:af:
e2:3f:a9:41:16:e0:0b:d7:19:45:3d:11:de:4f:e6:
ed:b5:b0:aa:83:0f:d1:23:ef:7b:4f:fa:6d:8f:38:
5a:24:b6:43:19:4e:17:2f:11:af:57:78:ea:62:ec:
29:f3:60:78:bf:e1:43:33:c1:7a:1d:85:5f:26:9c:
e9:c7:e2:b7:07:b3:ee:75:bb:12:ec:bd:33:82:ff:
b6:07:54:26:70:6a:23:9e:af:86:4e:63:3d:13:06:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:CD:E4:22:C5:EF:50:35:BC:3F:04:65:01:66:A8:06:EB:8F:D1
X509v3 Authority Key Identifier:
keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:9b:b7:89:2c:eb:dc:d3:fc:0e:f5:eb:f1:cb:9e:af:9f:
5b:fa:51:2b:43:5c:4f:5c:9a:43:2b:46:f0:66:62:5b:f2:6c:
d8:11:dc:de:fd:fd:2b:d0:86:ad:96:b7:97:44:4d:a2:ae:b6:
5b:8c:8b:68:41:f0:eb:26:23:50:35:07:b7:f2:24:50:1b:a9:
ce:e3:37:ca:9e:09:29:8b:78:42:f8:02:cd:96:c6:93:72:aa:
6a:f0:82:fa:20:58:b6:5d:7d:fb:32:d0:87:ae:0f:a1:e3:0e:
d5:02:a2:60:1e:f2:5f:1c:30:27:7d:af:4d:1e:38:5f:3b:2e:
0b:f7:9c:5a:cf:27:63:63:09:b0:6c:38:f5:34:ec:7c:a2:82:
e5:e9:7d:fd:9d:31:85:82:52:b7:c0:6b:57:18:79:39:25:07:
56:2b:9a:53:b8:e4:c6:b3:c3:2f:b6:26:13:8d:1a:d3:9c:e5:
a4:46:27:61:23:ed:19:b0:f2:53:92:96:00:47:24:0c:e7:0b:
c2:d5:40:fd:9f:9b:27:1b:49:d7:d3:1a:56:56:8b:02:fa:ea:
82:18:4d:41:dd:52:3c:30:e7:73:a6:7c:8a:53:4d:5c:b0:73:
b8:ee:5b:92:00:ec:8f:d1:7d:b6:01:49:4f:ff:8b:7b:38:15:
b0:86:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:38 2026 by rpki-client