
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json)
Hash identifier: 2mCaM3hvAr6dlLHtpD4omL1H5MD0ltikEO9Eo2nslx4=
Subject key identifier: 79:92:24:48:99:CB:A6:F0:B6:C2:DF:52:6D:C6:31:C1:96:4A:EB:BB
Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Certificate serial: 2E62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
Manifest number: 2E49
Signing time: Wed 18 Feb 2026 15:22:34 +0000
Manifest this update: Wed 18 Feb 2026 15:22:33 +0000
Manifest next update: Wed 25 Feb 2026 15:22:33 +0000
Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: mZUrY/qFhVxrX9+mYM1kyWuu8DeVqQvdh3DTPKB1v3c=)
2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: dVMsL8EJuwFThJbot7dFtq6YNUkqPMYmgPIcaOtsyp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11874 (0x2e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Validity
Not Before: Feb 18 15:22:33 2026 GMT
Not After : Feb 25 15:22:33 2026 GMT
Subject: CN=6995d93a-3daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:99:cd:3d:27:71:84:37:32:ea:6e:85:eb:
d4:7e:9c:a9:9a:9f:37:8f:78:ba:eb:96:58:23:38:
f2:23:1e:d6:57:f4:8f:01:78:e4:04:8f:7b:d4:15:
63:53:1a:a9:6c:b2:df:94:4b:60:ef:2b:54:b6:35:
89:5d:82:7a:7f:fc:31:f1:2e:3a:1e:cf:8f:a9:02:
45:c1:37:fa:53:18:6a:06:42:61:e8:76:53:7d:35:
10:41:d4:5a:60:7e:2c:19:30:a5:ce:29:42:c0:2a:
6e:ce:52:43:cd:0d:35:1a:9d:4e:41:4d:ad:b3:c9:
26:3a:f4:c3:57:b8:71:fd:42:89:fc:b9:85:e7:a3:
c8:46:6c:63:f6:d6:db:2c:a1:cb:62:fe:0d:b1:96:
e7:2c:8b:a5:db:af:09:b4:0e:8c:95:0b:d2:e3:a8:
8c:f6:8d:a7:c2:ff:d4:35:df:ad:ad:f2:e1:2e:4a:
f9:9b:2c:ac:d6:56:38:77:af:ca:07:af:a3:bd:a0:
81:d0:06:aa:d9:1d:b8:89:9e:be:e0:f0:05:5f:56:
3b:7c:1a:5d:7c:6d:4c:63:39:e4:52:c9:44:57:bc:
eb:12:c9:0a:22:58:5f:84:64:a0:1e:3b:51:99:cf:
20:3e:66:d3:8b:a8:7d:28:85:40:28:ae:2d:a0:91:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:24:48:99:CB:A6:F0:B6:C2:DF:52:6D:C6:31:C1:96:4A:EB:BB
X509v3 Authority Key Identifier:
keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:1d:81:a0:99:33:b2:27:02:47:3c:e2:8d:9c:8c:fa:77:
d6:a2:67:27:2e:2d:8a:34:bf:84:6c:25:81:c6:e1:67:cf:68:
c5:b4:b1:50:f3:48:5b:8c:11:33:73:02:81:3f:b2:bd:d3:8f:
3e:37:e3:d3:e0:7e:a0:38:05:1a:d6:0b:79:48:bc:db:3b:60:
57:8a:31:98:1e:50:58:8e:8e:93:8e:c9:02:51:72:34:5b:d3:
c0:85:09:77:d8:06:1d:c9:ad:a9:be:dd:23:0d:a0:7e:68:01:
c4:d8:33:61:4a:aa:a7:e9:b8:6b:21:97:e7:01:5b:b6:ab:cd:
5b:05:6b:c1:55:92:8c:ca:d5:ec:dd:80:38:52:9d:24:0d:8d:
fa:14:fa:54:3e:3f:bf:ea:13:84:56:bf:1d:0f:29:2a:48:2c:
9f:54:a7:d1:36:45:59:95:a9:cf:90:19:da:82:65:8d:38:f6:
fb:7f:b3:f3:4f:33:37:d2:db:37:d0:e4:d0:9e:74:a7:83:f5:
27:8d:ff:09:fe:ce:48:88:c8:fd:50:f2:4a:e1:21:e2:ac:51:
60:9a:88:d2:9f:5e:49:9f:63:59:35:0e:26:03:34:37:ce:32:
6e:92:ad:81:c8:29:e6:8b:2a:a4:06:ba:fb:e6:af:9a:dc:54:
e9:85:ba:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex
QTNCQTZDRDgwHhcNMjYwMjE4MTUyMjMzWhcNMjYwMjI1MTUyMjMzWjAYMRYwFAYD
VQQDDA02OTk1ZDkzYS0zZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5fOZzT0ncYQ3MupuhevUfpypmp83j3i665ZYIzjyIx7WV/SPAXjkBI971BVj
UxqpbLLflEtg7ytUtjWJXYJ6f/wx8S46Hs+PqQJFwTf6UxhqBkJh6HZTfTUQQdRa
YH4sGTClzilCwCpuzlJDzQ01Gp1OQU2ts8kmOvTDV7hx/UKJ/LmF56PIRmxj9tbb
LKHLYv4NsZbnLIul268JtA6MlQvS46iM9o2nwv/UNd+trfLhLkr5myys1lY4d6/K
B6+jvaCB0Aaq2R24iZ6+4PAFX1Y7fBpdfG1MYznkUslEV7zrEskKIlhfhGSgHjtR
mc8gPmbTi6h9KIVAKK4toJHexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmSJEiZ
y6bwtsLfUm3GMcGWSuu7MB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2
OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhN
UURxUDhpcEZPOG9hTzZiTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHQx2BoJkzsicCRzzijZyM+nfWomcnLi2KNL+EbCWBxuFnz2jFtLFQ
80hbjBEzcwKBP7K9048+N+PT4H6gOAUa1gt5SLzbO2BXijGYHlBYjo6TjskCUXI0
W9PAhQl32AYdya2pvt0jDaB+aAHE2DNhSqqn6bhrIZfnAVu2q81bBWvBVZKMytXs
3YA4Up0kDY36FPpUPj+/6hOEVr8dDykqSCyfVKfRNkVZlanPkBnagmWNOPb7f7Pz
TzM30ts30OTQnnSng/Unjf8J/s5IiMj9UPJK4SHirFFgmojSn15Jn2NZNQ4mAzQ3
zjJukq2ByCnmiyqkBrr75q+a3FTphboC
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:18 2026 by rpki-client