
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier: xA+5SuSkmnWVmqDQgs86xalApmmT/YwFae74sqciFBc=
Subject key identifier: 68:EA:07:B8:37:3A:BA:87:40:6E:8A:8E:BF:EB:69:64:6B:92:D4:0A
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial: 0B28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number: 0B20
Signing time: Wed 18 Feb 2026 18:54:26 +0000
Manifest this update: Wed 18 Feb 2026 18:54:26 +0000
Manifest next update: Wed 25 Feb 2026 18:54:26 +0000
Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: 9m5qTe1XePU1NSjFKK/M1zA8SpaAMI4eeqdO7ZTEnWU=)
2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Validity
Not Before: Feb 18 18:54:26 2026 GMT
Not After : Feb 25 18:54:26 2026 GMT
Subject: CN=69960ae2-d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:ba:28:a4:f3:97:55:ec:a8:6f:b2:b1:94:
4f:58:fe:7f:9c:21:09:ce:76:cf:4a:d1:d8:07:a8:
89:0f:52:7c:74:fc:84:cb:e4:55:94:64:00:7a:e0:
b6:2d:86:92:49:c3:2a:36:57:29:2d:29:6b:4f:f2:
6b:c2:5f:49:eb:ed:50:7b:28:9f:a9:4a:83:a9:d3:
02:3e:ad:17:9d:f0:7c:09:33:37:d2:96:09:23:0c:
51:b0:91:e3:14:e7:c8:b4:5f:de:11:62:84:7f:9e:
bb:62:37:26:fc:5c:62:14:d9:57:5d:18:40:a1:03:
ce:5a:7d:de:d4:c7:8b:4e:6c:fa:b4:3e:c9:14:f4:
bb:55:d8:1d:d6:5e:7d:28:40:10:03:96:f0:72:8f:
0c:33:8d:1d:98:de:56:25:a8:fe:7a:6a:49:56:83:
9f:68:56:67:8f:20:bb:85:1d:9f:c0:9b:3c:32:30:
4b:be:2e:f8:b3:c7:d2:87:3c:66:18:2c:36:91:ca:
7a:d4:fa:10:55:7f:f3:cb:d6:fe:67:a7:6a:66:35:
68:25:9d:cd:0e:07:57:a4:59:fb:65:b9:2c:70:15:
6f:ee:16:90:bd:0c:e6:b8:ac:ac:2c:6e:74:dc:3e:
a9:de:22:05:bd:a5:6a:3b:3f:0a:44:93:33:1e:cb:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:07:B8:37:3A:BA:87:40:6E:8A:8E:BF:EB:69:64:6B:92:D4:0A
X509v3 Authority Key Identifier:
keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:d3:a4:21:2b:57:69:6b:ff:eb:c7:e8:59:4b:a7:78:f0:
ad:26:92:cb:65:96:80:03:5b:79:d1:42:64:cd:05:f1:ed:bc:
7a:8f:19:83:c9:51:aa:3e:a5:c4:40:5d:2f:27:29:7d:96:ff:
15:09:f7:49:12:08:e9:9b:6e:71:e4:5f:7a:54:c3:ba:65:8d:
d9:78:c0:1b:f2:85:1c:06:b1:f0:f6:c5:55:a0:64:ae:32:96:
a1:92:78:8f:7b:de:a7:d4:19:80:3e:78:f5:38:f6:92:e8:e4:
45:cd:98:a5:dc:2c:f0:84:72:51:84:08:19:76:da:3a:24:76:
2b:cd:7a:0a:71:9d:ea:7c:b5:04:61:c1:00:fd:bf:91:23:92:
45:27:c6:7a:ff:c9:20:8d:46:62:9c:d1:b8:60:8d:a8:84:ca:
98:30:3f:1f:da:31:27:40:0d:9a:99:e8:11:22:77:bd:af:1a:
0b:53:0f:1b:e4:4a:af:79:bf:f5:6b:45:7a:80:23:4c:44:c2:
02:82:6f:d2:c3:aa:6e:fd:b8:a7:a0:a0:98:ad:07:81:a4:ab:
1e:2a:c5:f2:d8:6a:88:42:a1:59:56:b0:4f:77:e9:56:9f:1c:
6c:f3:a6:a5:54:36:b3:1f:e9:12:4b:a3:ea:08:35:43:06:d9:
e8:d4:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:27 2026 by rpki-client