
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json)
Hash identifier: MMd6HoyYa7T+1HInt8QDmoP1QVyy+cypfhaifGkxdek=
Subject key identifier: C5:5E:BE:86:B5:97:1A:E7:8E:B4:F7:5C:AE:FF:1C:1D:70:13:EB:AB
Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Certificate serial: 0E7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
Manifest number: 0F4B
Signing time: Wed 18 Feb 2026 17:28:07 +0000
Manifest this update: Wed 18 Feb 2026 17:28:07 +0000
Manifest next update: Wed 25 Feb 2026 17:28:07 +0000
Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: pCX8KtScHvvf67DFnpn6TpEHFpzyv8LulIKEfWeepHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3710 (0xe7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Validity
Not Before: Feb 18 17:28:07 2026 GMT
Not After : Feb 25 17:28:07 2026 GMT
Subject: CN=6995f6a7-76f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:85:30:34:9a:4d:0d:b3:99:ae:e4:44:2d:
ab:a4:a3:2c:2d:8c:04:92:9d:f7:14:76:3a:49:e4:
3b:e3:38:00:f1:7a:01:2c:46:7a:fc:97:26:5b:40:
26:21:9d:9c:d2:a0:72:48:0c:84:e2:d2:e3:97:5f:
42:3c:7e:40:f9:2a:7a:f1:a2:08:ce:a3:7f:e1:0e:
ce:48:1f:0b:68:80:3a:55:66:11:98:77:3f:39:b7:
47:26:4a:ef:0b:51:7b:34:33:fd:02:86:98:72:9d:
05:00:33:28:c7:e5:c9:51:0e:93:32:02:2f:34:10:
92:5b:2c:4b:d9:41:30:b1:c3:5f:62:c7:9c:ea:70:
10:f0:23:94:ca:05:c3:25:51:d3:82:f2:39:c8:65:
d3:04:97:7d:d0:fe:af:03:91:c7:18:22:e1:f1:b8:
58:8a:12:91:c4:fd:40:e5:2b:e6:23:e0:ee:60:3d:
28:b5:7b:1f:63:c1:51:53:12:5f:2f:15:ba:92:d6:
58:a5:bd:74:79:21:76:74:7f:1f:8f:30:f7:bf:e4:
28:53:02:66:57:51:ff:c3:f9:a6:fb:41:ff:e7:9c:
ae:e8:65:a2:42:11:b3:94:2c:aa:79:30:bb:4c:cc:
88:f8:1e:71:13:0b:88:b3:02:99:b8:18:f8:a3:1e:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5E:BE:86:B5:97:1A:E7:8E:B4:F7:5C:AE:FF:1C:1D:70:13:EB:AB
X509v3 Authority Key Identifier:
keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:40:19:a6:8d:f6:9f:52:cf:a5:ca:06:c5:94:0f:2b:14:d4:
71:d7:7b:54:11:cf:87:01:47:0d:d6:2a:1f:d5:18:6c:c6:1c:
e2:15:29:65:53:cb:54:54:4d:77:7a:be:f0:0f:71:80:63:3b:
25:9a:08:0b:62:15:73:a5:61:07:f5:bc:ed:28:e6:41:f6:eb:
18:59:1a:43:a1:c4:40:e9:65:91:31:35:22:98:52:f5:e5:70:
db:8d:82:fc:aa:bf:39:e0:52:2e:f5:72:8e:e4:14:fb:2c:a7:
e9:d0:cb:5e:1b:8c:7a:ea:16:35:5c:fe:c2:57:15:71:f5:6e:
d1:0c:0c:6b:bd:5f:e1:a4:4d:7e:c7:3a:a5:c4:48:ca:83:7d:
e6:04:a0:1f:48:6f:61:55:e8:03:41:43:dd:d2:93:95:ce:89:
5b:f9:75:d2:34:fd:9c:0e:0d:c8:63:1a:c0:5a:14:f5:b1:8c:
22:b4:34:57:33:88:4a:88:04:6d:a9:5a:13:48:6d:1b:02:3b:
a2:04:83:b7:10:ed:bf:c5:7e:27:7a:33:3f:3f:44:f0:72:f4:
b9:c1:1b:d3:cc:cf:36:91:16:14:ed:ad:09:ec:ff:c3:65:fc:
b7:ad:56:ce:76:cb:e7:0a:73:87:a6:8a:57:0e:d6:bb:ec:e3:
b9:cd:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:27 2026 by rpki-client