
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json)
Hash identifier: 4F74+w2WGi8Z23bD2Q3JdhzPFt8Z5W9ZCrD74ToA5To=
Subject key identifier: CE:3D:FB:96:4D:98:DE:B3:AD:3E:B1:EE:13:FC:69:DC:A9:68:6C:DD
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial: 0D73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
Manifest number: 0D72
Signing time: Wed 18 Feb 2026 17:39:26 +0000
Manifest this update: Wed 18 Feb 2026 17:39:26 +0000
Manifest next update: Wed 25 Feb 2026 17:39:26 +0000
Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: Of7k3eDA5CF+V4RCgN5MoiCSNu8W3ck3dFEkb9O0ewU=)
2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: aG9Ky47AV0GPRw+yhEkTWuhgTxt+050Je5yrrl9/SOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3443 (0xd73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Validity
Not Before: Feb 18 17:39:26 2026 GMT
Not After : Feb 25 17:39:26 2026 GMT
Subject: CN=6995f94e-44ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:a5:21:a8:be:db:5f:38:a6:8f:5c:91:a0:
f9:2d:fd:0e:82:56:c1:08:f1:dd:7f:24:7a:03:af:
73:ec:4d:61:1d:63:c7:09:ff:ae:aa:a1:b4:98:11:
3a:5d:9a:70:61:1e:4c:a0:02:4f:e8:c7:12:9f:89:
f7:05:95:5f:60:8f:02:68:16:77:d8:d9:25:ca:da:
7f:01:60:b3:5d:00:a5:05:92:54:db:83:93:cf:9a:
29:3c:8b:e9:0f:cd:fb:95:38:c9:47:92:34:c1:dd:
72:b1:5d:f8:bb:8f:66:22:f5:81:34:44:bc:9d:a4:
c0:70:81:d1:84:91:3d:75:7e:b7:11:b0:3e:53:90:
fa:50:48:5d:14:5e:23:13:cf:b7:d0:ea:a2:af:99:
7e:76:e6:d1:fd:cc:fd:bc:04:ff:69:15:33:33:27:
af:e6:34:ea:9d:ef:10:9f:26:6a:56:1b:80:af:7c:
63:65:9f:3a:5a:99:3e:3f:44:f1:46:9f:46:33:5a:
95:8c:ca:d4:01:cc:11:7c:41:97:28:26:a1:a2:51:
52:7b:ef:84:ef:82:0b:ed:0f:e7:46:85:3d:2f:19:
91:5c:3f:fb:ce:3c:38:f4:0a:7d:76:06:d4:ff:f2:
c7:c4:07:4c:cf:52:a6:0b:70:4f:29:08:50:6c:30:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:FB:96:4D:98:DE:B3:AD:3E:B1:EE:13:FC:69:DC:A9:68:6C:DD
X509v3 Authority Key Identifier:
keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:0f:ff:73:13:75:1d:e4:9b:ae:bd:41:8e:7d:1b:84:46:
70:cd:77:91:99:14:b6:a3:f7:4a:40:d9:52:c7:06:30:37:34:
ae:a9:7d:fc:4d:c9:e9:a7:27:7a:8b:70:9f:39:8d:08:7e:dd:
a2:ee:a0:5f:bd:e8:08:57:41:f8:f8:1c:c9:c0:1c:3c:b5:c8:
33:49:84:49:00:e9:05:18:0b:51:a1:d2:9e:82:51:bd:24:a9:
79:91:d9:9d:99:9b:0e:3f:9f:75:ef:4f:2a:3e:d2:02:b5:c9:
c4:de:73:f3:0b:86:eb:83:11:a4:16:8d:9a:bd:85:f7:09:87:
6c:2e:79:de:8b:24:08:5b:cf:5f:71:28:58:48:36:f9:a5:74:
e7:19:99:df:b2:44:75:91:c2:cb:6b:e3:69:a0:fc:87:e2:e9:
3b:4a:b9:cf:64:11:5e:85:fb:10:8e:04:23:80:98:91:ec:69:
92:4e:21:c2:05:15:5d:b6:fb:fe:00:49:b7:60:19:22:28:87:
c4:7d:e7:a4:76:2f:b0:2a:55:0c:66:2a:68:ac:4f:ba:ce:fa:
b2:c2:e0:51:9a:25:0b:60:22:5e:f7:99:53:c8:f5:90:d3:53:
f3:02:dd:96:94:ba:4d:77:b0:06:f3:23:dd:2b:b8:70:a2:08:
7f:d3:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:28 2026 by rpki-client