
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json)
Hash identifier: jePdRzXCYwUTKydpvZKENl2kkV7BapmFLA0sEe7LJT0=
Subject key identifier: F8:B5:5E:CE:6E:99:A2:89:46:4A:A6:BE:AD:DC:0E:47:D6:E3:09:F0
Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
Manifest number: 0218
Signing time: Thu 19 Feb 2026 01:37:11 +0000
Manifest this update: Thu 19 Feb 2026 01:37:10 +0000
Manifest next update: Thu 26 Feb 2026 01:37:10 +0000
Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: Kp6GNsOWcvNsKVRkeAloBb0b68z3/JWXfqO4JjTKTi0=)
2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl
rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Validity
Not Before: Feb 19 01:37:10 2026 GMT
Not After : Feb 26 01:37:10 2026 GMT
Subject: CN=69966947-59b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:4f:ec:cf:64:f1:4c:20:90:c7:6d:d5:e7:
37:a2:86:47:95:4e:89:55:f6:a0:ab:3c:76:b1:5d:
53:0d:97:31:86:cc:a9:99:75:94:44:a5:ff:1d:1f:
4b:0c:84:36:15:5e:a5:0a:d8:0c:e9:dd:90:6e:25:
70:dd:06:35:83:80:f0:f5:7d:e9:eb:ab:13:b3:cc:
35:67:c1:ad:44:21:fc:25:fc:9a:74:18:86:d7:96:
25:e9:d6:42:8c:a3:03:8f:a5:c3:7d:e4:b1:4b:a5:
2d:1d:74:e1:7a:d4:ae:a0:02:92:e8:b9:01:3b:89:
99:64:1e:5d:92:e5:b5:4d:b0:2e:30:0d:fe:a2:be:
59:f5:b1:5b:41:ac:5b:83:57:5a:e2:74:58:ff:62:
58:6c:1e:94:31:65:11:14:6c:fc:f7:a4:6f:d3:02:
84:9f:a0:b3:50:dc:48:c0:dd:0d:f9:c7:bd:34:fe:
b3:42:57:5b:8b:90:8a:3f:b0:d0:1b:fe:f1:d4:b8:
99:74:a7:73:22:c7:9e:c8:67:1d:1b:5b:22:a4:62:
93:4b:80:d0:ac:a8:47:7e:5e:5a:f6:dc:de:04:c8:
68:e0:f0:b2:ff:b0:c9:21:d6:c6:1d:dd:a8:af:e4:
df:14:22:56:a9:b3:91:37:0c:68:ef:10:af:97:45:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:5E:CE:6E:99:A2:89:46:4A:A6:BE:AD:DC:0E:47:D6:E3:09:F0
X509v3 Authority Key Identifier:
keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:7a:7f:96:27:02:d4:97:56:a3:6a:79:0e:ea:e2:3b:07:75:
07:8d:c5:25:43:88:4b:b1:a2:dd:2c:d6:ae:bc:f7:7a:c6:b1:
23:74:af:8a:a2:17:c8:de:2b:68:26:29:06:73:7a:0b:7c:7e:
96:0f:d1:4b:12:2e:72:e3:53:89:30:70:4f:c4:82:d0:7e:11:
38:82:41:14:50:24:68:98:7a:29:14:af:f4:35:5b:95:4f:98:
a8:6e:10:5d:cf:f4:e4:6b:10:11:c1:de:e2:43:ca:2a:19:6d:
a8:24:06:8a:7d:08:57:cb:c8:30:39:0d:25:d9:f5:b9:8e:59:
19:6d:da:eb:f5:3a:a1:eb:b1:56:76:4f:16:fd:3c:90:15:a5:
ae:21:9f:2a:1b:75:b2:f9:68:10:f0:7d:3f:d7:86:38:18:b2:
7d:c1:54:14:02:e3:99:4d:e8:71:8c:e6:df:01:b8:80:d1:11:
53:e0:9e:29:2d:e1:2e:49:8d:8f:41:e9:e0:ac:ce:47:57:e2:
e1:3c:bc:58:a2:70:56:3a:ef:05:58:37:bd:7e:df:bb:26:d3:
f8:e3:89:bc:ee:51:22:5d:24:73:81:0e:f5:3c:aa:45:0f:11:
3d:8b:52:fe:9e:43:d8:6d:22:b6:af:7f:9b:05:3a:4f:23:80:
88:de:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:34 2026 by rpki-client