
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json)
Hash identifier: Zr216emJCcZ+3Omt9S6HPlHloxqD+5SJK6hs+f2K2+I=
Subject key identifier: 5A:37:E1:47:64:91:51:EB:51:25:F8:57:2E:3E:2C:86:9A:57:1F:57
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial: 1412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
Manifest number: 1409
Signing time: Wed 18 Feb 2026 16:40:27 +0000
Manifest this update: Wed 18 Feb 2026 16:40:26 +0000
Manifest next update: Wed 25 Feb 2026 16:40:26 +0000
Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: +jJUqv6xVFmUnFN2DGL3u8d2uAz1za33G5hfeBL6JGs=)
2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: Ps2kpMcHFW9xZn4cXtCxGzuJfkKA6kvJeaElditES+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5138 (0x1412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Validity
Not Before: Feb 18 16:40:26 2026 GMT
Not After : Feb 25 16:40:26 2026 GMT
Subject: CN=6995eb7b-5ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:31:60:3b:db:cf:fb:82:e3:70:45:12:3a:
0b:51:20:25:34:6f:55:c5:81:ff:ba:26:18:2e:16:
1d:99:13:2d:f9:4e:45:b8:98:17:7a:cd:82:19:16:
d4:a7:8b:b6:f4:3e:b9:fd:f1:b0:24:f8:5d:a7:dd:
dd:d3:7e:51:8b:bd:0d:f8:5c:26:e7:72:e7:8c:e4:
9f:98:0e:99:d3:c4:69:7e:2d:ea:26:fe:37:1a:25:
05:34:8c:d0:b0:cf:13:64:c9:bb:93:41:fd:ff:3e:
23:7e:ce:72:d0:52:82:1a:20:54:31:74:85:d6:70:
e8:5b:7a:58:1e:1b:32:8c:48:6b:e3:45:f6:5e:e8:
e9:f6:cd:6b:bd:23:6d:14:b2:ca:f2:43:c7:80:e9:
2b:3a:7b:11:2c:b0:15:ae:e1:82:8a:76:27:f5:ca:
51:1e:b9:52:7a:4b:e0:30:7d:75:03:fc:fa:f3:99:
14:2a:6a:e9:86:3c:fb:24:44:da:62:9e:73:b2:c3:
51:80:6e:d6:60:ff:01:5c:0e:83:12:a3:4f:71:21:
36:57:7c:7f:39:78:07:1d:d6:99:8f:6e:53:1e:b7:
3c:c8:24:e5:00:ee:b8:be:ce:83:82:ac:b1:e3:a6:
c1:81:44:6c:3e:35:b4:6e:2e:91:64:75:d8:5f:d1:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:E1:47:64:91:51:EB:51:25:F8:57:2E:3E:2C:86:9A:57:1F:57
X509v3 Authority Key Identifier:
keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:cb:7b:c1:c2:60:64:a1:47:3c:82:ee:b8:97:ed:5b:0c:
aa:5e:20:96:da:7d:48:1e:73:51:46:cd:8a:90:45:c8:b4:0c:
3d:42:99:89:a1:a7:ce:16:07:d9:82:bf:62:f1:17:3c:e7:14:
bc:4d:75:ca:49:c4:99:04:be:9b:4a:8d:3f:5c:a2:82:3b:75:
57:4a:e5:82:88:0e:b6:9c:87:70:57:2a:1d:ed:c0:76:be:88:
3b:f5:4e:11:f8:eb:6c:66:a5:2f:c3:b6:98:3e:42:1d:4a:fe:
23:09:a0:04:8f:95:9a:ca:3e:7a:66:56:2c:9f:d2:ff:13:2b:
05:db:5a:56:00:fb:8d:f4:30:43:6b:98:e5:12:3e:27:99:f7:
46:3a:44:b4:2b:c1:7f:6e:25:c8:94:b0:35:04:38:93:62:a1:
7e:b5:74:c5:c5:4c:ac:de:6f:55:e8:79:fa:ce:db:eb:02:0f:
3e:5d:1f:5a:89:5b:8d:ed:d9:67:fb:89:b0:03:97:7b:7c:1f:
c0:76:1d:33:af:a2:9f:36:93:e4:b4:65:3e:70:68:26:45:e6:
e6:d6:86:90:f9:22:36:ee:bb:d3:65:06:bc:8b:52:ed:e4:d7:
a5:1d:dd:b0:ee:fa:3c:0f:74:fc:83:ef:a6:12:42:77:63:db:
78:2c:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:12 2026 by rpki-client