
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json)
Hash identifier: RrPOInFhc1Y2eGmvzNKNcglxbHfki/H5HMTDOf2AlPo=
Subject key identifier: 4D:83:D9:F7:2E:31:79:E7:F4:FE:52:72:67:E4:E0:84:CF:46:21:94
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
Manifest number: 045F
Signing time: Wed 18 Feb 2026 23:26:00 +0000
Manifest this update: Wed 18 Feb 2026 23:25:59 +0000
Manifest next update: Wed 25 Feb 2026 23:25:59 +0000
Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: FHgQ+sMZYNctmdAjdi1eYctjZ0JfWhqcDqoE3QsDdOc=)
2: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: e9cwg8d7bC8r2DHgx/kL7/A4+KHztZ7rWF6Yv+XqYD8=)
3: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: wg979tEV/edC9z/60lEEUA1wH6+Atveb0Z20mtMK9/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Validity
Not Before: Feb 18 23:25:59 2026 GMT
Not After : Feb 25 23:25:59 2026 GMT
Subject: CN=69964a88-b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:95:e4:18:4d:a9:d4:74:fc:8e:7d:5e:18:
86:65:1d:11:7d:be:a8:58:d0:11:69:52:e9:cc:6d:
6a:0f:b1:c2:ac:87:47:d2:98:9b:13:57:c1:27:24:
b3:78:35:61:4e:f7:23:5b:c7:3d:93:74:da:ea:ae:
cb:e9:9b:dc:81:28:44:c9:73:a8:9d:30:76:58:bf:
db:d1:71:f7:0e:2e:21:de:6b:51:67:42:5d:3f:8a:
63:e0:8b:0c:83:18:ac:b3:f8:a4:d7:05:de:83:71:
b4:aa:06:6c:ca:26:5e:ed:45:a7:ba:b2:77:49:ab:
1e:3f:20:17:d5:c4:61:c1:96:81:73:11:66:db:36:
8c:38:6f:d6:0e:2f:2d:2d:16:bc:16:cc:cc:0b:61:
14:f5:84:7f:42:98:e7:99:31:b1:4a:39:9d:90:04:
4a:00:a3:46:79:0c:67:c4:a7:f9:75:7e:07:5e:39:
98:6d:e2:f4:24:be:8c:ee:a5:9a:c9:c5:34:16:b1:
58:17:2e:44:93:d1:47:16:8b:d7:f0:cc:9d:fe:31:
04:ef:01:d6:09:82:31:44:54:f1:9a:39:26:c6:d8:
b2:86:da:03:c3:e3:88:01:17:32:de:d9:d7:13:5a:
84:51:46:90:73:23:c1:69:dc:b2:de:73:a2:43:c3:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:83:D9:F7:2E:31:79:E7:F4:FE:52:72:67:E4:E0:84:CF:46:21:94
X509v3 Authority Key Identifier:
keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:f2:10:fa:e5:2f:d9:c2:ce:24:3c:4c:5f:5a:d1:93:5e:
9d:b4:17:9a:1a:dd:1d:37:63:ea:e2:84:a1:b6:41:5d:ef:8a:
ad:94:1e:35:6c:a2:49:c1:bb:4b:44:4c:1c:03:79:57:ea:ad:
7b:70:5e:1a:6f:a2:35:6f:86:4a:41:4d:d4:9f:74:77:42:ab:
60:fc:84:dc:df:49:4a:d1:18:69:ee:99:83:c3:e5:ec:6a:73:
9c:d1:19:25:1d:29:bc:48:f5:63:c5:65:16:12:e6:d7:45:36:
b0:fe:84:82:e8:92:b0:e7:0b:2e:2c:be:bd:53:9d:60:f1:c8:
90:85:72:18:43:b4:e7:bd:ea:e0:b2:54:62:6f:c4:c4:e7:16:
02:68:9b:3c:2b:45:70:e1:c3:cd:6d:24:28:99:e5:fc:84:be:
4f:77:48:3d:bc:9a:65:77:a1:6b:0e:09:1f:e8:45:f6:f1:46:
2c:84:fd:5e:fe:4a:6d:ab:24:45:ef:e3:e3:49:c9:a8:40:20:
63:f7:a7:b0:61:cc:cd:39:fe:e7:db:cf:39:03:66:42:2a:f9:
e8:80:d9:ba:6a:3f:0f:97:02:3b:21:56:64:c2:ce:f3:5c:0c:
36:92:b5:50:9d:2a:cf:7f:fb:b7:d1:30:1c:a7:4e:de:50:e8:
e7:ad:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:15 2026 by rpki-client