
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier: YFri6Ds98Mvcm05QM5j9AP4/9mO3Js07HoTjI3ArDCw=
Subject key identifier: A1:B1:BD:1D:A3:16:B1:9B:7B:69:DC:9B:58:5C:33:3D:B7:3D:27:01
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial: 313C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number: 3137
Signing time: Wed 18 Feb 2026 15:19:38 +0000
Manifest this update: Wed 18 Feb 2026 15:19:37 +0000
Manifest next update: Wed 25 Feb 2026 15:19:37 +0000
Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: 2ONgCJUJ1FT8byldk8UQH2pGyswcmj6eoxwHQ6LzC5g=)
2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: +n1EkVjGqmRIN2F0mYDcDpolX9s17cHIyXg+OPTXZ6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12604 (0x313c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Validity
Not Before: Feb 18 15:19:37 2026 GMT
Not After : Feb 25 15:19:37 2026 GMT
Subject: CN=6995d88a-3269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:54:82:04:b9:d9:36:1e:e0:39:1d:51:8c:
3b:7f:80:d5:46:d3:a6:d4:85:87:2c:f5:4a:e9:fb:
47:72:08:02:5e:ea:29:0b:74:d6:65:6c:26:71:30:
5e:14:c6:d6:93:94:bf:24:03:8c:af:f8:b4:1d:63:
88:7b:88:55:47:b4:45:60:73:6b:0d:1a:8b:38:23:
97:6e:7c:26:75:fc:2a:48:1c:29:eb:dc:53:36:8d:
fb:1f:ad:91:b4:c9:92:b7:9b:f9:74:66:a4:a5:58:
e6:c5:54:87:0e:98:66:d0:3a:c1:7a:63:64:29:db:
39:e6:fb:a7:a5:20:5d:ee:b8:ca:44:73:13:df:35:
07:c7:e9:a6:24:c2:36:b8:4f:95:cb:c8:91:cf:a7:
0a:69:63:78:b6:a5:4e:31:c6:2f:5d:9a:b9:77:01:
ba:ac:5b:f2:54:6f:5a:87:86:b9:d5:f8:6b:80:fe:
58:0d:82:68:d6:ec:6a:ed:c7:b9:67:cb:ce:1f:c6:
23:e9:9b:55:22:8d:9b:ea:bc:c0:66:5a:dc:16:b1:
86:65:35:ae:fb:84:1f:d3:d8:b2:a4:47:2f:94:3a:
48:30:a2:40:31:90:5b:44:23:60:63:ca:4d:c3:a1:
0d:30:01:1b:52:29:c6:96:75:ae:c1:0f:c7:7a:13:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:BD:1D:A3:16:B1:9B:7B:69:DC:9B:58:5C:33:3D:B7:3D:27:01
X509v3 Authority Key Identifier:
keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6b:42:f2:8c:ae:d4:a6:29:ee:4a:79:42:1c:3c:ac:66:94:
c1:9a:a6:a6:50:33:92:af:bb:38:2b:21:c1:2a:fd:68:ee:1d:
72:78:8b:ea:3a:4d:bb:bb:f8:52:a0:44:34:7a:0e:84:fc:81:
7a:56:b2:b3:d4:37:0f:bc:e1:f0:5b:aa:4f:8e:92:3c:bc:b2:
9c:0a:f1:d7:ad:c7:b4:f7:01:15:b1:45:92:db:b7:63:80:bd:
eb:47:b1:a9:b4:48:24:8b:24:0b:52:30:22:eb:09:e2:a3:f3:
eb:2b:93:f5:ae:fa:7b:6e:fd:fd:e1:e4:1d:e9:fa:89:b3:9b:
d9:aa:2f:e0:59:b2:75:f5:ee:60:ae:77:2b:ef:ed:16:a2:96:
9e:b9:8c:46:9c:80:58:70:50:e7:65:ff:49:14:29:a4:05:a3:
a8:78:34:e2:30:e2:6b:55:a4:1c:6f:17:0f:1a:a5:ad:41:6b:
f4:c6:03:43:5c:d5:b0:67:11:68:09:d8:90:25:27:3e:f9:15:
33:bb:64:2e:2b:40:c2:8a:98:3e:44:1a:c7:ec:31:4b:01:80:
f8:94:56:1d:26:3b:64:59:13:cd:9c:34:20:34:24:3a:08:18:
7a:07:17:25:71:6d:e4:f2:6c:0a:8f:5b:1a:f5:a4:ed:3f:d2:
40:12:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:03:12 2026 by rpki-client