
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier: q5UnFwyZNyJIcPr9sWLjMLANPyvYF8gHxqk3ucEewoo=
Subject key identifier: C3:AF:BA:E1:04:76:60:B6:6B:2A:DA:0D:49:77:19:03:F0:49:6F:2B
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number: 02E9
Signing time: Thu 19 Feb 2026 00:29:45 +0000
Manifest this update: Thu 19 Feb 2026 00:29:45 +0000
Manifest next update: Thu 26 Feb 2026 00:29:45 +0000
Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: jvXP/yxKr8LtVa3uG8UJ9TvUnI6mRtAIafNVuorv5bQ=)
2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: r42gvRnxO3uF5b+prgf2woeqv6/k7l6TD4yPnDTEfnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Validity
Not Before: Feb 19 00:29:45 2026 GMT
Not After : Feb 26 00:29:45 2026 GMT
Subject: CN=69965979-d854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:65:9d:86:16:1a:e6:6f:29:ce:b7:b2:f4:
27:35:fb:09:ba:ec:09:cc:f3:8b:0f:a6:7d:53:75:
c1:e9:95:0f:05:0d:3d:e1:68:46:00:ac:46:46:42:
d6:29:f9:75:a8:ed:ee:eb:93:d1:37:c7:27:e6:3e:
f7:a7:0d:7c:4a:a4:88:13:73:22:c8:9f:25:e4:37:
d9:ea:ce:97:80:20:c9:80:5c:4c:99:9e:96:62:f5:
70:d5:4e:24:b1:f6:83:1d:a3:4f:79:04:57:e5:ea:
0d:f6:6f:a4:99:60:fc:51:82:b9:52:d8:51:7b:2c:
fa:78:35:94:68:4e:86:05:81:a7:59:14:c7:37:e3:
83:a7:af:c3:98:47:20:43:82:f5:ec:73:8a:4f:52:
25:97:18:76:09:41:ac:93:b5:88:e2:95:3f:41:4d:
20:a3:dd:a5:0d:9a:7e:10:e0:6f:c5:13:e1:ae:ca:
92:ca:9d:04:68:e7:8c:43:15:33:f3:6b:ba:7a:a1:
56:0e:5b:4a:55:6a:b4:1a:2d:b9:31:ed:77:3e:98:
36:cf:57:e5:f1:84:74:34:91:fc:b9:4f:e0:f1:4e:
ad:0f:ae:cd:d0:c5:56:1b:35:67:33:af:c7:e1:95:
b6:64:a3:37:a5:30:a8:9f:af:17:00:46:8c:43:3c:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:BA:E1:04:76:60:B6:6B:2A:DA:0D:49:77:19:03:F0:49:6F:2B
X509v3 Authority Key Identifier:
keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a0:e2:78:c4:30:fa:c5:ab:4e:6a:9e:1b:9a:75:a6:de:aa:
60:0c:0a:c6:bb:bf:d1:15:2c:37:cb:5a:0d:7f:a7:67:94:57:
c7:d2:ad:62:95:41:b6:47:88:76:8b:c6:08:ed:2a:07:9d:3f:
7b:2f:f5:18:1f:ad:54:3c:45:24:2b:e7:71:c1:4a:d0:3a:3f:
58:a5:d0:d5:2f:d8:a3:d9:4d:41:12:3b:3f:86:8b:ff:fe:b5:
18:90:e1:99:be:e4:b3:27:a8:19:9b:f9:48:d3:9d:77:43:9a:
1b:7d:b8:3d:26:96:a8:1b:5e:1d:0a:c3:19:c7:33:18:1b:74:
c7:15:f6:0b:3c:ee:79:7c:34:35:12:85:04:a2:ff:ca:7b:8d:
27:ec:36:58:65:3e:b3:79:4b:ba:90:75:b8:d1:0f:a8:a6:8a:
31:29:ac:15:45:85:63:0b:4c:99:72:ed:66:d7:a5:8c:07:39:
18:34:28:95:65:5e:21:12:7c:61:21:1e:de:e2:7a:76:25:ac:
63:f7:06:d7:98:68:81:b7:63:91:16:15:d4:2d:3f:83:3c:9f:
2b:1a:4c:54:1a:c7:e1:d7:8f:a5:bc:da:6a:79:ec:5f:51:77:
5f:b4:f7:46:cb:cd:d8:2e:da:23:46:e3:f8:07:7a:76:dd:c3:
78:c7:aa:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz
QjIyMDE4OUQwHhcNMjYwMjE5MDAyOTQ1WhcNMjYwMjI2MDAyOTQ1WjAYMRYwFAYD
VQQDDA02OTk2NTk3OS1kODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlllnYYWGuZvKc63svQnNfsJuuwJzPOLD6Z9U3XB6ZUPBQ094WhGAKxGRkLW
Kfl1qO3u65PRN8cn5j73pw18SqSIE3MiyJ8l5DfZ6s6XgCDJgFxMmZ6WYvVw1U4k
sfaDHaNPeQRX5eoN9m+kmWD8UYK5UthReyz6eDWUaE6GBYGnWRTHN+ODp6/DmEcg
Q4L17HOKT1Illxh2CUGsk7WI4pU/QU0go92lDZp+EOBvxRPhrsqSyp0EaOeMQxUz
82u6eqFWDltKVWq0Gi25Me13Ppg2z1fl8YR0NJH8uU/g8U6tD67N0MVWGzVnM6/H
4ZW2ZKM3pTCon68XAEaMQzzQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOvuuEE
dmC2ayraDUl3GQPwSW8rMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2
QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ
TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaoOJ4xDD6xatOap4bmnWm3qpgDArGu7/RFSw3y1oNf6dnlFfH0q1i
lUG2R4h2i8YI7SoHnT97L/UYH61UPEUkK+dxwUrQOj9YpdDVL9ij2U1BEjs/hov/
/rUYkOGZvuSzJ6gZm/lI0513Q5obfbg9JpaoG14dCsMZxzMYG3THFfYLPO55fDQ1
EoUEov/Ke40n7DZYZT6zeUu6kHW40Q+opooxKawVRYVjC0yZcu1m16WMBzkYNCiV
ZV4hEnxhIR7e4np2Jaxj9wbXmGiBt2ORFhXULT+DPJ8rGkxUGsfh14+lvNpqeexf
UXdftPdGy83YLtojRuP4B3p23cN4x6p0
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:44:10 2026 by rpki-client