
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json)
Hash identifier: LeyQgNo854sowM7IwGTIh8ww4c4fdFpgTuXp74vym4w=
Subject key identifier: C5:95:B6:13:BB:8D:12:2B:39:0F:72:DD:23:E4:29:EB:75:4C:69:24
Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
Manifest number: E6
Signing time: Thu 19 Feb 2026 04:53:23 +0000
Manifest this update: Thu 19 Feb 2026 04:53:22 +0000
Manifest next update: Thu 26 Feb 2026 04:53:22 +0000
Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: eALpUQJvsGJuctDYIXYbYFk9Z0KCxbZfFYGreB1wCFU=)
2: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: IqDMTyruA2o3kZ6gTDDM02dt4rvWX85dpnn386y/+D0=)
3: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: 0pzKKUDi8I5wmawXMvsnYBP2IX8f3vry9Bpy1YjoPY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Validity
Not Before: Feb 19 04:53:22 2026 GMT
Not After : Feb 26 04:53:22 2026 GMT
Subject: CN=69969742-94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:a4:b7:04:fd:42:78:8d:00:4c:7e:ea:d8:
de:7f:dd:8e:79:d6:96:22:20:2b:8b:3e:5f:17:ec:
a7:35:60:14:7b:66:fd:35:fe:19:b0:69:22:78:ca:
3a:71:98:54:08:0c:bb:47:93:16:29:c0:ca:08:0b:
90:79:ff:37:77:e3:19:fd:6c:71:3d:23:e0:80:23:
cd:2f:04:b3:f1:8b:aa:fd:48:75:9e:ed:92:72:91:
0d:8b:98:bc:dc:09:10:a0:5d:d0:9c:10:3f:a0:84:
dd:7c:0b:a6:4b:15:d5:77:84:70:9b:9a:c4:3a:4d:
b8:c6:0f:e1:96:97:ee:7a:5e:5d:25:50:da:5b:7f:
83:10:63:21:1a:1c:2d:60:62:59:30:4f:94:f8:02:
52:0c:c8:ac:92:dd:f1:61:46:74:39:94:e0:26:0f:
c2:44:2b:93:6a:c7:6f:a1:35:f6:cf:fd:13:3e:eb:
93:5e:a3:95:c4:7b:5a:ca:b0:7d:a9:11:c9:26:bd:
fa:8f:42:35:1e:ab:f9:97:87:da:e5:25:7d:84:b2:
4e:c8:5b:21:fc:69:25:7f:2f:78:9a:90:d5:2c:f2:
45:1a:0e:88:b6:80:c3:4c:90:e3:42:1b:d7:ae:00:
0b:59:e7:4b:eb:44:ad:f9:e5:d3:3d:37:fa:5e:ca:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:B6:13:BB:8D:12:2B:39:0F:72:DD:23:E4:29:EB:75:4C:69:24
X509v3 Authority Key Identifier:
keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:77:a8:fb:bd:b3:99:dd:e7:7e:c1:6c:49:ec:42:6b:49:
76:88:7f:45:b5:90:4f:c2:d1:7d:05:95:fa:12:6e:02:91:a2:
85:dd:fd:f8:43:53:ad:81:80:67:2c:2e:ae:b3:55:ca:b6:66:
13:53:3b:1f:85:9f:34:ee:a8:5b:37:00:10:3d:5b:2d:aa:13:
3c:73:8f:7e:2b:77:b8:f1:2f:20:d4:ec:91:6f:43:b3:f9:af:
1b:03:d7:6b:22:81:bf:07:db:58:e0:42:5d:45:7b:2c:43:fb:
45:53:75:b0:9a:c9:3d:28:1a:78:76:f9:91:88:bd:60:1d:69:
2e:bf:a3:65:e3:93:e6:e7:e1:25:53:6b:05:ff:0b:fd:0f:42:
60:30:ba:e2:30:56:a8:6c:87:68:fb:24:9f:6e:d5:88:e8:66:
15:06:a9:be:1c:ec:05:6d:be:e1:78:3c:28:b5:ab:32:36:6c:
8e:4f:8c:82:1a:9f:4e:b2:e1:7f:4d:d8:f3:45:a2:f2:3c:52:
61:7f:86:95:4e:dd:65:db:c6:a6:8e:22:1d:e1:45:ef:f9:82:
71:3b:ad:90:cb:6f:fc:2c:4d:37:09:30:f7:04:db:0d:1c:b1:
12:1b:ff:c0:e1:90:e9:88:ff:90:e6:2f:65:31:69:ec:be:31:
3b:4d:f0:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF
QzQ3RDM0MzgwHhcNMjYwMjE5MDQ1MzIyWhcNMjYwMjI2MDQ1MzIyWjAYMRYwFAYD
VQQDDA02OTk2OTc0Mi05NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIqktwT9QniNAEx+6tjef92OedaWIiAriz5fF+ynNWAUe2b9Nf4ZsGkieMo6
cZhUCAy7R5MWKcDKCAuQef83d+MZ/WxxPSPggCPNLwSz8Yuq/Uh1nu2ScpENi5i8
3AkQoF3QnBA/oITdfAumSxXVd4Rwm5rEOk24xg/hlpfuel5dJVDaW3+DEGMhGhwt
YGJZME+U+AJSDMiskt3xYUZ0OZTgJg/CRCuTasdvoTX2z/0TPuuTXqOVxHtayrB9
qRHJJr36j0I1Hqv5l4fa5SV9hLJOyFsh/Gklfy94mpDVLPJFGg6ItoDDTJDjQhvX
rgALWedL60St+eXTPTf6Xsq/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWVthO7
jRIrOQ9y3SPkKet1TGkkMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG
QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ
UUNIZmxQZFlZbVRzUjlORGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvH3eo+72zmd3nfsFsSexCa0l2iH9FtZBPwtF9BZX6Em4CkaKF3f34
Q1OtgYBnLC6us1XKtmYTUzsfhZ807qhbNwAQPVstqhM8c49+K3e48S8g1OyRb0Oz
+a8bA9drIoG/B9tY4EJdRXssQ/tFU3Wwmsk9KBp4dvmRiL1gHWkuv6Nl45Pm5+El
U2sF/wv9D0JgMLriMFaobIdo+ySfbtWI6GYVBqm+HOwFbb7heDwotasyNmyOT4yC
Gp9OsuF/TdjzRaLyPFJhf4aVTt1l28amjiId4UXv+YJxO62Qy2/8LE03CTD3BNsN
HLESG//A4ZDpiP+Q5i9lMWnsvjE7TfCm
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:26:57 2026 by rpki-client