
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
File: JD5IKavy-QnBLdoET-XTa4IQU5I.mft (raw, json)
Hash identifier: gYI4GyYv/g4MkFM14imKW29IiEpGUERAiBH/kBmHriE=
Subject key identifier: 6F:A2:F9:52:C6:DF:6C:E0:6E:92:A8:3D:9F:55:CE:4B:96:2E:17:5B
Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
Certificate issuer: /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
Manifest number: 0CD5
Signing time: Wed 18 Feb 2026 17:59:49 +0000
Manifest this update: Wed 18 Feb 2026 17:59:49 +0000
Manifest next update: Wed 25 Feb 2026 17:59:49 +0000
Files and hashes: 1: JD5IKavy-QnBLdoET-XTa4IQU5I.crl (hash: QQBasnP111unCzCFBA0rw1+3CfDvXOWS1OpHqrVUWhQ=)
2: 2CF214DC93A611F0B9B44571C4F9AE02.roa (hash: gDTlO8JdKBOhrYpdJ9YbTAbJbDClxcUd9QV6sNxI620=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl
rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392
Validity
Not Before: Feb 18 17:59:49 2026 GMT
Not After : Feb 25 17:59:49 2026 GMT
Subject: CN=6995fe15-62a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:f6:39:6b:62:f5:0e:0f:5e:ee:fc:c6:dd:
6e:aa:c4:6c:c0:29:d7:d0:ed:e4:9b:c6:20:22:68:
4a:a2:d6:ee:45:58:50:60:e4:c7:7a:ad:00:48:a2:
f7:5e:2a:c7:eb:1d:69:f6:4d:7d:e7:f1:31:68:9f:
fa:2b:e9:80:03:74:3e:e2:05:20:2c:2f:45:46:e8:
76:e5:1c:d8:77:a2:35:26:de:d4:d8:59:f9:f3:14:
20:85:ab:f6:a9:7e:66:53:2d:71:fd:14:0b:c9:44:
34:46:aa:a7:c9:3f:59:43:7b:dc:b7:cd:6b:04:67:
f9:a8:a0:6a:92:df:2b:de:52:f5:94:03:a8:be:b5:
bc:86:13:b3:a6:4a:a9:24:2c:6e:10:54:ad:8b:cb:
f1:cf:b2:39:93:2d:b9:4b:bd:bc:9d:85:c5:4a:a8:
e9:2b:09:15:b0:3c:bb:58:7b:ed:77:e4:8f:04:f1:
b9:0c:ec:9a:f1:b0:c0:a0:d4:49:b2:11:b9:b9:e6:
3e:6a:82:e2:b3:34:6f:ee:41:9a:68:4c:20:f5:a5:
3f:e6:1a:b1:f7:4d:eb:cc:04:87:9a:56:77:0d:f7:
7d:01:a7:48:c9:cb:12:99:bb:d6:50:a6:f2:7c:d7:
23:3e:8d:68:84:49:d1:38:f2:3d:4f:a0:bb:33:46:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:F9:52:C6:DF:6C:E0:6E:92:A8:3D:9F:55:CE:4B:96:2E:17:5B
X509v3 Authority Key Identifier:
keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a9:a6:56:f4:6c:4e:80:fe:00:ce:b1:91:51:0c:f0:40:63:
34:17:29:4c:74:3f:c9:f4:30:54:4e:7a:91:6e:c1:dc:00:f4:
4f:88:a7:d8:97:bf:e5:c3:7e:65:87:45:6b:ba:18:19:c1:f4:
33:2f:cf:32:e9:02:b5:b7:18:97:78:ca:13:75:58:e8:76:bc:
d7:9d:db:02:9e:f8:5e:77:3c:52:19:d0:86:fa:4c:e1:c0:f9:
94:30:d8:91:85:d7:aa:3c:75:bc:ef:0f:e7:3a:7b:1c:a2:93:
f1:79:55:fb:62:fb:fd:f7:13:39:59:ba:61:8b:b5:c0:50:8e:
ec:3e:0f:bf:6c:b5:4f:86:4e:a7:5a:ef:d3:71:67:61:4b:7d:
a1:7b:1d:43:d0:ca:fe:4b:51:5c:d3:93:92:9e:f1:5d:95:95:
89:dc:d0:52:f0:35:b3:92:b3:fd:35:10:b2:bc:4f:4e:49:a8:
24:c5:f3:f9:d3:3e:16:07:93:ef:a1:83:a2:89:51:0b:07:81:
05:58:df:34:d8:8f:73:05:75:37:02:8f:0b:b4:2e:42:69:47:
1e:e7:5b:fe:79:4f:0b:6b:2b:64:c6:38:6d:66:fb:9c:0a:47:
b7:26:fb:45:3c:37:08:eb:31:80:66:28:88:92:52:e9:04:7a:
33:3a:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:38 2026 by rpki-client