
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json)
Hash identifier: WHBKkPD5wOWKu0eFUJUbJKcFxqdi5RXxfgKRdhvi+ow=
Subject key identifier: 21:C7:A1:08:6D:45:7E:2B:93:A7:71:67:0C:09:E8:0D:10:6F:E9:4C
Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Certificate serial: 0D2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
Manifest number: 0D25
Signing time: Wed 18 Feb 2026 17:43:28 +0000
Manifest this update: Wed 18 Feb 2026 17:43:28 +0000
Manifest next update: Wed 25 Feb 2026 17:43:28 +0000
Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: gDhZMdDd9Mi8irQtLb6HbzJ+cDINaCC3g46BWg7eLzE=)
2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Validity
Not Before: Feb 18 17:43:28 2026 GMT
Not After : Feb 25 17:43:28 2026 GMT
Subject: CN=6995fa40-c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c7:39:68:c0:fa:72:da:74:f6:8c:b7:4f:
7c:d3:84:5b:81:d5:b7:b3:34:44:b1:7e:65:0c:de:
ad:dd:57:a5:bf:26:ed:f8:09:ea:92:30:e7:93:2c:
31:66:ce:a0:4c:3a:a4:a0:40:eb:4e:ef:c4:78:6d:
84:6a:17:21:92:a8:62:cd:c9:54:dd:5e:9e:bd:66:
47:29:f7:75:fb:93:45:e9:a9:db:ab:80:d7:c7:31:
01:68:24:5c:57:bc:64:09:28:27:e2:3c:f8:ed:c4:
63:e4:72:7c:bf:1d:fd:33:07:12:5a:11:48:8b:d3:
c2:14:d4:bb:11:b3:c9:29:70:e7:b5:7e:ec:eb:3c:
2f:14:f9:e5:3e:f8:9b:49:25:7f:3c:49:4f:91:46:
52:e9:f1:8b:3b:b1:95:6c:9d:ed:12:2d:b0:e2:96:
ce:d1:96:ef:1f:df:6e:d6:de:96:68:4d:fd:86:68:
85:a2:a6:0b:72:b5:cb:e1:c4:f7:27:b1:51:9f:5c:
1b:4e:ee:df:0e:11:ee:25:6b:1f:26:b3:58:c8:40:
a4:e1:5c:36:07:d1:03:a8:80:68:77:c6:14:b6:b4:
db:ef:ee:d6:9f:81:cf:07:3f:40:be:aa:9f:91:c1:
45:cf:2b:cd:85:98:06:62:13:32:25:b1:6e:9e:94:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:A1:08:6D:45:7E:2B:93:A7:71:67:0C:09:E8:0D:10:6F:E9:4C
X509v3 Authority Key Identifier:
keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:1a:e2:28:e5:06:e1:9d:af:1b:cb:52:f5:a2:71:d0:1c:
fb:66:eb:5f:0c:bb:f9:3b:d3:94:f9:2b:ed:ba:92:97:19:42:
3f:11:9e:16:24:5b:0f:09:39:13:1d:df:2b:4e:d8:b9:49:b4:
a7:d9:bb:0a:ad:61:1e:aa:67:25:e1:00:5c:1b:3a:f7:68:0a:
a4:eb:e4:0d:b4:6f:4e:87:b5:77:9d:e3:af:7f:ce:c3:f6:2d:
12:fb:52:4b:c0:4c:62:a3:96:01:37:28:74:58:74:91:2c:b9:
4d:dc:d1:20:29:55:0e:73:50:3c:02:b7:72:f1:b7:c4:27:a4:
e3:8a:f8:c3:15:a4:21:8a:78:9d:1d:b4:e5:3a:75:ec:55:6d:
13:c4:ed:f2:1e:7e:8e:3c:ca:e1:cd:7f:68:23:ee:58:71:cf:
a5:bd:1e:26:e1:4a:b1:21:2a:e7:ce:db:ab:64:69:20:77:74:
d4:37:06:ee:3c:52:b7:72:46:8b:3d:b5:ff:9e:22:0a:9e:35:
50:1a:28:6f:74:b7:0f:bf:cd:e1:58:ea:5d:d7:17:9d:e7:d9:
56:c5:95:dc:b0:08:86:50:bb:11:9a:5e:77:b9:c6:d5:83:56:
29:e2:ae:68:92:8f:f6:8c:ee:11:a6:4a:82:87:c9:74:c6:44:
7b:e1:ac:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:17 2026 by rpki-client