
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier: e1hV9kmSWTVOzMU/ht25wZagtlhu1c1ouM/xRKNTP+k=
Subject key identifier: FB:13:31:9B:44:59:6B:B2:A1:92:93:37:1B:1A:F7:16:EE:BE:46:B0
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number: EE
Signing time: Thu 19 Feb 2026 04:46:54 +0000
Manifest this update: Thu 19 Feb 2026 04:46:53 +0000
Manifest next update: Thu 26 Feb 2026 04:46:53 +0000
Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: adutvfpa3184iCeSqjpmZtwMvz/7NcoXgJDNrIhf8JY=)
2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: ceTwvMYwQqsLHm4yTmcf0XG7NHCl6BydA2YN+2QfQZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Validity
Not Before: Feb 19 04:46:53 2026 GMT
Not After : Feb 26 04:46:53 2026 GMT
Subject: CN=699695bd-ca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:68:e2:e6:63:fc:2c:a4:14:e2:31:e6:0d:
55:1a:aa:2b:47:91:3f:8c:f0:48:df:21:98:e0:3e:
dd:3a:66:09:c3:72:02:34:24:7d:c9:42:6b:06:97:
b2:6f:63:51:32:8a:3f:52:23:a5:79:69:4f:04:42:
b7:4d:7f:9a:15:e5:cd:05:03:a8:10:57:95:4f:d7:
01:1a:51:da:60:1f:97:cf:d5:b3:52:92:7f:24:08:
92:7a:c5:45:60:82:42:a1:78:b8:9b:0c:0d:ea:6b:
13:34:c9:cd:c9:0b:fb:7a:c2:72:27:0a:b6:8d:5a:
e3:e8:8f:49:c5:9c:8a:07:ee:b5:2f:de:f7:5b:45:
aa:e8:7d:eb:ae:be:5d:8e:13:fd:0c:b9:ae:95:6f:
00:21:0f:b9:8a:e0:2e:e1:39:fd:25:21:93:c6:a9:
51:53:68:dd:cf:a2:7a:8b:48:d4:5b:c1:31:e9:ae:
bc:e8:ae:a3:9a:0d:14:18:a7:8d:16:77:d9:17:f5:
3b:ac:1e:df:16:e5:76:b6:90:46:bc:b1:72:4e:b6:
f1:6c:9c:ab:53:d5:33:f7:95:b6:d8:64:c3:40:6e:
97:cc:b2:03:19:e9:dd:3a:b7:03:8b:18:f5:18:7d:
d3:39:2a:72:35:c7:f7:1f:dd:fb:a0:e5:e1:ee:08:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:31:9B:44:59:6B:B2:A1:92:93:37:1B:1A:F7:16:EE:BE:46:B0
X509v3 Authority Key Identifier:
keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:86:9f:6d:a8:43:0a:25:35:95:27:f4:3b:ed:96:4e:62:7c:
ff:c4:72:74:55:d1:92:1a:32:b2:f0:32:49:b7:1d:da:f7:d8:
c7:66:47:b5:23:a8:ce:19:44:6f:6c:b5:75:c7:52:39:ad:9a:
bd:72:a0:30:3c:45:e4:80:8e:dd:2b:8b:b1:54:42:c1:f8:c9:
7f:85:56:0f:75:c6:7d:f9:5d:ba:29:eb:a6:00:b0:ee:cd:79:
d6:28:17:dd:89:59:1c:52:09:fa:7f:bd:e3:38:f0:53:16:1c:
14:99:79:40:f1:b7:91:ee:ed:dc:d7:bc:73:a4:dc:29:70:92:
75:bc:cd:78:9c:8e:2a:ca:f5:f2:bf:e1:b3:2b:59:0b:af:fc:
88:2b:0d:bb:bf:b6:d3:1a:47:ce:43:92:75:e3:3a:e6:02:d5:
e3:5f:89:54:d4:02:d8:7a:cd:58:a7:d5:60:e8:34:d1:82:70:
96:8d:a7:e7:e3:d9:67:9c:03:9f:69:b8:8c:42:c2:19:59:2b:
f2:5e:37:12:7a:f1:7c:4a:6e:f7:eb:25:24:e4:d6:15:cc:99:
16:38:9e:17:df:12:41:b2:68:a5:99:db:03:cc:ab:8d:56:8e:
8e:75:3e:24:38:c6:82:2b:07:65:9b:a0:39:b6:c6:bf:55:c2:
d7:7b:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:30 2026 by rpki-client