
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json)
Hash identifier: tfSAZsus6q5pXCOAcWCkwkaP+RgZi29279rr1YmJcxs=
Subject key identifier: 39:56:E2:62:31:0B:36:D9:F8:C4:09:D9:E7:CC:95:4D:6E:69:2D:31
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
Manifest number: 0117
Signing time: Thu 19 Feb 2026 04:16:09 +0000
Manifest this update: Thu 19 Feb 2026 04:16:09 +0000
Manifest next update: Thu 26 Feb 2026 04:16:09 +0000
Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: XiuWBWvkLLYSuG5fVY4zHJkYA2tkLyvElI8YGHM7m6E=)
2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Validity
Not Before: Feb 19 04:16:09 2026 GMT
Not After : Feb 26 04:16:09 2026 GMT
Subject: CN=69968e89-a227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:85:78:68:5b:9b:3b:a6:99:62:95:2c:99:
f3:0e:4f:b6:8d:5e:f8:ff:55:65:3a:bd:eb:bc:90:
ce:8b:a5:b6:4d:ab:5e:06:74:a9:f4:01:4b:73:89:
8a:f1:08:10:dc:a8:4f:bb:96:0f:8e:cc:92:c3:15:
a4:76:56:b7:de:91:ca:ee:5f:a9:cc:4c:fc:8d:3d:
a6:bb:77:ec:14:66:2b:db:b8:fa:87:30:85:78:48:
22:1e:9f:16:a3:ba:d8:7b:42:dd:6b:eb:80:d5:a1:
48:ce:cb:f3:d5:ab:3e:75:1d:0a:f6:17:5b:8e:06:
9c:44:75:c0:5d:09:b3:d0:b6:65:a3:69:ba:8e:16:
b7:cb:81:8f:df:74:53:99:dd:6b:61:52:2a:8b:1d:
f6:d0:90:a0:dd:9c:63:e2:91:9d:b4:5a:ab:25:11:
a7:9b:e5:e4:36:bd:97:8c:f3:a9:3d:08:5b:41:ea:
52:33:f2:f6:3a:35:25:32:45:97:cd:62:70:b1:32:
a1:e0:70:9b:ff:04:61:2d:af:6e:53:27:bb:35:f3:
dd:f7:8c:38:b6:93:55:2f:cc:3a:28:84:ac:01:b5:
a1:8b:85:87:ae:10:ae:0e:a8:e9:4c:25:c6:39:a5:
07:8e:e4:69:4c:71:96:95:86:ca:4b:44:d2:08:a0:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:E2:62:31:0B:36:D9:F8:C4:09:D9:E7:CC:95:4D:6E:69:2D:31
X509v3 Authority Key Identifier:
keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:f0:85:af:23:07:31:c7:c2:40:b0:49:a3:95:df:96:7c:
88:d4:18:6a:84:9e:69:7d:5f:8e:d5:3f:08:3f:e3:1f:24:43:
ab:5f:a2:bf:72:f9:32:2f:22:6e:3f:85:d4:90:b0:81:66:97:
12:bd:3b:5f:04:08:ac:3b:63:a2:c6:29:ce:e9:6a:04:c0:de:
b0:28:02:99:70:db:fc:ac:a9:5e:0d:7d:dd:cb:c9:df:82:92:
e9:8f:c1:49:ba:c7:9b:05:d7:02:06:8f:cb:bf:ec:8c:24:3c:
18:eb:d0:28:a2:bb:1a:83:6c:7f:91:c3:1c:32:be:79:00:f6:
78:9c:3c:63:1e:35:c8:1f:22:48:86:6d:b9:a7:5c:f9:e5:ac:
16:85:d0:67:b3:6a:ac:67:9c:9e:69:0e:2d:9b:0b:b2:3c:e1:
01:fa:53:72:3d:a8:87:ab:7e:47:3e:76:e8:f1:a7:b6:53:8d:
cb:70:a2:1b:ff:c8:90:d9:8c:1f:3e:18:3b:72:92:00:da:7b:
da:5f:af:ae:eb:24:44:a6:f1:0b:2a:d6:7b:01:c4:a3:a5:0e:
db:06:3e:a2:d6:97:d0:bf:b2:d3:5a:35:e0:b0:68:9d:1d:59:
e2:2e:de:ab:37:92:66:93:90:81:5a:d5:80:93:40:8c:9e:83:
55:a6:c4:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG
QUE0QjIzNTcwHhcNMjYwMjE5MDQxNjA5WhcNMjYwMjI2MDQxNjA5WjAYMRYwFAYD
VQQDDA02OTk2OGU4OS1hMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/qFeGhbmzummWKVLJnzDk+2jV74/1VlOr3rvJDOi6W2TateBnSp9AFLc4mK
8QgQ3KhPu5YPjsySwxWkdla33pHK7l+pzEz8jT2mu3fsFGYr27j6hzCFeEgiHp8W
o7rYe0Lda+uA1aFIzsvz1as+dR0K9hdbjgacRHXAXQmz0LZlo2m6jha3y4GP33RT
md1rYVIqix320JCg3Zxj4pGdtFqrJRGnm+XkNr2XjPOpPQhbQepSM/L2OjUlMkWX
zWJwsTKh4HCb/wRhLa9uUye7NfPd94w4tpNVL8w6KISsAbWhi4WHrhCuDqjpTCXG
OaUHjuRpTHGWlYbKS0TSCKDMkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlW4mIx
CzbZ+MQJ2efMlU1uaS0xMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0
RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH
QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBP4PCFryMHMcfCQLBJo5XflnyI1BhqhJ5pfV+O1T8IP+MfJEOrX6K/
cvkyLyJuP4XUkLCBZpcSvTtfBAisO2OixinO6WoEwN6wKAKZcNv8rKleDX3dy8nf
gpLpj8FJusebBdcCBo/Lv+yMJDwY69Aoorsag2x/kcMcMr55APZ4nDxjHjXIHyJI
hm25p1z55awWhdBns2qsZ5yeaQ4tmwuyPOEB+lNyPaiHq35HPnbo8ae2U43LcKIb
/8iQ2YwfPhg7cpIA2nvaX6+u6yREpvELKtZ7AcSjpQ7bBj6i1pfQv7LTWjXgsGid
HVniLt6rN5Jmk5CBWtWAk0CMnoNVpsSx
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:03:45 2026 by rpki-client