
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier: 3IimUK6JWYTjY3DeLQe2IUDAM1yC9qd2rXIkDFac1XA=
Subject key identifier: E9:C0:9C:CF:67:B5:11:C4:88:04:20:4F:6F:71:A3:21:7C:26:A7:D4
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number: 01AA
Signing time: Thu 19 Feb 2026 02:49:53 +0000
Manifest this update: Thu 19 Feb 2026 02:49:53 +0000
Manifest next update: Thu 26 Feb 2026 02:49:53 +0000
Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: ilhOChgvKOsiwdYNVIh/eW382a639XavKo9eJUR1QME=)
2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Validity
Not Before: Feb 19 02:49:53 2026 GMT
Not After : Feb 26 02:49:53 2026 GMT
Subject: CN=69967a51-b5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:14:0e:74:03:9c:94:8e:02:3e:e7:a5:11:
b8:08:1d:e8:b3:c4:24:1b:52:f5:68:b9:f5:16:98:
74:e8:44:5a:ad:67:5f:fb:dc:bd:99:18:d4:66:d4:
9f:d0:ad:99:4e:52:48:5e:f6:42:40:5a:cc:82:4e:
a0:61:fb:d6:2d:85:f1:79:01:9d:0b:10:8a:47:45:
2f:be:35:5c:04:d7:a7:c8:63:e6:a9:ff:26:11:cc:
5b:5d:58:b0:45:22:f2:3c:20:98:e4:a6:02:f0:6f:
ab:f9:e5:72:9c:7c:43:a9:68:14:dc:97:e5:63:27:
d0:b8:83:57:f1:98:77:31:4e:0f:b3:ee:92:0f:a0:
a9:75:f9:e1:bd:52:d6:d5:96:ce:21:f4:25:28:de:
0c:b3:3d:f1:ef:2e:e7:81:fc:16:88:82:f3:48:60:
17:e7:29:4b:96:eb:8a:b2:1b:aa:d7:23:af:44:12:
c4:e2:48:b4:7e:9e:71:f8:7e:18:6e:db:26:90:7f:
28:2c:0c:6f:1f:51:c4:0c:a5:c7:f8:70:e9:3c:14:
16:0b:0a:a1:2b:38:c3:76:cb:2c:6a:f6:15:54:78:
46:a9:71:36:fb:55:76:fb:4a:b9:ff:5f:ea:83:49:
71:cd:77:2c:e4:b3:9d:bc:93:03:be:cc:96:00:6b:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:9C:CF:67:B5:11:C4:88:04:20:4F:6F:71:A3:21:7C:26:A7:D4
X509v3 Authority Key Identifier:
keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:aa:3e:c1:ef:82:e5:70:34:34:2a:ac:4f:c1:15:0c:c5:44:
a7:64:5d:ec:d2:82:19:36:90:6a:d2:22:fe:5e:fb:2b:5f:32:
57:41:5f:d3:5a:93:e0:2f:e1:1d:e0:3f:e2:f3:59:3b:c9:84:
b6:c2:28:8c:5d:4c:72:36:4f:ca:02:bd:8c:47:91:88:0a:8b:
93:f2:47:ab:15:c7:03:4c:6e:ec:dd:88:d8:e1:e8:d4:94:d3:
64:db:47:96:46:bb:47:b2:7a:40:7e:03:2f:20:18:2d:ca:0c:
fd:00:c7:37:f3:18:dd:1c:1d:1e:38:d5:a0:02:50:b3:5a:91:
7d:b6:7a:ba:f9:fd:e7:82:de:1b:d8:dd:88:4a:d2:19:a8:2b:
05:f3:9b:af:95:6d:4e:0d:c6:27:c0:63:15:fd:1a:82:b1:fa:
75:b6:32:71:d4:60:be:ba:e5:c9:e3:86:7e:cf:d5:e8:7b:2c:
80:6b:84:5f:c6:75:a0:71:84:96:26:1c:80:07:df:25:81:a5:
7b:5e:99:7b:ac:3d:37:b0:37:0f:a9:a6:ee:f8:4f:c3:8a:ae:
4d:fc:41:d2:c5:dc:81:32:20:f3:a2:05:75:f1:33:95:5a:e6:
6f:02:e6:b6:cd:38:80:7f:0a:16:78:ad:47:87:80:12:b0:3f:
f6:55:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:00 2026 by rpki-client