
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json)
Hash identifier: P8ma42ao4RKQ7KbD4aTW+UsrxqHyz1ob1Sjdm/g+V5Q=
Subject key identifier: 6F:1D:B9:2D:38:D6:A9:CE:C5:74:C0:14:41:85:70:12:A8:2E:C8:30
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial: 04BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
Manifest number: 04B2
Signing time: Wed 18 Feb 2026 23:14:03 +0000
Manifest this update: Wed 18 Feb 2026 23:14:02 +0000
Manifest next update: Wed 25 Feb 2026 23:14:02 +0000
Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: hhr5TdeYWeQzFZeityLFprLa7A3mjW0NiK+aqJhIMWY=)
2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: WCMKfsm9/EeBkBa5cFgOrZbAGuLyEt0uGvg0UunKLIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Validity
Not Before: Feb 18 23:14:02 2026 GMT
Not After : Feb 25 23:14:02 2026 GMT
Subject: CN=699647bb-c00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:36:36:be:fd:9c:a6:bc:3b:7f:2f:bb:1f:
9a:4f:bf:cd:ba:87:f1:c8:01:2f:3d:ae:bd:e8:df:
09:8e:86:0e:1d:a8:5e:7c:56:03:37:68:27:e6:d7:
fc:b0:07:b2:fa:f2:71:87:58:7f:91:2d:c7:3d:fe:
ea:81:ad:c1:54:9f:18:e6:34:2c:ca:43:a9:0f:70:
b8:c3:9a:3a:20:c3:7f:9b:dc:e3:ed:0a:34:ee:5a:
66:fb:d8:ac:02:fa:1e:23:4f:cc:1e:5e:24:1b:ae:
54:af:55:60:64:24:ab:68:20:e1:44:14:68:e5:2c:
2e:9d:31:77:6e:30:25:e5:f8:e7:2d:75:1d:eb:48:
25:f7:56:4f:7b:96:b3:b2:ef:3b:2f:a2:19:30:2d:
b0:07:fc:78:bd:6a:46:55:ff:cb:4c:55:de:9c:b8:
1e:62:bd:2b:ca:20:34:58:b7:bd:37:85:9d:83:eb:
b9:99:09:e0:ef:0d:5e:63:f1:35:ac:69:ce:af:2e:
fb:98:ba:5d:4c:7d:bf:ca:f7:81:24:51:1d:cb:fa:
b4:7e:61:5f:98:88:3f:d2:22:fb:8f:09:59:7d:6f:
b8:04:2b:8a:ba:44:21:a7:1a:94:f5:a0:5b:a6:d4:
60:7a:bd:16:a4:df:b8:d3:4c:7b:71:b6:9a:e9:a6:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:B9:2D:38:D6:A9:CE:C5:74:C0:14:41:85:70:12:A8:2E:C8:30
X509v3 Authority Key Identifier:
keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:9e:c1:34:75:a3:29:e7:6b:63:83:8f:52:6d:f0:95:ff:ec:
47:f3:35:25:38:53:b5:9c:33:86:5a:ad:60:14:01:bf:e7:c8:
84:8c:17:1e:91:b0:16:57:8a:01:28:b5:e4:98:04:3a:0d:20:
ab:88:33:a9:2d:86:5f:0d:be:bf:be:31:24:f9:83:57:e8:16:
9d:4a:0c:52:ad:00:23:11:7e:cc:9a:1b:c9:8c:1f:43:6f:e6:
46:2c:ed:92:66:dc:7c:44:0e:ca:5e:8b:f1:60:ae:3c:0a:a7:
48:90:5a:8b:c2:6f:39:e5:f7:aa:13:e0:b1:e2:80:e6:4f:4b:
f5:17:69:6b:61:16:7e:46:27:b5:b1:fd:43:65:26:4d:c7:6e:
93:51:d4:10:b9:db:55:ab:ff:14:44:9a:22:0f:ce:b2:c7:0a:
35:74:cc:c3:68:07:d0:33:b0:c5:9b:52:c0:e5:fc:db:04:b7:
54:d5:c1:7e:29:bc:5a:f2:50:8a:63:e2:17:12:64:e9:25:57:
43:4b:8d:99:31:8d:30:3c:6e:d4:b2:49:64:83:96:79:90:49:
b9:96:99:eb:87:61:b3:8f:ac:9e:ec:4b:43:41:15:b2:62:78:
ae:57:ac:b5:47:6f:ff:1b:e1:e9:83:83:97:d6:7f:6e:06:93:
de:08:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:52 2026 by rpki-client