
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: 0yxLx02xg00uMIvzxTZZkRAfh7dbhcU+2UcEnHouNno=
Subject key identifier: 6A:85:FD:C7:07:6B:9F:CD:87:01:F6:03:AF:67:EA:61:88:DD:23:DF
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: B4
Signing time: Thu 19 Feb 2026 05:37:21 +0000
Manifest this update: Thu 19 Feb 2026 05:37:21 +0000
Manifest next update: Thu 26 Feb 2026 05:37:21 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: PihlmCGUOv4LYwWtvEtuswef986IIEL8f0+zm+rINGE=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: wfDreRJEGF1JW5W3fjwvAomrv9lvr6AoS+ZjgINTuCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Feb 19 05:37:21 2026 GMT
Not After : Feb 26 05:37:21 2026 GMT
Subject: CN=6996a191-7faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:96:fb:61:cb:ce:17:fc:ce:34:f3:c0:58:
91:d5:ae:8d:4e:38:c0:1a:d3:a3:b8:ef:5f:3c:6f:
7a:61:32:2f:c1:c3:95:96:c4:aa:00:9f:45:3f:ca:
7e:d6:b7:64:1e:15:d7:70:c8:78:12:83:6a:11:bb:
6c:67:76:d5:01:e8:47:2e:d2:03:f9:92:70:77:3e:
7b:cf:62:29:19:94:3f:4e:3b:bd:c2:3a:bf:6f:fa:
8f:b6:77:84:29:3d:f8:4b:36:8c:00:f6:79:f9:f6:
52:3a:65:2e:46:9e:c2:7a:db:ce:6b:05:ea:fc:46:
cb:2c:cc:d3:97:6f:f6:e1:8e:0a:0b:d9:01:be:12:
3c:53:67:2f:70:7d:3f:6e:ca:fe:b8:d3:fe:e9:f9:
2e:47:b7:c4:10:cf:4f:a9:c7:77:08:9c:9a:c1:9a:
05:b0:8f:af:ce:34:26:39:60:59:67:37:e4:6f:97:
bd:59:ab:dd:8f:69:f6:5d:e3:94:05:33:2c:aa:90:
69:21:e4:71:28:f4:46:ad:61:6d:b7:da:a7:44:73:
e5:69:31:d6:7a:c2:9e:f6:69:d4:3a:dd:27:d4:47:
64:4b:7c:e9:cc:f6:6e:0e:14:a4:7d:c0:e0:24:38:
c7:63:58:5c:32:02:ca:0f:ce:17:1d:1e:8b:a7:d1:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:FD:C7:07:6B:9F:CD:87:01:F6:03:AF:67:EA:61:88:DD:23:DF
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:32:82:d7:30:24:64:9e:b7:46:7a:13:f7:42:c9:cb:27:54:
5c:7d:83:12:c5:55:69:da:15:bd:c9:8c:7c:e0:b4:f0:df:eb:
6a:ad:d0:63:cd:f7:3e:ab:de:fb:13:e3:07:fd:e2:82:99:44:
5e:53:77:bc:14:c6:fc:37:32:12:99:e5:90:e3:e9:0f:c7:f2:
bb:d4:b0:fa:77:cd:95:fb:69:af:06:13:ff:34:f9:c3:79:e2:
8e:21:67:10:f2:ed:a2:aa:b8:3c:ee:4b:2d:25:81:16:61:13:
4b:5c:cd:d8:2e:aa:1a:8d:0c:c6:82:16:5a:bf:40:47:68:3c:
87:65:fb:e5:85:ee:68:c9:86:75:05:3a:0a:e3:64:d3:2b:6f:
9e:a5:14:82:aa:9e:31:c7:5a:62:78:97:95:c1:af:8b:a2:b6:
b2:55:b0:12:61:60:4f:ee:d9:c4:c9:2f:7b:93:55:96:2f:96:
f9:b5:7b:58:f7:07:02:20:02:92:3a:e0:4c:d7:36:43:d3:30:
68:7a:d6:73:af:dc:d8:08:28:08:5d:c2:42:7e:95:4d:29:62:
36:89:62:bd:bc:e5:f8:c6:5c:24:87:62:4d:46:10:a4:de:39:
21:e3:4f:7b:3b:38:7d:51:82:a2:b2:28:40:36:e6:ed:26:0c:
5a:d6:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:23 2026 by rpki-client