
$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier: 5RGqQshORG77L9mZjh+qvwTAXomKwhd386iEHZzoGE0=
Subject key identifier: AA:C1:E4:7F:83:4D:5F:62:8D:88:99:EE:57:F8:64:79:12:62:72:BF
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number: 0D84
Signing time: Wed 18 Feb 2026 17:39:12 +0000
Manifest this update: Wed 18 Feb 2026 17:39:12 +0000
Manifest next update: Wed 25 Feb 2026 17:39:12 +0000
Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: jmWYCepCtlV3sT9FDs7nM5u8ypdgMba1K/vqhM9FpWU=)
2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Validity
Not Before: Feb 18 17:39:12 2026 GMT
Not After : Feb 25 17:39:12 2026 GMT
Subject: CN=6995f940-7427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:f7:45:77:1b:09:e5:02:c9:b0:fb:ad:8c:76:
41:3f:36:78:ec:88:e4:00:9c:20:54:5e:d5:a8:15:
aa:85:43:14:2e:36:92:c1:d2:25:fd:ec:64:05:4f:
d5:02:85:df:53:56:1a:06:99:32:e2:23:39:7f:4d:
ed:ce:de:d8:f7:5e:c4:94:c6:dd:e6:f5:5a:99:93:
47:de:f7:5f:93:7b:11:be:c1:b7:de:3e:41:d3:b6:
10:a1:6b:d4:96:6a:cd:66:1a:bd:62:2e:7e:cc:33:
76:9d:c2:9c:81:38:da:ba:10:ad:22:39:08:d6:01:
5b:25:15:0a:42:42:55:cf:20:8f:7d:01:fc:36:07:
cf:82:47:41:64:c1:11:a6:70:ce:45:99:12:8b:77:
38:ca:86:b6:ce:9c:af:98:89:67:13:f1:d1:2a:65:
32:a5:11:6d:9d:9a:70:5a:4b:6f:ff:6c:5c:84:4e:
af:a8:cf:1e:d5:c2:6c:84:9a:75:62:a4:e6:5f:a2:
b9:13:2a:84:b7:4b:7f:62:68:e1:59:5b:0f:23:96:
17:bf:39:37:81:6f:b0:77:3c:1a:02:9b:78:84:d3:
36:77:d1:1b:31:44:4e:6c:a8:c2:f3:dc:18:da:b9:
bb:b8:f0:a6:7a:d2:cf:6e:0e:76:af:7c:23:35:5f:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:E4:7F:83:4D:5F:62:8D:88:99:EE:57:F8:64:79:12:62:72:BF
X509v3 Authority Key Identifier:
keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:1b:1c:c7:b6:4d:c4:d1:ec:a5:bc:1c:52:5c:91:45:a4:79:
ab:26:52:88:d9:27:24:68:a3:7e:78:b3:7e:9e:a9:b3:e9:a5:
4b:9b:de:bb:69:21:a2:55:fa:c6:8a:73:91:84:25:b3:4a:41:
8b:1b:98:a0:fe:e2:7a:c7:4e:69:f4:73:4a:b2:87:62:5b:0b:
41:33:57:bf:0c:fc:1b:7a:b5:8f:22:d7:84:57:5f:9b:e7:9b:
a5:ff:ba:c9:17:92:1c:20:ee:d1:8c:ff:b6:7b:40:b0:5e:bc:
43:d8:40:8c:c4:80:0e:9b:5f:66:d8:63:c5:a4:11:25:29:49:
b2:d9:54:62:7b:85:5a:90:3f:ea:0c:5a:11:d4:8e:f0:e7:26:
53:cd:cd:c3:1d:3b:1d:65:1f:68:e9:0b:fa:35:d5:3a:9c:fa:
85:28:6f:e4:7e:91:c6:d9:04:d3:0b:55:62:b2:39:24:dd:cc:
d0:7e:0e:b0:01:54:f8:89:13:08:ec:fb:6d:1d:8f:2d:a4:b5:
5c:ff:ff:cf:db:a6:b9:dc:2d:df:a9:63:84:7a:f3:23:0f:54:
12:e7:d5:19:a1:6f:6e:91:15:dc:89:f2:2c:61:28:74:2a:bc:
74:35:12:08:b3:83:38:34:19:18:2d:6b:07:a6:4c:24:5a:8a:
42:3a:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:47 2026 by rpki-client