
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json)
Hash identifier: LMSVAdWXVxpK3oxx1q51OvFNanuZr8jgFbUSA4lo2rU=
Subject key identifier: DB:7E:0C:D2:73:8C:66:F6:F9:1D:A5:F2:8E:CC:6C:3F:10:B9:03:DF
Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
Manifest number: 25
Signing time: Thu 19 Feb 2026 07:02:04 +0000
Manifest this update: Thu 19 Feb 2026 07:02:04 +0000
Manifest next update: Thu 26 Feb 2026 07:02:04 +0000
Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: 2YQcAtRV7kyrhbT2VCLOUEx8/4vC7+SEjdmjOK70CfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Validity
Not Before: Feb 19 07:02:04 2026 GMT
Not After : Feb 26 07:02:04 2026 GMT
Subject: CN=6996b56c-3f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:23:76:be:85:50:74:24:30:b8:24:c3:4e:
8e:7b:46:7c:5e:1f:87:16:61:df:ba:21:e1:f4:a9:
72:6e:2b:0d:bb:66:88:6c:0a:64:c5:f7:0b:43:70:
12:27:dc:c0:c4:4b:47:d5:43:d0:90:8c:c4:b1:26:
e7:25:a5:5a:d8:8a:75:40:d1:70:4c:68:72:dc:cc:
0d:60:0b:cb:14:df:01:f5:af:ba:97:32:f4:4a:81:
41:75:e0:a3:de:c8:6b:06:ea:fb:ce:43:9f:a7:2e:
2c:6c:4d:cb:82:cc:11:90:b9:61:4e:9f:c3:09:25:
13:15:95:0a:09:c9:1a:92:7e:36:59:88:c5:ca:52:
65:e9:03:5d:81:36:60:6c:75:18:cf:61:60:3e:ea:
c0:bc:a4:49:57:33:ec:41:ad:e2:fc:00:ef:03:40:
a3:00:9e:ee:32:7e:4d:df:ab:43:5d:07:0c:ca:c4:
ba:27:3a:6b:36:5a:7f:9f:1a:18:e5:2c:cf:00:31:
0b:61:99:87:55:de:39:bd:12:c9:b4:7d:ea:f3:3c:
13:fd:fd:8c:8f:8d:3a:b5:cf:df:ef:df:ee:63:b6:
97:cd:12:4b:1e:39:e4:48:e6:93:50:2c:77:ff:57:
d5:eb:59:ae:68:d1:d9:32:ea:f6:b9:2e:e2:cf:80:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:0C:D2:73:8C:66:F6:F9:1D:A5:F2:8E:CC:6C:3F:10:B9:03:DF
X509v3 Authority Key Identifier:
keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:1d:53:73:1f:76:7f:c9:43:08:ef:26:b5:81:2d:bb:6b:
34:87:f0:a6:ec:4f:b2:e1:1b:df:e6:be:76:6b:3e:23:d9:99:
97:8b:1f:0b:63:72:72:08:37:c1:a0:28:ce:8a:2e:38:8a:52:
af:3e:86:5a:8f:fe:66:4b:4a:03:87:c8:9b:73:70:c0:a7:b4:
e2:9a:cd:fe:73:60:2e:7a:83:88:e4:f8:7b:d6:a7:3a:11:d8:
82:a6:e4:7b:c0:96:09:3f:b2:53:96:16:a3:a5:b6:d3:f7:ed:
a8:03:09:5c:ad:3f:7c:a7:0c:20:0b:99:e4:f8:7f:49:60:9a:
23:a9:fd:02:49:5a:e4:4d:2c:32:c6:52:5f:0e:0d:0e:ab:af:
db:c9:c9:30:ed:db:ca:31:51:47:d8:99:66:18:7c:c8:f3:5b:
51:fb:40:e3:8f:5d:b8:49:db:bc:86:2c:16:43:3c:64:4e:56:
81:3a:e8:f7:42:85:5a:c5:5e:17:38:78:08:18:49:21:77:b9:
42:70:ba:8c:cb:64:38:26:5b:6a:12:a4:4d:da:7b:de:f3:0f:
a5:a4:1f:69:98:70:98:fa:58:72:40:51:38:29:94:bc:a8:0f:
0b:48:e6:9a:f4:f4:22:1c:df:59:e2:fd:cc:be:33:fe:d1:df:
6c:21:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:23 2026 by rpki-client