
$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json)
Hash identifier: Ioqq0AtOhpkBbGrxlapaA1mn9q6ZxGB9TNFtxaqU1G4=
Subject key identifier: 34:F2:05:BC:CF:B2:AA:67:6D:08:F2:90:BA:9F:14:D7:67:46:37:50
Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB
Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
Manifest number: 0208
Signing time: Thu 19 Feb 2026 01:44:33 +0000
Manifest this update: Thu 19 Feb 2026 01:44:33 +0000
Manifest next update: Thu 26 Feb 2026 01:44:33 +0000
Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: eld25WiRQ8XSPh2Z+zS/6O+fzyQzlj4wpsIJfFkS4u8=)
2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: INPCDc0DcqgC408Ka6XEyt5LGDqlBDYRzaUMMyrzKIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl
rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB
Validity
Not Before: Feb 19 01:44:33 2026 GMT
Not After : Feb 26 01:44:33 2026 GMT
Subject: CN=69966b01-fadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:67:f3:b5:65:fc:38:05:9d:30:ff:89:86:
9a:aa:e7:39:43:f7:c6:2d:a7:33:c0:c4:e0:f6:8a:
bc:1c:ca:c1:e0:5f:1a:7b:45:ab:c2:81:60:e5:cc:
44:0c:32:17:f4:9d:40:b4:a9:0d:1b:86:64:81:66:
13:0f:68:56:b0:12:60:01:8f:4c:1c:d5:dd:99:f4:
4f:72:0b:bf:f7:bc:f2:b4:58:78:2e:05:bf:41:0c:
89:50:4e:2c:73:d1:cc:a1:1c:1f:65:05:b5:76:ea:
ee:a1:ba:b2:e5:e9:bf:a6:fc:8b:29:5d:79:0c:d3:
c3:59:33:5e:2b:e5:43:3d:a1:46:95:39:f4:9f:0a:
75:52:df:4a:8a:08:fb:38:c0:30:8d:a8:3d:9f:7b:
61:43:bf:cf:50:29:6f:a9:5d:45:18:5b:c5:5c:f0:
e8:92:b4:a6:47:6c:db:b2:f1:c4:42:b1:16:14:74:
02:e2:a7:19:45:98:a9:d7:fd:fe:bd:fa:34:e0:c6:
6d:99:bd:7c:31:95:a7:52:48:30:60:09:2f:16:21:
1b:3a:00:dd:76:03:72:58:7f:ed:c4:01:5a:84:cd:
1b:18:30:9a:43:69:6f:57:2f:4b:3c:77:a7:c5:c8:
9f:9f:2e:fd:ee:53:7d:ce:ea:06:ea:31:01:96:59:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:05:BC:CF:B2:AA:67:6D:08:F2:90:BA:9F:14:D7:67:46:37:50
X509v3 Authority Key Identifier:
keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:36:96:a7:49:64:f1:fa:a6:18:b6:ce:25:b0:75:43:88:11:
5d:39:e8:5e:7c:e9:3c:22:88:0a:7d:e3:0f:3f:bc:6b:ef:e5:
9e:4e:c4:8d:51:4c:e1:27:91:79:a8:76:ae:6c:8c:e0:69:b7:
52:59:90:e7:65:e0:42:74:f0:3d:14:30:4a:68:7d:0a:e5:8e:
78:fb:fa:7d:d3:08:b9:27:94:e3:44:a4:1e:ad:d4:82:a7:a9:
9e:47:6f:6b:ee:7a:b3:3d:37:91:92:1d:4d:98:56:b3:55:57:
2c:a6:f2:74:c1:45:ee:e9:37:53:24:c7:b1:b2:45:8b:9a:56:
a2:24:6e:7e:2d:43:e5:b2:46:5e:fc:40:23:71:f2:6f:1c:3c:
35:73:2c:51:53:d3:ca:56:11:e8:08:de:6e:28:00:0f:73:80:
15:59:b9:c6:5e:d7:36:63:31:cb:62:4f:75:82:3c:71:75:58:
18:f5:8d:64:0b:25:44:09:7e:40:da:ee:bf:d8:f6:9f:bc:0d:
59:67:29:75:bc:94:4e:16:2e:99:18:bd:c6:ee:65:58:cf:94:
fc:26:2e:54:34:7d:f8:6c:62:ac:ae:05:ca:85:a8:3d:c3:39:
b2:a0:25:ad:07:60:78:3f:b2:b9:af:c3:f7:5d:4f:ec:b3:47:
3c:64:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:01 2026 by rpki-client