
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier: TtBoGJZhkCF9Dpd1miZt8/qfFiLR3l+pbb1atI6nbZo=
Subject key identifier: 31:56:1C:DA:28:60:32:51:A4:A7:1A:22:68:2A:5A:A0:D1:AA:DE:79
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number: 01F6
Signing time: Thu 19 Feb 2026 01:54:50 +0000
Manifest this update: Thu 19 Feb 2026 01:54:50 +0000
Manifest next update: Thu 26 Feb 2026 01:54:50 +0000
Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: vlaG/0yvfg8wWdOhFYA+BijOgYaAspygmf7CRNvwQME=)
2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Validity
Not Before: Feb 19 01:54:50 2026 GMT
Not After : Feb 26 01:54:50 2026 GMT
Subject: CN=69966d6a-dc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:f7:e1:2b:bd:ef:71:47:5e:1f:8e:bf:75:
06:df:9f:87:16:26:5b:56:4f:46:33:b3:37:8a:98:
ae:01:de:b5:a0:4c:53:d8:6c:e3:c6:46:90:ae:ca:
5a:ed:4f:77:ca:96:da:6c:2c:ad:a9:71:8e:12:11:
cb:03:8d:44:7a:cf:cd:35:1c:25:f9:7e:bc:e7:2a:
10:c6:1e:59:16:b0:5d:68:62:43:6b:8a:c7:aa:b8:
02:1b:34:2f:4c:b3:33:9a:c9:80:72:f7:6b:fa:a2:
4a:ec:38:3b:a9:8d:3e:be:8a:9d:2c:d7:a2:1b:cf:
43:c6:a2:b1:88:c6:1b:0f:a9:16:ad:fe:65:ac:ca:
f6:eb:eb:9e:58:2c:b3:20:a8:f4:d9:33:4b:0a:fa:
9b:34:3d:82:66:66:5f:29:b9:d9:eb:6c:d1:e7:ef:
72:cb:a4:7a:c9:cc:7a:d9:ab:9d:6f:81:67:fc:eb:
ea:4d:22:53:13:db:75:26:0b:a5:e3:d8:5d:09:19:
0b:f6:90:12:b5:24:99:bc:7a:83:e0:50:ce:54:49:
8f:b3:82:3b:da:43:ef:f5:ba:de:22:bf:4c:7d:d6:
5f:f0:d2:85:8c:a2:5c:ee:63:4f:27:ea:5c:17:c0:
fd:13:c1:fc:17:b6:2e:ee:0a:1e:13:05:2e:1a:ae:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:1C:DA:28:60:32:51:A4:A7:1A:22:68:2A:5A:A0:D1:AA:DE:79
X509v3 Authority Key Identifier:
keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:56:59:fe:ff:bd:3f:30:51:b0:19:54:71:b7:89:1a:55:2b:
e1:e6:af:fb:31:69:54:e5:39:29:97:54:be:63:90:a2:07:63:
eb:a1:83:aa:25:f9:86:12:56:26:80:6b:36:b1:d1:f9:9a:ab:
56:4a:41:a8:c9:5f:db:9f:6e:63:15:c5:37:c2:9d:29:38:6a:
89:64:50:8d:c6:61:99:6a:d4:4c:37:43:a7:07:e5:f5:ec:79:
64:36:a9:bd:b5:4b:83:ac:33:0c:75:99:38:24:da:ef:86:30:
c3:84:4f:96:56:83:69:21:18:64:c6:6d:f6:4c:ce:6f:25:b6:
ab:32:f2:1c:53:06:60:2b:9c:e2:e4:32:3b:fb:b8:50:bf:51:
d4:2d:b7:8e:37:c8:8f:09:07:96:ed:25:24:6b:28:54:b0:88:
5c:ca:c0:a3:24:7d:ed:03:95:df:86:ce:45:8d:2d:3d:a3:98:
5f:3f:a3:04:26:31:64:35:23:6c:36:94:5d:24:a2:5f:2e:51:
43:95:3d:d2:dd:3f:33:9f:7a:9b:3f:d0:51:70:9f:c4:70:4e:
5b:ef:7c:4a:bd:85:da:77:e1:97:c2:57:09:12:1b:ed:e7:b0:
31:64:9c:63:c8:34:4e:1a:88:07:e1:c5:af:78:68:ea:29:85:
4d:3f:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:28 2026 by rpki-client