
$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json)
Hash identifier: XOGxrOUSPY4QXZhvsMP1eI2eJd8yyxPdbl4MNmoM5pQ=
Subject key identifier: 94:51:84:2B:94:19:35:C8:3D:F1:60:92:E4:0D:13:97:41:AA:13:02
Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
Manifest number: B3
Signing time: Thu 19 Feb 2026 05:39:36 +0000
Manifest this update: Thu 19 Feb 2026 05:39:35 +0000
Manifest next update: Thu 26 Feb 2026 05:39:35 +0000
Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: lBj7KLbFj6e33UPHWExRp76sTI5UnuwMY30vaxOuAgs=)
2: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: vb7fSe4hGTfYiR3X8s03oFhLsFFESwK0obRkUpL5Xz0=)
3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: 9g7lOOD5JnVMfPoV+CkyAbWN9NrLgMODndTwuqHyDZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Validity
Not Before: Feb 19 05:39:35 2026 GMT
Not After : Feb 26 05:39:35 2026 GMT
Subject: CN=6996a218-c3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:5a:65:81:61:eb:f2:51:c8:69:e4:e5:88:
cb:c7:01:af:8b:d2:c9:1c:43:45:6d:34:40:7b:4a:
60:3e:28:43:07:76:27:70:fe:0c:be:7d:79:30:ea:
12:16:37:51:bd:0b:6c:0e:8e:9c:ef:06:c2:fd:79:
6e:3b:61:17:52:a6:bc:da:29:b8:0d:f8:fd:05:24:
05:4a:c1:56:65:3e:21:35:9d:39:e0:c2:99:71:a9:
c7:30:d8:79:a2:9d:f7:43:71:97:2d:51:7d:99:63:
f8:b0:f4:cb:3e:37:e6:0c:d0:43:3e:31:cd:94:13:
c3:63:2d:a9:f2:22:e6:7f:6e:fc:43:59:72:a8:ea:
4c:4e:f1:a7:24:5a:b1:a4:7d:21:45:dd:25:89:81:
68:bf:31:78:16:27:b8:b9:4f:84:73:57:00:33:5a:
ad:4b:0f:79:bb:46:d7:cf:1b:d7:89:5a:88:6d:d2:
9e:a5:c3:ed:4c:cb:f4:c5:fb:10:e7:c8:35:8e:cc:
ab:5d:44:62:1c:a1:8a:53:ea:cb:18:4d:51:bf:9b:
5b:a1:12:e7:a7:bd:02:a3:c1:6d:f0:d7:f0:4d:d5:
f9:15:da:f8:8d:dd:b0:b3:3d:60:5a:9b:57:32:4a:
b8:12:2d:88:4c:bc:30:e4:6a:03:12:d5:78:8e:9e:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:84:2B:94:19:35:C8:3D:F1:60:92:E4:0D:13:97:41:AA:13:02
X509v3 Authority Key Identifier:
keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:61:53:db:27:7b:0a:36:b8:e2:55:2c:88:7e:0d:dc:c1:92:
b3:81:df:b3:b3:0c:c1:97:2f:2e:15:0d:10:c2:d1:3b:ab:eb:
cf:fa:69:9d:6e:de:75:1b:f7:c0:47:10:0c:7b:45:b7:82:e6:
67:ed:c4:f9:a2:4e:e2:c2:ce:38:fe:80:1c:0f:59:17:b1:c9:
4d:38:c6:b3:c9:7d:54:3b:23:52:01:38:43:78:86:59:e5:01:
30:ab:61:cc:43:e9:98:30:95:86:ba:93:a3:4d:ed:5a:7b:82:
3b:f5:0c:c0:5f:ef:25:2b:ba:21:70:bd:54:89:57:ab:80:6c:
a6:01:85:4f:10:ee:88:2c:be:11:1a:fb:42:74:84:24:a5:06:
85:da:fc:68:82:87:fa:49:23:6e:95:46:f5:f8:c3:3c:3d:b3:
07:7f:aa:3b:41:a1:45:c4:75:2c:51:9d:85:eb:73:1b:58:b7:
8c:ac:2a:f8:d3:a4:3a:4e:39:4b:83:75:40:04:83:12:fa:76:
bc:32:d5:78:05:0e:35:a9:97:bb:a5:b6:6d:b8:a7:3d:d3:50:
17:e4:40:0a:7d:59:bf:19:64:33:5b:da:3a:26:d2:29:97:7d:
1f:a2:9b:91:f4:8d:97:6a:28:16:d1:db:8f:2c:19:3e:18:63:
2a:b6:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:48 2026 by rpki-client