
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
File: U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft (raw, json)
Hash identifier: 9Zv4+sFI/WbzCmUGMuKSXM5M9oTaitHIHEA5u4d/SHQ=
Subject key identifier: CF:3B:57:41:7D:9B:AA:F5:41:FA:C8:E5:4A:35:C3:2C:BA:07:CA:BB
Authority key identifier: 53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
Certificate issuer: /CN=A91736BD/serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
Manifest number: 025D
Signing time: Thu 19 Feb 2026 01:00:12 +0000
Manifest this update: Thu 19 Feb 2026 01:00:11 +0000
Manifest next update: Thu 26 Feb 2026 01:00:11 +0000
Files and hashes: 1: U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl (hash: tWyqfjlJnkY6+wiOMZ8P3IyM2hDQV0sUioHcWfOMoQQ=)
2: EB8C9B546EE911ED8F07B022C4F9AE02.roa (hash: SPhefyMCy54NrJBBaZQ3gOJXpce+jtxSLdt2uoVKWJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736BD, serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Validity
Not Before: Feb 19 01:00:11 2026 GMT
Not After : Feb 26 01:00:11 2026 GMT
Subject: CN=6996609b-5148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:bb:d8:b8:42:03:d0:0d:fe:4b:16:c5:43:
d6:18:c7:05:87:32:b9:a1:b1:a5:dc:db:65:a5:8c:
69:bf:40:3d:c6:60:f0:d5:7e:f2:eb:97:28:9e:83:
cf:e4:32:80:39:36:dd:8d:0c:da:c9:d2:9d:3f:b0:
71:a4:a1:92:8f:d1:5e:95:96:27:0d:88:96:ee:65:
92:16:9b:4e:0b:c0:79:dc:c7:fa:04:5b:3f:e5:05:
80:b5:4c:f9:64:ef:81:d0:fb:11:88:75:1d:c2:b6:
d7:2f:6f:83:28:8c:19:e0:9e:c1:92:2f:69:49:fb:
90:08:7e:af:3c:6c:c9:cc:0e:81:02:66:1b:96:9a:
9d:e3:cd:71:c6:90:cd:21:3e:24:db:c8:f7:f1:a0:
1b:be:c3:a6:c7:bb:d2:df:2b:46:f2:27:b3:8e:e1:
b5:29:76:5f:fe:a3:02:59:ed:7a:dc:35:1a:78:43:
80:d6:ac:4a:de:57:70:b7:4e:95:73:6e:00:c9:49:
6e:c4:f5:88:36:9e:73:db:7a:c3:3e:3a:a4:f0:cd:
ab:5c:35:68:5b:f3:48:a7:00:06:83:83:b0:15:ee:
6e:4a:ae:0f:4e:8a:1f:e0:76:1f:f9:c4:98:87:de:
df:b7:0d:2e:b1:43:0b:ad:e1:5c:82:82:65:b6:94:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:57:41:7D:9B:AA:F5:41:FA:C8:E5:4A:35:C3:2C:BA:07:CA:BB
X509v3 Authority Key Identifier:
keyid:53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:90:21:40:77:01:f8:1d:98:ae:56:93:b8:65:ba:33:8e:b3:
08:89:a0:64:9f:9e:94:37:5e:28:60:fc:9c:fa:be:cb:ab:b0:
41:cd:b0:33:99:d1:81:aa:5c:30:2e:f7:92:86:8d:4e:2c:57:
7f:a8:5a:d0:df:b5:02:3a:a5:f0:22:e0:c7:a9:7a:a1:56:20:
32:97:7a:ce:61:b8:40:d8:25:37:fe:6c:1b:44:af:2c:a1:8a:
2b:b1:46:b1:77:49:94:e1:7e:d4:05:ba:1f:85:12:2b:95:3d:
c4:b2:31:0b:4b:dc:38:b9:cc:46:f4:90:d1:bf:b0:ca:77:41:
30:55:83:45:f5:a5:00:7d:e1:87:ea:0d:1c:c1:70:7e:81:b9:
cd:13:ea:5f:2e:3d:84:14:2f:af:de:8a:78:cf:26:f5:25:89:
35:3f:6f:0d:30:0e:7d:50:29:c5:7e:e8:30:87:54:81:c6:5d:
55:7e:78:fa:f5:44:06:af:3a:ec:2e:44:f5:01:d8:a8:cc:08:
72:8d:fb:1a:aa:7a:47:5a:63:46:a0:75:e3:94:b6:23:c3:b1:
f5:e9:d0:8d:2d:fe:9c:8a:fe:28:4b:21:ef:f0:b3:59:b1:a5:
2f:93:3a:7e:ca:d9:63:9e:12:01:c8:b1:d4:36:4b:30:2c:fe:
77:22:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:00 2026 by rpki-client