
$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json)
Hash identifier: IZ6hgN1Odx3YbUbbE5ZoIwCwCfQewXSVKaY22mnqNhU=
Subject key identifier: 0C:A8:1F:01:97:F3:C6:52:F6:1A:E3:72:C0:64:96:2B:4A:E1:AB:0C
Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Certificate serial: 0444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
Manifest number: 043F
Signing time: Wed 18 Feb 2026 23:30:44 +0000
Manifest this update: Wed 18 Feb 2026 23:30:43 +0000
Manifest next update: Wed 25 Feb 2026 23:30:43 +0000
Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: 3weCFTpbubZ3VZRUGNGY3o/SHWVqBqQq9shJRDuMJdY=)
2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: LsezswxbsYTDkD8XmvSpL4OSBTZlfRn5UeJiOefMqvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91778D4, serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Validity
Not Before: Feb 18 23:30:43 2026 GMT
Not After : Feb 25 23:30:43 2026 GMT
Subject: CN=69964ba4-465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:14:c3:24:bf:86:20:3b:91:e4:d0:f2:61:b3:
bc:6b:9b:bd:66:ab:df:fa:28:d4:71:4c:ef:7f:a4:
9a:31:78:a2:bb:47:12:84:55:4d:a4:1c:ad:ec:f8:
ae:b6:ae:04:a0:87:03:e2:81:a4:31:09:5a:c5:1e:
d0:52:12:45:3d:b7:75:6d:22:e5:29:56:42:de:56:
7e:84:d2:45:b5:dd:02:24:ee:4f:e5:63:1a:96:14:
22:8a:77:3f:80:a1:2c:fe:9e:20:ed:45:6d:e5:dd:
7b:08:eb:a3:3f:ba:65:cc:d1:db:ad:14:81:21:56:
4f:b1:ca:1b:71:fd:a1:1a:5f:76:c3:87:2b:1b:02:
65:a6:3e:ba:31:30:04:58:ea:66:f8:14:c5:1f:7f:
b1:7b:10:0b:ac:37:60:0c:0f:03:2a:5d:1f:c4:7d:
f8:0a:39:f3:cb:98:41:e3:cd:89:e2:1b:c1:26:09:
71:c4:63:b6:3f:5f:3a:a5:6c:9b:02:94:a3:91:6a:
68:9d:b9:19:14:ae:47:49:80:b1:0e:09:3d:26:2a:
5a:49:a0:18:59:9e:57:f5:67:1b:15:90:1d:37:ef:
41:e0:31:d0:27:04:8b:90:ad:08:72:1e:63:1d:67:
cd:4f:38:e7:b9:3b:a3:b7:71:41:1a:f4:76:05:58:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:1F:01:97:F3:C6:52:F6:1A:E3:72:C0:64:96:2B:4A:E1:AB:0C
X509v3 Authority Key Identifier:
keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2b:bc:80:80:8e:89:82:14:d1:ab:a0:b6:45:d3:73:56:10:
c8:db:d5:fa:82:51:86:2a:ee:6d:74:fc:53:72:fa:f3:96:8e:
3a:88:9b:0e:45:cb:d5:48:b4:1e:4d:e3:fc:26:9e:a8:be:b8:
46:2c:38:e3:3a:37:d3:5b:08:30:64:70:b8:30:bb:b5:14:02:
e6:6f:4b:af:77:03:91:ca:90:ea:b9:5c:1f:57:81:8a:f3:7d:
6f:b1:19:23:5b:4d:b4:e6:14:6d:e9:38:8b:73:5b:74:f3:49:
79:64:da:02:12:88:59:2a:87:1a:11:d6:ff:05:5a:0a:11:27:
cf:65:35:84:e3:1d:5c:d1:77:d5:8a:29:5a:3f:ca:cb:cd:26:
e7:77:7c:13:58:b0:cf:43:e6:f3:72:2b:c6:96:71:21:df:84:
a1:64:55:2c:49:93:00:f4:8b:10:70:cc:e2:a7:fd:63:e3:6c:
79:b8:ff:12:f6:ab:35:bb:d9:bd:5c:49:98:29:6e:73:6d:e4:
e7:73:f6:55:9b:6c:9f:d7:b6:eb:00:3b:73:54:f4:b4:76:4a:
dc:3d:0c:a0:3b:b6:88:28:aa:92:cc:9e:24:98:ae:d9:2c:07:
42:3d:73:2b:f8:2c:3b:74:05:af:41:f8:2a:db:99:bd:02:07:
46:e0:01:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc4RDQxMTAvBgNVBAUTKDM4ODdBQ0RERjcxQ0JFRjRBNzUyMUQ4NDUxRUVDQkFF
QjI1MTlFRkQwHhcNMjYwMjE4MjMzMDQzWhcNMjYwMjI1MjMzMDQzWjAYMRYwFAYD
VQQDDA02OTk2NGJhNC00NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+BTDJL+GIDuR5NDyYbO8a5u9Zqvf+ijUcUzvf6SaMXiiu0cShFVNpByt7Piu
tq4EoIcD4oGkMQlaxR7QUhJFPbd1bSLlKVZC3lZ+hNJFtd0CJO5P5WMalhQiinc/
gKEs/p4g7UVt5d17COujP7plzNHbrRSBIVZPscobcf2hGl92w4crGwJlpj66MTAE
WOpm+BTFH3+xexALrDdgDA8DKl0fxH34Cjnzy5hB482J4hvBJglxxGO2P186pWyb
ApSjkWponbkZFK5HSYCxDgk9JipaSaAYWZ5X9WcbFZAdN+9B4DHQJwSLkK0Ich5j
HWfNTzjnuTujt3FBGvR2BVi0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyoHwGX
88ZS9hrjcsBklitK4asMMB8GA1UdIwQYMBaAFDiHrN33HL70p1IdhFHuy66yUZ79
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhENC9EOUQ1NjkzQTkw
NTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2U25VaDJFVWU3THJySlJu
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09JZXMzZmNjdnZTblVoMkVVZTdMcnJKUm52MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzhENC9EOUQ1NjkzQTkwNTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2
U25VaDJFVWU3THJySlJudjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDNK7yAgI6JghTRq6C2RdNzVhDI29X6glGGKu5tdPxTcvrzlo46iJsO
RcvVSLQeTeP8Jp6ovrhGLDjjOjfTWwgwZHC4MLu1FALmb0uvdwORypDquVwfV4GK
831vsRkjW0205hRt6TiLc1t080l5ZNoCEohZKocaEdb/BVoKESfPZTWE4x1c0XfV
iilaP8rLzSbnd3wTWLDPQ+bzcivGlnEh34ShZFUsSZMA9IsQcMzip/1j42x5uP8S
9qs1u9m9XEmYKW5zbeTnc/ZVm2yf17brADtzVPS0dkrcPQygO7aIKKqSzJ4kmK7Z
LAdCPXMr+Cw7dAWvQfgq25m9AgdG4AES
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:49 2026 by rpki-client