
$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier: QNxnEDD3AFjG9RdvsrXaPrAESu8qv4xeQVYZ1HFstjQ=
Subject key identifier: A5:1F:70:B0:FF:DC:EF:8E:9C:19:57:37:57:95:90:F2:DF:0D:B9:BA
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number: 08F7
Signing time: Wed 18 Feb 2026 19:51:15 +0000
Manifest this update: Wed 18 Feb 2026 19:51:14 +0000
Manifest next update: Wed 25 Feb 2026 19:51:14 +0000
Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: /9be2TqT5JRCzWsazyDm+oXdjiP0G++56Q177dBvJ2w=)
2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: MIyBunftYkQco/m/ADmv4S1fyRxTgeEhYhl9wBxnLIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Validity
Not Before: Feb 18 19:51:14 2026 GMT
Not After : Feb 25 19:51:14 2026 GMT
Subject: CN=69961833-ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:6f:90:2f:5c:cd:f6:8b:e8:50:bb:f7:b0:
9c:d2:23:60:d9:4d:71:4f:7e:c1:d4:50:06:ad:2c:
20:11:b5:2a:2e:77:f0:f5:4f:8b:75:e9:b1:62:33:
f3:49:74:ae:92:1d:f2:9b:70:79:f4:3c:a7:ee:65:
e6:cc:84:50:d6:5a:be:b6:7d:c9:d7:0d:b5:2b:77:
e2:a3:d4:17:d5:b3:1b:31:f0:06:b3:bc:50:ac:07:
3d:a9:44:a5:77:4b:36:36:77:44:5a:7b:e8:9e:f9:
e3:e4:3e:3f:e6:dd:69:72:3e:3b:97:fa:5c:ac:27:
99:a4:da:f5:8e:19:c2:33:3c:14:c5:3c:e5:fb:c0:
d7:f4:6d:7c:45:f4:41:5c:3a:95:f8:35:ef:22:3c:
ad:1d:09:7a:9e:42:49:08:ad:36:6f:02:b3:d1:03:
a3:5f:74:bd:39:56:ce:b2:ea:bb:48:5c:ef:a2:66:
af:ca:c0:42:df:8e:2e:0f:ae:dc:43:bf:41:09:aa:
93:30:0a:9c:3e:d5:47:c2:9a:b0:e0:b9:b4:76:b8:
cc:18:dd:9b:f9:c0:9d:10:1d:b3:17:05:53:ee:44:
8a:bf:b3:44:66:c4:4c:f0:36:a0:37:cd:65:c9:64:
aa:07:e0:65:af:b0:94:d2:a0:46:cd:44:18:0a:2d:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1F:70:B0:FF:DC:EF:8E:9C:19:57:37:57:95:90:F2:DF:0D:B9:BA
X509v3 Authority Key Identifier:
keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:41:70:cc:45:11:e5:64:05:a8:8f:ff:eb:66:94:ca:13:e8:
96:76:6e:9e:81:6a:6c:e7:64:87:63:b0:43:c8:aa:94:d4:6a:
6f:f1:2b:45:99:2a:d7:32:b2:2f:a2:3a:00:cd:c3:35:60:7a:
f8:c2:07:f3:da:f6:95:c3:44:c3:31:11:87:31:b2:df:43:25:
9b:68:7c:76:9e:3f:c4:89:4d:f4:5a:24:94:66:59:bb:47:7d:
ef:19:4f:74:9e:d4:f6:2a:6f:c1:72:ff:ca:2d:9c:ec:00:24:
8b:10:55:13:9b:26:ff:52:e0:fc:28:fb:e0:77:5e:07:94:63:
b1:b0:fb:c2:1e:db:2b:33:10:09:47:38:6d:b7:d2:db:9c:30:
79:f9:71:e9:25:5d:14:1f:69:aa:3b:06:22:a1:aa:34:3b:7c:
10:4e:c7:1c:79:73:61:37:85:f5:59:c6:9e:43:25:3b:5f:5c:
cf:ac:60:39:48:92:93:81:92:6f:3e:4f:04:6f:e5:b7:01:ac:
19:b6:e0:18:7d:54:47:48:69:d5:92:34:15:6e:8f:a3:5c:1a:
43:83:54:aa:b1:64:52:a8:2c:e4:ea:e1:79:81:37:34:b9:be:
80:35:17:4b:9e:ba:28:8c:a3:de:e1:24:ec:80:c4:ce:95:d5:
3f:49:3a:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3
RUE3QTRGMDIwHhcNMjYwMjE4MTk1MTE0WhcNMjYwMjI1MTk1MTE0WjAYMRYwFAYD
VQQDDA02OTk2MTgzMy1hYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPtvkC9czfaL6FC797Cc0iNg2U1xT37B1FAGrSwgEbUqLnfw9U+LdemxYjPz
SXSukh3ym3B59Dyn7mXmzIRQ1lq+tn3J1w21K3fio9QX1bMbMfAGs7xQrAc9qUSl
d0s2NndEWnvonvnj5D4/5t1pcj47l/pcrCeZpNr1jhnCMzwUxTzl+8DX9G18RfRB
XDqV+DXvIjytHQl6nkJJCK02bwKz0QOjX3S9OVbOsuq7SFzvomavysBC344uD67c
Q79BCaqTMAqcPtVHwpqw4Lm0drjMGN2b+cCdEB2zFwVT7kSKv7NEZsRM8DagN81l
yWSqB+Blr7CU0qBGzUQYCi3cCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUfcLD/
3O+OnBlXN1eVkPLfDbm6MB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0
QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw
dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYQXDMRRHlZAWoj//rZpTKE+iWdm6egWps52SHY7BDyKqU1Gpv8StF
mSrXMrIvojoAzcM1YHr4wgfz2vaVw0TDMRGHMbLfQyWbaHx2nj/EiU30WiSUZlm7
R33vGU90ntT2Km/Bcv/KLZzsACSLEFUTmyb/UuD8KPvgd14HlGOxsPvCHtsrMxAJ
Rzhtt9LbnDB5+XHpJV0UH2mqOwYioao0O3wQTscceXNhN4X1WcaeQyU7X1zPrGA5
SJKTgZJvPk8Eb+W3AawZtuAYfVRHSGnVkjQVbo+jXBpDg1SqsWRSqCzk6uF5gTc0
ub6ANRdLnroojKPe4STsgMTOldU/STri
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:20 2026 by rpki-client