
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json)
Hash identifier: yXirSmVJmPkeuaYCl/MEPvbhSmBZv7neVX8pXefhK78=
Subject key identifier: 7B:13:03:9E:6B:44:AB:E7:68:9C:71:2D:C1:FE:96:D3:A7:8F:5C:89
Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
Manifest number: 022E
Signing time: Thu 19 Feb 2026 01:25:41 +0000
Manifest this update: Thu 19 Feb 2026 01:25:41 +0000
Manifest next update: Thu 26 Feb 2026 01:25:41 +0000
Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: jAUTiQOc8+YJqshJ9+kYuCMjrOpFqId9Pu1UvOMV2ss=)
2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: m/OLPsM6ynBix8nuh4bjX0QKg8+81tb5WXXf1UHLuyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Validity
Not Before: Feb 19 01:25:41 2026 GMT
Not After : Feb 26 01:25:41 2026 GMT
Subject: CN=69966695-4be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:ef:60:2d:45:23:6e:49:cb:fc:44:7e:eb:
8a:dc:4c:b2:25:f3:05:0b:85:7a:f3:68:7d:11:a4:
aa:37:37:6b:75:1c:af:80:83:83:58:45:0b:c5:56:
23:ce:98:a2:13:3a:ed:1a:6a:ad:b1:06:95:93:06:
26:3d:5b:38:56:e1:90:2e:64:9b:2d:c6:78:c0:82:
d5:b6:33:cd:36:66:8f:f4:2c:f4:9a:fc:51:8e:55:
0c:98:bb:d5:5b:71:8f:2f:fe:21:ad:18:fa:c7:76:
78:eb:dd:66:e5:b7:ac:dd:f4:b2:8d:0d:48:a2:bd:
a1:98:d8:47:f4:0b:99:99:6e:2a:1f:10:7a:ac:96:
d7:6e:de:5e:57:11:4e:d1:31:19:d8:82:e8:ce:26:
2b:26:db:9c:f6:de:76:eb:c0:13:57:93:17:05:69:
bc:57:02:8c:94:0d:90:f0:05:d8:d6:31:3c:7b:5b:
8a:57:4b:99:d5:b8:7f:ea:64:04:3f:d5:bd:1d:b9:
3d:b1:fa:b8:02:7d:db:de:38:71:d7:bb:68:eb:e3:
0d:de:9d:df:35:f5:79:10:d4:4c:ff:76:53:54:6d:
ce:3e:31:ee:86:f7:10:95:73:c7:38:67:f5:75:6f:
c3:b8:1b:8c:b4:19:dc:e5:a8:82:38:03:0a:59:0a:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:03:9E:6B:44:AB:E7:68:9C:71:2D:C1:FE:96:D3:A7:8F:5C:89
X509v3 Authority Key Identifier:
keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:3d:60:38:42:5e:a7:97:29:3b:06:3b:fb:a8:7b:6f:33:
04:7e:57:a3:50:54:62:99:b4:0a:59:44:18:ff:f5:72:da:13:
a2:06:fb:9d:a5:fa:7c:74:08:da:4f:78:70:33:2e:5f:2d:ab:
ff:24:71:8b:c3:a1:c9:1e:f7:82:64:51:08:38:0f:4d:c2:b1:
6e:c0:45:b6:a0:58:34:50:03:65:b0:d1:04:f3:03:e6:32:9a:
b1:76:a4:ac:8d:2a:2f:2b:11:9d:0c:ff:d8:d1:16:81:c0:a6:
ab:69:1f:bb:01:87:be:4b:d6:8c:49:39:54:43:1e:64:cd:a1:
05:2f:cc:1c:0d:52:1a:af:b2:52:2a:0f:1b:9d:2d:6a:d7:57:
af:17:b8:ef:92:53:66:15:64:e3:42:38:31:71:4b:69:4e:ac:
2e:0f:e7:16:e3:e5:1f:3a:01:ca:a7:5d:6c:a4:42:12:56:61:
b6:4c:84:32:40:65:4b:ad:63:04:e2:01:fe:b8:43:f6:28:3c:
92:3f:75:61:81:f9:a1:00:95:a2:ec:92:a6:c7:f1:69:b7:ca:
16:83:e4:78:20:1b:54:75:5f:f7:a0:1d:26:b0:ad:99:2c:38:
89:3d:88:ae:41:17:04:57:98:d4:5d:a1:b4:34:ca:91:2d:77:
a7:50:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:01 2026 by rpki-client