
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier: 50eK4gkFqn2ybsMHd9l24N38Ktl2N10ya/KtbLi9xN8=
Subject key identifier: 1D:7E:56:AD:54:56:AD:4A:82:09:AD:6D:A8:6D:55:66:7F:5E:EA:44
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0B2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number: 0B20
Signing time: Wed 18 Feb 2026 18:54:44 +0000
Manifest this update: Wed 18 Feb 2026 18:54:44 +0000
Manifest next update: Wed 25 Feb 2026 18:54:44 +0000
Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: 4zD8hrSvZ7pA2v0Gfmu54sKCTBLNvvxe+OhO2TC+hqM=)
2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: iGeCqjea5TKx5w3j1RMFWZOzP6n/8IBkqpNhUcYz96Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: Feb 18 18:54:44 2026 GMT
Not After : Feb 25 18:54:44 2026 GMT
Subject: CN=69960af4-7129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:7d:12:ad:75:f6:fd:ad:e0:e3:a4:9e:be:
09:cf:df:62:b3:db:85:51:79:63:f2:77:0c:92:cb:
be:8e:7e:ac:fc:ea:6f:29:9e:d8:a6:e5:c9:1d:de:
b9:cc:9a:04:1f:d7:26:0c:93:f8:13:4c:c7:9d:40:
cf:08:f0:c0:13:90:fa:02:4f:79:4c:e3:25:37:e0:
9c:15:de:8d:04:9b:4a:43:6f:47:37:ed:ab:fb:ed:
67:b6:f2:97:d3:30:4c:d3:9f:a3:02:33:a6:2f:71:
9a:1c:28:fa:a3:b0:a6:db:2b:71:f3:cf:7c:3b:82:
91:1e:83:ad:08:aa:b2:18:a6:3f:11:64:61:55:3b:
89:c0:bb:a0:1b:f6:58:00:55:a3:d4:d8:02:a1:a2:
41:02:2f:a8:7a:79:54:b8:7d:f6:5a:6d:e7:0c:bd:
84:2d:39:b4:5e:83:e2:3e:3c:9b:35:b3:b2:7f:52:
7f:21:7d:ad:09:eb:08:72:7c:21:ee:48:37:0e:68:
a9:0c:48:94:73:b7:db:7c:66:87:22:44:0d:a7:f6:
8d:c7:3c:57:0e:14:e0:44:82:54:9f:f7:4d:34:15:
7a:fd:32:34:b0:34:31:78:49:73:c4:9e:3b:93:c8:
a6:f6:7e:af:42:09:68:89:7e:d2:bb:26:bd:6f:89:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:56:AD:54:56:AD:4A:82:09:AD:6D:A8:6D:55:66:7F:5E:EA:44
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:b7:b0:19:b1:b1:b5:da:f5:c4:e5:ba:e1:6d:ec:a1:bd:fb:
b2:db:68:48:58:14:ed:24:27:44:ad:67:a6:e7:46:a9:91:b4:
54:60:19:25:fd:64:d3:92:0f:3f:8d:34:d1:d0:60:ab:2f:95:
4d:03:68:72:73:64:1f:68:4a:d6:cf:7b:15:90:58:5f:3e:a7:
84:06:ff:22:6f:11:e1:b5:16:64:59:69:1f:48:39:b4:0a:d1:
81:16:69:a4:13:68:fd:79:ef:26:e4:07:7a:b2:db:2f:4f:10:
e5:ea:24:42:70:05:15:a1:2d:fa:5a:5c:66:1b:70:75:f2:b7:
e3:f7:29:79:d7:43:ee:33:59:e1:1e:08:c3:5a:09:9b:25:b0:
86:1f:93:36:76:84:58:22:93:0f:5d:b9:3b:3b:b1:ba:06:44:
9e:69:eb:df:5d:0a:b2:74:dd:92:59:c7:59:80:76:08:9b:f0:
85:8f:6a:3b:5d:75:3e:92:8e:af:00:b1:c9:c4:3e:8d:32:97:
fb:26:c1:13:6f:fc:62:bb:d3:d1:74:48:66:54:a2:5f:df:62:
9a:37:c0:c3:85:90:0e:53:38:65:2f:6e:19:27:3e:c5:4f:a5:
24:f6:29:79:51:62:bf:c1:26:42:ff:1c:55:b4:6f:e1:02:48:
88:46:38:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD
RDIxNTFCMDIwHhcNMjYwMjE4MTg1NDQ0WhcNMjYwMjI1MTg1NDQ0WjAYMRYwFAYD
VQQDDA02OTk2MGFmNC03MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjp9Eq119v2t4OOknr4Jz99is9uFUXlj8ncMksu+jn6s/OpvKZ7YpuXJHd65
zJoEH9cmDJP4E0zHnUDPCPDAE5D6Ak95TOMlN+CcFd6NBJtKQ29HN+2r++1ntvKX
0zBM05+jAjOmL3GaHCj6o7Cm2ytx8898O4KRHoOtCKqyGKY/EWRhVTuJwLugG/ZY
AFWj1NgCoaJBAi+oenlUuH32Wm3nDL2ELTm0XoPiPjybNbOyf1J/IX2tCesIcnwh
7kg3DmipDEiUc7fbfGaHIkQNp/aNxzxXDhTgRIJUn/dNNBV6/TI0sDQxeElzxJ47
k8im9n6vQgloiX7Suya9b4l7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1+Vq1U
Vq1KggmtbahtVWZ/XupEMB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4
Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2
V0VwMWpEcDlVZnJOSVZHd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDt7AZsbG12vXE5brhbeyhvfuy22hIWBTtJCdErWem50apkbRUYBkl
/WTTkg8/jTTR0GCrL5VNA2hyc2QfaErWz3sVkFhfPqeEBv8ibxHhtRZkWWkfSDm0
CtGBFmmkE2j9ee8m5Ad6stsvTxDl6iRCcAUVoS36WlxmG3B18rfj9yl510PuM1nh
HgjDWgmbJbCGH5M2doRYIpMPXbk7O7G6BkSeaevfXQqydN2SWcdZgHYIm/CFj2o7
XXU+ko6vALHJxD6NMpf7JsETb/xiu9PRdEhmVKJf32KaN8DDhZAOUzhlL24ZJz7F
T6Uk9il5UWK/wSZC/xxVtG/hAkiIRjhK
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:21 2026 by rpki-client