
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
File: I3Q0S3Gynw44NSDK_GyINQw1YWg.mft (raw, json)
Hash identifier: I8TGPwzMl+3to9ajajpZMMr6Y4p4UEZCeEuqtEOi0Zg=
Subject key identifier: 10:0B:D0:EB:4A:D9:19:60:19:EE:78:FF:E6:E1:65:E1:5C:F5:23:A4
Authority key identifier: 23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68
Certificate issuer: /CN=A91A58AA/serialNumber=2374344B71B29F0E383520CAFC6C88350C356168
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
Manifest number: 98
Signing time: Thu 19 Feb 2026 05:45:07 +0000
Manifest this update: Thu 19 Feb 2026 05:45:07 +0000
Manifest next update: Thu 26 Feb 2026 05:45:07 +0000
Files and hashes: 1: I3Q0S3Gynw44NSDK_GyINQw1YWg.crl (hash: tybhadkyICvjYYJrFPxxjPU3nYrVsO/yZIK4xgshimo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl
rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA, serialNumber=2374344B71B29F0E383520CAFC6C88350C356168
Validity
Not Before: Feb 19 05:45:07 2026 GMT
Not After : Feb 26 05:45:07 2026 GMT
Subject: CN=6996a363-9bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:69:92:fb:18:9f:1a:2c:f9:4f:91:1b:5b:
98:7f:4a:27:ae:95:04:72:3e:1a:42:a6:92:d7:6c:
e5:06:6a:cd:e2:54:62:23:67:e9:d7:84:59:b7:e8:
5b:86:1a:1a:83:3c:ce:ca:e4:92:e7:dd:f0:89:2a:
8e:b8:4a:5c:47:7d:30:2b:48:6e:09:f9:0f:1d:47:
f7:27:11:aa:ef:e4:49:a6:29:f2:24:e5:33:35:45:
7e:34:ad:f3:31:da:57:9c:8e:b6:96:53:85:c8:50:
ec:e6:06:be:ec:85:20:6a:d1:3e:28:37:c1:c9:38:
b9:66:ea:bb:49:b7:26:b5:a9:ea:f0:78:98:aa:2c:
e9:b9:8b:49:52:82:36:5f:01:b8:99:45:c6:7d:be:
95:f7:04:fc:2d:a4:d7:c8:77:73:d5:5b:9c:64:7f:
d5:d4:3c:7d:e2:35:2f:cc:87:c4:5a:ee:13:5d:87:
59:c8:e5:03:51:bd:e9:ee:ee:9b:46:52:96:41:ec:
71:b2:93:40:80:07:5e:36:0c:8c:0f:bb:fc:c9:4c:
67:5c:22:d0:86:55:f4:d0:cd:f1:82:52:d0:cd:f4:
1a:16:c3:e0:8f:69:ba:61:21:a4:8c:4e:31:ac:b2:
75:b3:8d:3a:d5:cc:8e:56:7a:80:21:5e:be:52:f2:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:D0:EB:4A:D9:19:60:19:EE:78:FF:E6:E1:65:E1:5C:F5:23:A4
X509v3 Authority Key Identifier:
keyid:23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:8c:8e:1a:18:14:df:3b:9d:bb:01:2f:a9:d4:81:ff:3d:
d2:37:e6:1e:73:06:23:99:0b:63:ab:e2:ce:d7:19:d2:4a:74:
c7:1e:04:6a:fd:f4:61:a0:be:f1:ae:5f:6b:a4:0f:ed:2c:7c:
1c:4e:c0:07:05:be:55:0e:5e:e6:f6:bb:c9:27:d7:08:9e:fd:
ad:f7:64:cf:86:63:40:77:8a:fc:6d:e8:32:f1:57:96:88:9a:
44:ef:bb:0b:cb:c5:72:56:9e:44:61:82:ee:18:49:cb:97:67:
97:1c:8b:f9:62:fd:cf:7d:ef:e6:22:cd:dd:24:19:a9:17:b9:
eb:0a:fa:e4:50:1c:d4:de:04:4a:3e:56:8f:2f:c8:03:f8:51:
68:20:00:27:b4:15:00:b8:be:e4:7f:f6:14:b8:4e:07:9e:7e:
8f:e2:bb:35:09:fa:5b:3d:a9:4d:62:c6:e1:12:0a:05:d6:1b:
01:93:25:f6:d0:95:d1:5d:8f:61:17:11:d3:49:29:89:fb:1e:
76:65:28:06:9e:ca:b1:bf:18:77:77:97:aa:64:54:d5:9f:4c:
3b:52:7b:01:92:f2:06:ca:12:c4:c7:05:cf:c9:fc:e1:10:4a:
0f:44:ff:59:ae:7d:f8:2a:7c:f7:ff:1f:7d:4a:fd:d1:a7:d3:
28:ae:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:51 2026 by rpki-client