
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json)
Hash identifier: 3GZcPkUw/Ib8AS47VM4F3iRa3HkwDzRruzEyhAVTVaA=
Subject key identifier: 73:80:2E:CC:2F:48:01:1E:F4:23:0D:4E:98:3E:29:A2:95:8A:99:5F
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 097C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
Manifest number: 096F
Signing time: Wed 18 Feb 2026 19:37:29 +0000
Manifest this update: Wed 18 Feb 2026 19:37:28 +0000
Manifest next update: Wed 25 Feb 2026 19:37:28 +0000
Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: 9GUy/lrR70siDnspOQUnKeAO41zKvZOgON7lZ7W9pic=)
2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: /W7jNuOZe0YfOd8yIagbqgnCN+PhgeGc0tSQIMsMPPI=)
3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: jBS/1Hlfhun69e6e4ZHEVPi7ipp4H+jsjI8X7M9ZNQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Feb 18 19:37:28 2026 GMT
Not After : Feb 25 19:37:28 2026 GMT
Subject: CN=699614f9-48a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:96:e6:84:49:91:52:11:c7:24:16:92:c5:9f:
c4:42:89:38:a5:8f:73:7a:aa:93:ce:a6:02:63:1f:
5c:01:52:bc:65:6b:30:44:db:47:cc:bb:76:37:fd:
eb:18:1f:9e:c3:22:de:d7:d3:c7:58:01:48:4e:5f:
29:37:fc:17:08:00:b7:4a:2e:35:b6:66:0f:e5:bb:
33:5f:82:5f:08:67:75:00:d7:ad:f2:4d:57:7c:48:
2d:5c:17:9d:df:56:63:a3:22:32:fd:1f:2d:1e:a0:
30:d3:76:07:fc:e9:04:2c:c3:23:9d:5e:11:c8:13:
c1:f8:fd:c3:2e:38:37:da:b8:65:dd:ca:88:e7:4c:
f6:1c:8f:0c:d9:4c:e5:17:62:77:16:1f:7e:d9:63:
76:bf:69:d7:4c:1c:90:90:be:e8:8b:53:62:68:da:
c8:d5:98:67:0a:2e:83:57:b4:36:0c:b5:7c:72:97:
5f:fc:eb:65:f2:6b:a6:8b:a9:f2:45:41:20:09:e4:
ff:d4:f9:a4:4d:d3:c5:7c:be:a9:32:a2:4a:a8:ed:
a1:7a:55:25:84:66:c5:18:5b:5a:47:79:19:9d:77:
70:fb:a0:cb:59:31:0a:2a:f7:1e:88:c0:8b:9e:99:
ef:eb:42:77:f9:f1:27:3a:e6:61:ec:ff:0d:af:82:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:2E:CC:2F:48:01:1E:F4:23:0D:4E:98:3E:29:A2:95:8A:99:5F
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:0e:7f:68:c8:9d:5e:4a:69:00:96:1e:59:40:59:3f:5c:d1:
9a:b8:a2:a6:f1:02:ed:2a:6d:28:1b:fb:ff:af:29:1c:f3:47:
b2:00:7e:9f:aa:6d:d5:fb:f1:31:07:4d:06:50:62:38:34:3f:
7f:c5:d4:ee:cb:3c:5f:b0:44:7f:63:18:88:0f:89:04:c7:6b:
d0:46:62:34:ec:89:0d:05:1c:e8:24:31:06:2c:10:fe:fd:56:
e9:0f:5d:4e:74:61:a2:52:f3:6d:ce:17:ad:82:e0:ce:60:38:
a8:63:99:c8:f1:f2:33:17:2c:2c:bc:53:7d:ce:3e:bc:18:37:
46:e6:fd:3c:c0:e5:92:b3:e4:fa:25:41:dd:8d:96:0b:0c:c9:
17:81:b7:24:2a:82:21:c9:d0:22:ae:0c:48:0d:29:cc:28:24:
5a:27:3a:1f:c1:0a:1e:69:ac:0e:ae:74:d8:f7:90:f4:02:e8:
95:da:a7:04:ce:a3:f2:9f:7b:ee:ce:c9:d5:62:c3:7b:d0:57:
ca:a0:fb:92:80:f8:56:f7:56:8c:31:f5:5d:35:0a:79:9b:e8:
cd:57:2e:45:8f:81:71:08:b0:f4:f3:f2:67:c2:c4:c8:df:67:
47:bd:3d:06:87:ff:35:c2:52:4d:c5:cc:e6:72:16:a1:d4:c0:
23:9b:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:44 2026 by rpki-client