
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json)
Hash identifier: Jq7UIvojDlCf2gp2RdpIYON4fM5NGCMpX9ZvevhPrpI=
Subject key identifier: B9:F4:C3:04:01:91:49:89:A0:A5:E8:CC:37:EE:43:47:30:54:D4:16
Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
Manifest number: E1
Signing time: Thu 19 Feb 2026 05:02:23 +0000
Manifest this update: Thu 19 Feb 2026 05:02:22 +0000
Manifest next update: Thu 26 Feb 2026 05:02:22 +0000
Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: CaV+310+474yWsENVApV0HxLErStJRYTJw2NZ2o5vAQ=)
2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=)
3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Validity
Not Before: Feb 19 05:02:22 2026 GMT
Not After : Feb 26 05:02:22 2026 GMT
Subject: CN=6996995f-86af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:b7:64:a3:a9:af:d7:db:30:26:93:6e:fb:
4b:80:70:8e:34:7c:05:16:26:31:36:fe:8f:1f:71:
f6:e5:ac:f6:c0:63:3c:40:14:8d:b6:22:f6:f3:24:
ae:ef:59:25:62:e9:5a:72:ad:5b:e7:a9:0c:68:9d:
ff:11:69:c9:40:09:74:8c:be:c0:a8:64:bf:96:72:
1d:5d:7a:92:a8:8f:03:dd:e0:7c:ca:75:a4:91:76:
08:87:f5:e6:3b:40:76:83:d7:ae:4d:48:0f:88:eb:
b3:90:4d:63:5d:f7:77:a4:fe:b7:18:60:95:81:78:
49:81:43:47:d4:42:63:97:d9:9b:ec:6c:c6:c1:67:
b5:a7:ab:a4:f1:0b:23:fb:ee:27:ea:8d:d0:4f:49:
91:d9:80:06:e2:d7:cb:ef:61:6e:20:9d:86:ee:76:
5b:97:b7:b1:91:26:61:3e:79:95:0a:e3:78:93:48:
1f:8c:3f:3b:f9:d1:fc:ab:ee:fc:91:18:a2:bc:1f:
cc:d3:41:ae:11:95:de:ed:d6:bf:58:7a:11:e1:b5:
79:4f:1e:85:da:a7:d7:01:09:2d:8c:58:58:5d:a3:
9a:97:88:8d:d1:1f:8f:fd:28:d2:a5:33:61:d7:fb:
38:cc:21:ab:b5:13:66:34:58:89:80:34:51:2b:10:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:C3:04:01:91:49:89:A0:A5:E8:CC:37:EE:43:47:30:54:D4:16
X509v3 Authority Key Identifier:
keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5b:ca:71:c5:1a:14:df:d1:29:fc:86:0d:54:00:19:ac:a7:
a0:d3:39:e6:16:73:80:88:46:f4:4a:43:8e:2e:2a:a3:d3:ce:
5c:91:b6:e0:ae:b6:38:ab:43:5f:a2:a0:37:40:59:0f:0e:f5:
33:dc:08:7b:a6:71:d1:54:f4:6c:3d:a8:e9:67:66:58:f8:ea:
b3:c4:c4:4c:de:0d:42:24:6a:bb:0e:68:ec:c0:81:86:7e:8b:
74:f2:0a:a8:40:a6:29:ca:b7:1a:24:bf:a6:6b:31:a4:43:a2:
3a:58:67:cd:4e:04:f0:0a:9a:6a:aa:ce:6a:76:d3:11:33:24:
3c:53:96:fc:89:e1:df:a9:af:3f:a6:2f:36:51:bb:55:52:f3:
01:ba:16:c0:f2:7e:fc:98:ac:65:97:0c:24:14:9e:d9:a9:0e:
ac:99:e9:53:0c:57:ee:bb:5e:68:1b:a7:05:8f:32:60:01:f6:
29:07:2b:1d:7e:b9:0b:69:69:6f:f3:23:ab:db:86:2c:28:10:
cf:eb:5a:8d:1c:ef:68:2f:81:a8:0a:29:50:38:51:a4:eb:e1:
c0:f4:cb:26:e8:e0:cb:8e:9c:8c:d3:ec:54:38:38:a2:80:34:
75:28:b4:10:bb:b9:52:dd:24:76:e1:8e:f4:b3:77:e1:dc:54:
c7:81:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:16 2026 by rpki-client