
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
File: poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json)
Hash identifier: Pjmhg9wgiG00ZQZP+D7HWKMIUvVLDXGZvjmkIQacV3U=
Subject key identifier: FB:6F:FE:5F:DF:4C:15:14:6F:55:A1:3B:61:C5:B7:70:25:2E:B2:F7
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial: 3575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
Manifest number: 3540
Signing time: Wed 18 Feb 2026 14:41:20 +0000
Manifest this update: Wed 18 Feb 2026 14:41:20 +0000
Manifest next update: Wed 25 Feb 2026 14:41:20 +0000
Files and hashes: 1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: cG8rCw4yY8lK+vUM/9o872aFBNWBKC7LN52+lo5afTk=)
2: 97F461E0C8CB11F0BFB08139C4F9AE02.roa (hash: gzKLnHGUVNhUy122xbHjkwFinEFr8S05RyLytJ6eVXI=)
3: 42DAE250C8C711F08A7B6740C4F9AE02.roa (hash: LXms9Zrbk+PXqSOcObRZdGiWL7GgK8jI8GvKqfmYMjY=)
4: A50B2F32C68611EFB4077137C4F9AE02.roa (hash: Npaiqv8wx3x0juj2XPFP6NT15iQeinsY3d+rnK9Ipa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13685 (0x3575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Validity
Not Before: Feb 18 14:41:20 2026 GMT
Not After : Feb 25 14:41:20 2026 GMT
Subject: CN=6995cf90-a4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:c6:3a:5c:c1:86:e8:a4:04:10:79:3c:67:
27:d3:3e:29:6e:bc:1e:1e:6c:aa:1e:64:32:77:f3:
8c:89:0d:2f:54:83:e3:0d:af:41:d3:f7:49:3b:0f:
a4:54:da:99:f8:65:3e:cf:0d:12:72:20:a3:9f:09:
df:f1:69:a1:57:e5:80:84:92:06:9d:9c:0c:9f:c8:
e7:f1:2e:49:4b:c1:87:28:19:fd:0e:d0:39:44:3d:
21:52:3a:35:2b:3a:57:90:18:70:52:dd:f1:bc:42:
88:a7:7a:8b:d7:9c:a2:16:6f:7b:bc:c7:5b:73:c2:
8f:f1:a8:d5:41:b4:6a:97:2b:71:8a:18:91:fd:92:
96:65:b6:6f:c0:51:07:a8:bb:5e:f0:55:b5:98:ec:
f9:24:98:3b:e2:eb:f8:6c:df:19:7a:ef:af:f6:c4:
c9:a2:49:58:62:8f:6f:8f:a0:0e:8e:4b:bb:83:20:
e4:b8:d0:15:b3:87:69:ab:11:23:92:39:06:25:c9:
69:46:f2:fb:4e:06:c5:ba:f9:46:5a:72:65:8e:21:
8d:7b:a2:7d:21:bc:e7:54:f4:1b:6c:96:f4:df:fc:
49:29:f2:e7:97:d2:46:25:f1:a2:4a:41:b6:3e:37:
7c:c4:f5:5f:45:3e:1c:e5:d2:53:e0:48:eb:7a:af:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:FE:5F:DF:4C:15:14:6F:55:A1:3B:61:C5:B7:70:25:2E:B2:F7
X509v3 Authority Key Identifier:
keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1b:09:39:6e:eb:6d:f8:7c:3e:2f:c7:35:da:e4:05:e5:d5:
2f:c9:eb:05:e5:0c:20:93:78:a0:35:31:95:69:e1:da:c5:0f:
5c:23:21:e8:a4:0d:b6:52:3a:95:03:13:26:bd:63:08:ba:24:
40:b8:4a:ef:44:fc:f9:44:2f:db:e6:1c:37:48:df:f8:0e:cc:
85:1d:27:ad:60:79:ea:6a:5c:b5:9d:06:f8:f4:55:f1:fd:92:
80:43:89:62:47:7e:6a:1b:75:d8:84:0b:db:80:96:27:76:87:
e2:74:01:c3:59:2f:60:e9:f4:c9:e3:3f:d0:6b:67:26:6d:ff:
c9:8b:6f:73:ff:f7:b5:91:37:a4:16:a3:c7:9f:09:6c:d8:2e:
be:a1:65:d9:9a:11:fc:9c:fd:c1:f3:46:2a:66:bf:61:8d:75:
a6:03:56:0f:ca:f9:e5:0b:b2:a0:c2:1b:e4:0d:43:42:7f:3f:
0c:5a:65:72:40:bf:a6:3b:80:6a:bf:1b:7f:7f:36:c5:f0:e9:
51:d2:65:94:41:5f:d1:3a:99:b7:d5:47:01:d0:f2:3a:9e:f5:
3a:1f:b7:be:dc:d0:43:77:e3:e5:22:a6:4b:13:d3:1b:de:bf:
85:bd:00:8c:cb:a8:08:41:b0:98:18:47:df:06:10:3d:31:b9:
31:67:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:28 2026 by rpki-client