
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json)
Hash identifier: tYXkl7hFgUArzgZhYn8j+IApQ1vC9xHsYJdcJqYjDJ8=
Subject key identifier: 97:05:B0:04:F6:AB:DF:E6:6E:7F:DB:FF:34:C9:D3:88:19:5F:E5:0B
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial: 353D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
Manifest number: 3527
Signing time: Wed 18 Feb 2026 14:28:51 +0000
Manifest this update: Wed 18 Feb 2026 14:28:51 +0000
Manifest next update: Wed 25 Feb 2026 14:28:51 +0000
Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: HkxpneTMWRSW7n61uyW+nNVSbBozAxHIG2KRWCVdxV0=)
2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: B89plsbzpJPq8s829DD1iasXmMCvgKmuBXymcNPJP00=)
3: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: 46fZUilaQBlVZ2k65VXNyVXtpZOJkE2D9AGeFyMVrNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Validity
Not Before: Feb 18 14:28:51 2026 GMT
Not After : Feb 25 14:28:51 2026 GMT
Subject: CN=6995cca3-9366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:db:6d:f4:51:4e:4b:3f:55:fa:64:4d:93:
fd:35:e9:42:f9:89:f7:8b:ca:44:72:38:69:8c:70:
ae:b1:90:56:83:de:e0:b0:5a:2c:52:ce:af:9f:f2:
6a:42:d4:ea:5d:5f:e4:ff:1a:51:95:f1:aa:77:d3:
f1:25:0b:b8:4a:93:a5:12:eb:a8:5c:7e:9a:c8:9f:
61:81:64:f5:67:62:b3:53:d8:0a:59:02:12:6a:fc:
d9:4f:e5:97:cf:fe:75:7a:0e:8f:28:e8:02:f1:71:
24:fb:38:df:79:61:5e:e4:e4:5f:d2:de:f6:bb:b4:
ae:d6:af:d9:48:84:b0:ae:36:5d:d5:2f:52:e0:6f:
b8:15:b8:7c:df:0a:41:5b:7d:26:dd:b8:a6:61:f9:
e2:8c:dd:82:12:20:02:b0:be:bc:2b:3d:2d:34:8b:
e1:83:f5:3f:38:7e:e0:4c:24:ba:87:a8:b0:f2:5a:
dc:72:fe:20:45:0c:0b:fb:13:bd:f8:90:a8:bf:51:
02:f6:06:67:42:11:b2:5d:92:bd:d6:a5:5b:a6:d6:
86:75:0b:f1:fc:b4:b5:55:90:6d:44:91:5a:1e:7a:
60:72:63:14:c6:7e:f7:a9:1e:c6:c6:57:b3:a6:b1:
52:e7:8a:20:7a:48:90:b9:d9:fd:80:46:8e:fe:0a:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:B0:04:F6:AB:DF:E6:6E:7F:DB:FF:34:C9:D3:88:19:5F:E5:0B
X509v3 Authority Key Identifier:
keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4e:83:d1:c1:b4:bb:ff:8a:46:b1:06:1b:f2:34:60:54:59:
27:8e:6a:61:94:22:b1:cf:6f:c4:2a:81:de:40:d4:26:94:37:
ee:b8:93:e1:d2:44:9b:69:9f:b4:e2:53:89:9a:d5:da:1e:0f:
26:7c:e3:9d:74:f0:77:93:18:e1:38:ad:3a:05:50:59:fd:72:
9e:b1:2e:e4:24:ed:95:14:83:1c:97:61:db:3b:0a:e9:54:3a:
fd:ac:5e:6f:a1:4c:c7:e3:e9:da:65:7c:79:49:02:18:0d:29:
c6:61:31:33:f8:71:e0:61:fe:ee:93:fd:53:27:7f:7a:1a:0f:
54:61:fa:6a:db:d5:89:5c:23:2e:bb:59:ab:a6:b5:e8:a5:7c:
5b:7d:6a:a1:de:4f:6f:1c:e7:29:7a:ed:09:01:c2:a3:5d:8d:
58:50:03:5e:97:1f:61:d0:89:5f:79:14:00:14:8e:4b:d6:0e:
c1:03:51:a4:b9:ed:43:1d:be:45:af:83:4f:25:bc:d5:b8:3e:
29:bc:1f:1a:15:f9:07:93:b0:85:9b:de:d2:8e:93:ab:c8:ba:
10:61:ad:e1:a1:c8:27:b0:9f:e0:f6:4a:1f:cf:ab:f8:14:5c:
f1:7b:82:48:66:b5:cb:aa:f3:cd:c3:5a:6f:8b:17:7a:80:21:
01:ea:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:54 2026 by rpki-client