
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: 4/B4U3SSFLCAeSUwdqc5925Y6/LR8e3XO8vt41g4wIk=
Subject key identifier: 05:5F:99:4F:8C:8E:4D:76:58:34:97:58:B4:11:87:5C:4A:33:F1:27
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 05D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 058C
Signing time: Wed 18 Feb 2026 22:43:10 +0000
Manifest this update: Wed 18 Feb 2026 22:43:10 +0000
Manifest next update: Wed 25 Feb 2026 22:43:10 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: iXaXtiKLJV5YthjWS5m8an+t/Zi9lJrppY7ldXJ6vKg=)
2: F88F642285E411EEB951413BC4F9AE02.roa (hash: tcqZsfng/M4+baVzoynlhk7W0EaVfrL86TDaCFrmIZM=)
3: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: UOuvqpSDYFbocWWabFzrtfXdrPIilGb9+QOyWPSSshU=)
4: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: 4UszidGd64DKKax3KpdO17A1MmG7WH0sW9f2Su8r+rc=)
5: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: Bv51uaU6ai7ZI7PW+lbOZoQaIyNbdcahpMhYAtQCIyM=)
6: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: LU6z1pVOuXrNPzgnwfluQqu2bwjgft7G2Wo6z9gDgOM=)
7: 74489676FBF711F0B6045B12716F56BC.roa (hash: BgLFptRJpKoTkQiBhZxy0WgRGqJSeAc2THFexh/Kgg8=)
8: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: CAFve4rvYatsNzehY2RCV8H1unVCAfJuDUiqcO44mlc=)
9: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: g3x52U00oN3V+TWAeqJl5SQhLAa1DPwj8KDGR9UscWQ=)
10: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: q9NaxFoh7uNUufd619+t7d7AzpZNB0LE/R3Fb4zOy54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491 (0x5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Feb 18 22:43:10 2026 GMT
Not After : Feb 25 22:43:10 2026 GMT
Subject: CN=6996407e-d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:0c:a1:e5:41:58:c1:b7:23:fa:e2:80:72:
36:ea:89:ce:dc:dd:04:72:13:a3:6a:68:df:30:36:
d4:ef:5a:7d:e0:5d:a6:94:70:b7:cc:25:a7:cd:ce:
e4:93:af:bd:92:53:b4:b0:6e:d1:7a:68:18:c2:09:
01:f5:6f:dd:33:b2:48:67:22:7b:a7:07:5f:c7:de:
aa:2c:4b:8b:ad:fb:b0:48:b7:32:33:83:71:d2:c6:
bd:49:8e:45:1f:a2:9b:7c:fb:7b:46:f9:53:29:e3:
68:fe:9e:7f:ce:67:cd:88:27:c0:85:8d:91:2b:a4:
6e:9e:74:d2:c0:10:57:90:ef:d8:16:59:a1:c7:7a:
af:b1:06:1d:20:ed:34:eb:31:fa:60:76:02:79:f7:
e0:78:69:42:c6:95:57:e6:7b:5f:91:9a:7f:36:13:
76:e4:b2:48:d4:9b:ab:6b:31:65:c4:86:8b:3f:15:
69:41:1a:f0:f8:4b:56:8a:72:ea:38:c5:b9:47:fd:
b3:dc:ee:1b:24:27:3f:ad:3a:06:f5:a8:7d:48:2f:
3d:6f:e2:5a:57:c2:6e:14:f6:0d:9f:67:31:3b:f8:
d8:e7:86:64:93:07:76:ba:94:af:37:d1:be:4d:c3:
d8:c9:09:93:e4:57:b2:e0:bd:c8:dc:78:26:9f:e5:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:99:4F:8C:8E:4D:76:58:34:97:58:B4:11:87:5C:4A:33:F1:27
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:82:f3:ce:96:fd:40:63:cd:97:10:4b:5c:bd:b4:51:84:
de:d3:c8:14:68:c6:1a:48:3a:53:95:41:f6:c6:2e:42:5d:10:
a6:d0:63:11:22:81:cf:57:02:ad:0d:fc:e2:71:0e:f6:41:a8:
a4:49:7c:15:de:f8:a1:f3:7f:89:64:89:e6:b5:80:00:6c:3a:
71:19:26:7c:7f:e2:0d:49:7d:cb:4e:66:84:a4:9e:e5:54:68:
a4:f7:66:63:ba:44:13:79:d3:27:d7:1b:7e:be:2d:4f:a4:99:
69:fd:3f:52:ff:60:ea:5b:ab:cb:94:71:0b:1b:16:43:c6:79:
0b:b2:bc:42:74:8e:ae:51:e6:b9:fa:c4:1d:17:69:a1:9f:6d:
ce:aa:bc:9b:30:48:c1:cb:36:f7:dc:8c:15:20:b6:25:1c:81:
02:20:f6:a7:24:b2:d9:a5:a4:59:dd:d8:d6:cf:e3:cd:0f:22:
0d:11:78:7a:82:cc:ef:0c:a4:86:d7:4e:52:ee:4f:1d:de:e3:
3f:07:17:5b:2d:6f:8c:88:f0:2b:fc:1b:47:fd:89:e8:cb:d6:
3c:e3:a4:01:5c:2f:16:e0:a3:ed:71:54:87:3e:8d:9c:cc:54:
3b:07:b9:bb:02:61:f4:66:f8:48:00:3f:fb:2f:01:02:da:a0:
48:32:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:37 2026 by rpki-client