
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier: fAaN36HnXA1KpaxkocbcYRbvFUoSi4rxeBRjJC4o6nw=
Subject key identifier: A7:C2:BA:E7:EF:0E:A7:77:91:9B:9E:AB:40:87:98:CA:F4:45:5E:75
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number: 06D4
Signing time: Wed 18 Feb 2026 21:34:19 +0000
Manifest this update: Wed 18 Feb 2026 21:34:19 +0000
Manifest next update: Wed 25 Feb 2026 21:34:19 +0000
Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: dsLY5r6G5OP8cUAVCQQlCb1l/tefksWFGtwnAPQz2vE=)
2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: /i9RofZ06AYBMENjcaJpNwKG22jU3wGWaEpuwf3htx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Validity
Not Before: Feb 18 21:34:19 2026 GMT
Not After : Feb 25 21:34:19 2026 GMT
Subject: CN=6996305b-ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:f1:94:67:58:66:01:e5:48:61:4f:fc:a9:
5c:13:36:f6:39:d2:38:8f:c9:8f:4a:05:33:9c:c1:
8c:55:83:39:cf:97:0e:e3:b7:b8:d4:e7:96:d2:b0:
ac:8b:cc:96:c6:ec:95:5e:2b:9c:8d:b8:c5:20:f2:
ab:91:cd:53:bc:42:79:98:0e:ad:b5:bf:4b:f2:09:
27:86:61:d7:b7:5e:3f:39:16:36:d5:83:1b:8b:7b:
5a:4a:28:13:58:35:22:cb:fe:5b:56:cc:ef:72:f8:
96:83:30:5f:6d:79:65:48:c9:9f:69:36:b7:05:7e:
09:da:cd:2d:7f:48:06:83:71:1a:9c:18:93:72:d7:
ad:a2:7f:51:2a:1b:14:80:18:da:89:70:17:07:70:
5e:8f:05:c7:0d:85:2a:df:07:64:83:9a:3c:fa:ed:
75:98:b6:a0:0f:7d:77:b9:31:02:7a:09:ea:41:dd:
4c:71:81:d7:ec:ca:73:e7:0d:e1:17:37:10:c6:f9:
3e:73:d2:ec:61:26:1c:de:a6:9b:7b:63:ee:79:37:
39:00:30:6e:9a:1b:98:ed:d0:26:7c:67:94:1d:e3:
f0:a4:4a:ea:2c:bf:96:49:54:88:85:1b:c7:2b:ed:
c7:be:ab:74:5d:78:19:f7:d8:a6:85:92:2b:0f:73:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:BA:E7:EF:0E:A7:77:91:9B:9E:AB:40:87:98:CA:F4:45:5E:75
X509v3 Authority Key Identifier:
keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:88:c5:a2:f7:e4:07:db:1b:b9:1c:36:86:3e:27:1d:fd:3f:
02:86:e0:c7:96:75:dc:c8:b8:3b:c6:28:e8:c2:2c:35:e2:70:
12:49:6a:ae:6c:2a:c7:bf:69:55:ff:c1:41:d9:d2:ec:c3:c6:
11:dc:04:d9:72:00:5f:e8:a3:ff:e5:b0:5e:1c:49:38:79:a4:
fb:80:fd:f8:a7:64:92:b8:6e:a4:eb:5a:65:42:58:63:f5:ff:
c1:d6:a8:29:f9:2d:90:20:52:cc:5b:1f:9f:c7:66:dc:4f:bf:
8f:db:83:a2:c1:e3:b3:48:3a:21:bc:67:80:b6:be:4a:5a:8d:
d9:4d:db:8a:89:3b:41:bf:41:be:f9:d2:d5:77:d8:9d:d6:75:
94:69:eb:4a:6c:c7:24:27:f6:76:b6:80:2e:6a:c4:51:60:9f:
a9:74:22:e8:ea:72:22:90:fa:40:36:3b:18:f4:d4:1b:ca:5f:
ab:c0:0c:61:0a:8e:83:d1:35:80:ba:e8:3b:2c:17:e2:25:b4:
c2:cd:07:18:40:c1:00:71:4d:69:f0:27:ee:6a:22:da:fe:18:
5e:20:3a:dd:1b:fa:2b:d1:11:ce:19:b2:c6:ac:fa:60:31:7f:
40:4a:96:08:68:d3:c1:2b:62:a7:c8:d8:ae:dd:a1:11:74:f7:
0b:d6:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:22 2026 by rpki-client