
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json)
Hash identifier: gwUY6MhS6skSIb90xTQTLUgb6WRvpmyP9UiWp8YbKJ4=
Subject key identifier: 02:2D:41:EB:5D:2B:54:E5:60:36:31:3B:A1:6C:37:A1:79:75:8D:D9
Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Certificate serial: 0CEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
Manifest number: 0CD0
Signing time: Wed 18 Feb 2026 17:59:06 +0000
Manifest this update: Wed 18 Feb 2026 17:59:06 +0000
Manifest next update: Wed 25 Feb 2026 17:59:06 +0000
Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: yewG9mBcYKa1PiIM0D5CDV59RpbjM6G3xMiQUvotAQo=)
2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: nhOxYzG0rAWYRSzTLJPw39uwciMl2MDnLaJCFvQHhfM=)
3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: rUTKhJ4mbBn/gtcjaqFary2usRDlDOu+VtUbm3mrKXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Validity
Not Before: Feb 18 17:59:06 2026 GMT
Not After : Feb 25 17:59:06 2026 GMT
Subject: CN=6995fdea-89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:3f:53:4b:ce:72:e4:63:f9:13:3c:27:59:
af:c8:2e:01:02:db:d5:a6:87:f4:26:98:a0:36:76:
46:10:9e:b0:c0:64:8f:b4:fc:89:81:93:41:e8:f0:
4d:02:f8:7b:0c:6d:a0:20:78:33:6f:2c:51:af:da:
31:83:ce:65:b4:cd:39:9c:49:8a:89:d2:d8:b4:eb:
c8:75:26:2b:bb:5f:8e:3a:9a:21:ad:9f:fe:96:80:
2c:1d:bc:e7:23:7a:bc:d0:2f:0b:70:b4:20:30:1e:
ce:8c:71:a5:2a:aa:f1:30:fc:e9:0b:06:cc:6f:46:
d1:53:21:f9:5b:62:05:5b:3d:bc:71:8c:d1:cb:bb:
25:4a:b6:a6:28:51:c2:53:83:c9:15:62:6b:ad:9b:
1d:4d:02:e6:8a:52:b8:0c:da:a2:00:3a:ab:8a:5d:
5f:71:e7:91:22:10:f7:3f:bc:1f:f1:da:6f:e3:8c:
32:a4:09:6b:d8:69:61:5e:a4:c6:e7:c9:d2:9b:6f:
b4:4d:35:84:f1:e4:09:88:9a:43:58:2c:1f:de:aa:
8b:15:67:9e:50:8a:89:15:46:b0:89:6c:63:96:7b:
f3:77:cc:29:fe:6c:07:99:f5:7a:36:15:bb:d2:14:
4e:08:c6:10:c7:14:2a:b3:45:98:99:3a:9a:65:1c:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:41:EB:5D:2B:54:E5:60:36:31:3B:A1:6C:37:A1:79:75:8D:D9
X509v3 Authority Key Identifier:
keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c8:62:55:69:5d:b2:5d:25:55:6b:77:0a:04:61:68:ca:ee:
cc:5c:52:f8:28:f6:24:83:5a:1e:48:ec:39:c3:67:64:aa:f4:
b9:a4:27:d3:81:88:53:93:0c:57:4f:9d:8f:c9:a6:32:3e:2b:
45:4f:2c:d6:39:81:21:bd:38:e6:69:88:62:6c:66:9f:b0:b9:
9d:78:a1:f9:4d:4b:a7:19:de:0a:2e:1c:11:ec:4c:8c:ce:7e:
78:c8:d1:ec:72:42:6d:d0:9f:b5:56:90:de:58:6e:15:e9:8c:
5f:3f:b8:15:3e:4d:35:74:90:10:47:1e:27:b5:4f:68:9b:4b:
f5:62:37:2a:5e:6d:80:b5:0f:d9:8a:db:57:0a:e6:42:92:1f:
b1:ef:fc:03:6d:c9:a1:13:83:f4:e6:24:89:91:21:0f:c3:ad:
ed:0e:1a:c8:43:4e:d1:3c:35:36:ea:08:05:0e:a1:6a:a4:4a:
d3:1f:b2:d9:6a:1a:d4:08:9f:cd:ae:cd:c0:7a:c9:3b:16:63:
72:b2:c6:46:c2:20:29:30:2c:17:69:cb:4a:59:a9:a4:a2:b0:
fb:cb:e5:94:e1:77:73:14:a5:3a:0e:48:86:70:16:fd:ba:50:
db:b3:3f:18:eb:7a:40:ad:bc:1c:20:f3:06:53:75:15:fc:d3:
7f:aa:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:27:32 2026 by rpki-client