
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
File: P7b20GZYOGwje40UDa0VsoOLtco.mft (raw, json)
Hash identifier: dLphHgDrL3du3fNEveRFzUE+OxwPUm3INxcEN9kq/u4=
Subject key identifier: 36:2F:FB:EF:CB:D4:5F:FA:74:81:89:99:0F:96:FF:1F:B7:19:9A:47
Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Certificate serial: 0BB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
Manifest number: 0BA8
Signing time: Wed 18 Feb 2026 18:36:33 +0000
Manifest this update: Wed 18 Feb 2026 18:36:32 +0000
Manifest next update: Wed 25 Feb 2026 18:36:32 +0000
Files and hashes: 1: P7b20GZYOGwje40UDa0VsoOLtco.crl (hash: MO8vx0nWWQnEiJVceRB61ITnEtCboXV91DrLOw6WPBA=)
2: 9F9FD574758811EA93AADD3FC4F9AE02.roa (hash: bzYatoV9vXAn/TFneZ8B1b8ytRqlQM8seu8F8tZug0k=)
3: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (hash: d1wEAtOklHH/pS7iavUcvo62WbDBiArhDOGZCIjBXFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Validity
Not Before: Feb 18 18:36:32 2026 GMT
Not After : Feb 25 18:36:32 2026 GMT
Subject: CN=699606b1-9d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:5d:13:9a:a8:2f:21:9c:12:97:74:d7:d6:
72:fb:68:b0:8e:79:6b:7e:b1:71:a4:8d:fd:3e:3f:
4a:2a:81:41:27:31:54:3b:f2:6d:42:a4:f1:eb:36:
5d:ad:dd:dc:ad:a2:99:4e:a0:53:84:ad:9f:1f:41:
59:da:4b:75:8d:79:9a:09:a7:6f:45:73:a4:79:bf:
7a:bf:83:1b:91:81:9d:3c:3d:a7:84:c3:46:08:8b:
53:f4:cf:09:06:2e:35:5d:96:f7:65:3d:52:85:9d:
af:19:81:58:0f:db:a1:ef:65:22:cf:a4:1b:3d:ef:
ee:a5:56:f5:3f:19:b9:d6:be:71:0a:c7:29:c4:0f:
d0:4f:4d:e0:18:d0:bb:5c:88:2a:a4:c1:f7:11:ce:
6f:c4:9f:0f:ae:87:b6:05:41:28:a3:79:47:3f:21:
5f:7c:41:09:74:60:ab:58:c8:8a:89:07:95:a1:cb:
1a:be:14:a3:65:f2:c8:cb:ed:fb:d2:eb:5e:c3:93:
3c:d9:18:cd:58:68:4f:8e:e1:9a:f3:6a:90:f5:a9:
ff:1a:18:b0:a5:11:58:a2:9d:87:1f:28:3b:be:78:
c3:8d:2f:b1:59:1e:e4:44:fd:88:5e:03:8e:45:ce:
ae:2d:5c:20:c4:b5:09:9b:00:ca:8e:ae:7f:f2:3f:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:FB:EF:CB:D4:5F:FA:74:81:89:99:0F:96:FF:1F:B7:19:9A:47
X509v3 Authority Key Identifier:
keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b0:b5:0c:d8:2d:d6:a7:21:23:d1:94:33:b5:a5:51:fd:b2:
f4:18:08:5d:25:6a:b4:ac:62:76:2c:32:ac:fa:0a:a7:40:32:
fc:5c:af:1a:ae:34:4c:6e:83:40:6c:40:0a:7c:5b:19:90:95:
0d:7c:10:bd:c7:af:43:89:52:9b:41:f8:e2:66:01:c4:73:cb:
9b:28:76:99:2c:47:7a:5f:e0:62:d7:46:bf:ba:bc:ae:0b:5b:
fd:1e:4f:59:7c:fb:53:3b:b5:b9:b5:0a:2a:e0:2c:70:90:0d:
7e:00:08:42:35:28:ae:75:b7:ac:86:ee:e8:95:0b:9b:78:c2:
e0:d2:5b:20:93:7d:dc:01:63:7c:25:43:3b:c4:d0:cc:81:d7:
f1:c1:5d:1a:a0:7a:ef:f4:8e:d6:ad:b2:5b:3b:f4:3f:f3:a5:
fe:33:2c:17:e9:2c:d9:39:20:9a:a8:84:fa:43:0d:2c:06:f8:
06:8f:86:3b:ee:ba:b8:6c:a1:6c:85:a9:0d:ba:56:95:0b:ef:
87:75:4e:6c:43:12:16:ec:ba:0b:8c:86:64:c9:0e:cd:37:a9:
2a:0d:c8:ad:cb:fa:e4:6e:6c:b5:c4:2c:f9:90:b0:03:3d:80:
14:1a:d9:eb:f7:94:39:cb:43:5e:5d:5e:0c:96:6f:32:b1:f2:
80:dd:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:30 2026 by rpki-client