
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json)
Hash identifier: ePjKmUmWdUgRq20ok2LIRw2oLLPw+S9bTH4md/adynw=
Subject key identifier: AA:0F:5B:68:A5:22:7A:10:54:A0:61:F0:AF:28:76:68:67:91:73:96
Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Certificate serial: 1671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
Manifest number: 1660
Signing time: Wed 18 Feb 2026 16:29:53 +0000
Manifest this update: Wed 18 Feb 2026 16:29:53 +0000
Manifest next update: Wed 25 Feb 2026 16:29:53 +0000
Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: OHvdgnojqvj1ZFss4b3/2PeO3/0wYB5HZFSSiwtGke8=)
2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5745 (0x1671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Validity
Not Before: Feb 18 16:29:53 2026 GMT
Not After : Feb 25 16:29:53 2026 GMT
Subject: CN=6995e901-df45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:30:c2:91:18:92:a6:a6:43:7c:d4:c3:96:
4f:0e:be:f0:47:61:b0:de:20:1a:c3:fc:d0:38:41:
d8:f4:a7:39:f4:48:03:02:2f:30:68:fd:49:ae:c9:
77:0e:fb:1f:8d:bf:49:52:af:c0:9f:92:40:5e:30:
c4:58:0f:3c:a4:a7:15:f4:3f:08:45:e9:2c:42:27:
1c:cb:34:97:ff:f2:95:95:69:99:97:0a:48:0d:aa:
59:2a:a7:67:3b:d4:11:a9:d9:b7:be:f1:f7:20:e4:
1a:32:a9:e4:85:2c:54:f4:eb:7a:55:17:6f:fa:0c:
ef:22:4b:60:e4:67:1a:ec:b5:32:41:46:77:4c:28:
9f:8c:1b:fc:d6:b1:f1:35:d6:ed:c3:14:6c:86:6d:
8e:2b:34:eb:b0:75:d3:f9:da:3b:59:aa:45:16:1f:
2c:db:a6:ca:4a:23:d4:63:b3:a6:da:d6:51:a7:c0:
8f:13:94:28:7b:e7:f2:83:d0:f1:45:fb:f6:5c:fa:
b6:30:ab:cd:97:66:f3:5d:9c:57:cc:70:ea:08:9a:
e8:db:13:26:0e:8b:6e:88:f0:0b:11:db:49:64:69:
95:28:0f:ba:37:8a:d0:05:73:f2:7f:06:2f:85:d1:
38:3f:e5:98:ab:35:f0:88:7a:f4:05:93:8e:05:4f:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:5B:68:A5:22:7A:10:54:A0:61:F0:AF:28:76:68:67:91:73:96
X509v3 Authority Key Identifier:
keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d1:a7:3a:d0:2d:34:1e:b4:2f:cf:a1:45:05:61:dc:ec:0b:
69:62:40:ef:15:6e:5d:37:26:23:b3:97:9d:21:8d:b7:86:5b:
50:32:8e:99:10:11:fd:49:0b:cf:10:7c:4e:32:9d:5e:9e:b2:
93:50:9c:7c:3d:3e:42:14:d7:4a:fa:dd:5b:61:c5:73:41:34:
55:a3:53:da:e6:ae:fd:0a:38:52:22:f2:63:d5:12:58:6a:6a:
00:2c:c3:15:52:81:87:ea:e3:c0:58:71:69:97:70:bb:8d:bf:
52:00:ab:51:bd:12:8a:86:99:06:b9:b3:49:48:24:47:af:dd:
6e:1b:03:0b:58:14:4a:59:05:98:fb:5b:7f:cb:a5:7d:09:2b:
ca:c6:7a:d8:3b:9c:96:2a:57:bd:7a:67:52:8c:53:3f:9d:53:
32:be:c7:cc:f5:65:96:bd:4a:25:7b:69:69:52:89:de:22:cd:
95:54:8b:e3:9a:e3:7a:b3:c0:ce:c7:9c:88:d4:b4:ee:4c:79:
79:48:a5:50:6e:17:cb:29:0c:a4:6c:32:86:a7:aa:1b:f5:4c:
d8:cf:38:eb:ef:56:cb:39:bd:4d:32:72:f9:b7:43:72:fc:af:
de:cd:e1:58:0d:b4:5c:a9:aa:7b:b6:cd:3f:30:e1:66:7c:63:
10:ea:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:24 2026 by rpki-client