
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json)
Hash identifier: js3ZWGNvV5GxjRsIYOh3D5ciWx0jWRF7119xl1l1at0=
Subject key identifier: 40:4E:0D:F5:F4:3F:B6:6D:DE:27:1E:4D:44:16:3C:61:82:F4:E7:3E
Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA
Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
Certificate serial: 0A44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
Manifest number: 0A3D
Signing time: Wed 18 Feb 2026 19:16:50 +0000
Manifest this update: Wed 18 Feb 2026 19:16:50 +0000
Manifest next update: Wed 25 Feb 2026 19:16:50 +0000
Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: uinzle17usUQ15JU5GGwBLiy9Hn5jD6fCoPzl9E63E0=)
2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ZlFR2HTwg3fDW4lClQanT4TaI4rdoCBr8+QBrXHDB9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl
rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2628 (0xa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
Validity
Not Before: Feb 18 19:16:50 2026 GMT
Not After : Feb 25 19:16:50 2026 GMT
Subject: CN=69961022-a5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:de:45:33:11:8f:28:67:57:81:9a:cb:08:
78:37:ce:4e:78:7f:30:df:80:f3:d0:73:4a:4e:5b:
91:06:66:ee:e6:7f:f3:42:b6:c6:48:28:e5:41:03:
75:61:24:fa:12:7f:a2:60:63:c3:2e:4d:41:41:b9:
2d:5c:d0:f7:79:e7:6f:69:f9:fe:a4:65:b9:fd:7d:
a0:e5:eb:8f:f7:32:0c:a4:d3:10:4f:53:9b:52:3f:
c6:f7:d2:aa:4f:e7:88:44:8b:d5:93:ab:99:09:29:
fb:7c:97:d0:8d:39:db:6c:b5:3b:cc:09:56:be:cb:
38:8d:85:c0:91:43:a8:cf:fc:18:31:f3:16:01:f0:
6e:88:be:df:37:09:3d:66:36:9f:13:a9:d8:58:bd:
43:0c:dc:5a:f7:bb:c9:43:19:19:7b:37:97:a1:48:
20:83:44:59:b6:2e:ac:1b:87:0a:1b:00:a4:7b:87:
aa:70:83:0f:6f:17:33:3a:f6:7e:18:84:10:b0:c6:
c8:67:eb:09:ec:27:67:ce:ae:35:1d:e4:c3:6c:5d:
31:17:cb:73:85:4b:1a:24:88:51:21:e6:74:a7:2c:
d8:50:0d:df:de:f7:70:bd:fa:20:27:91:a9:7e:2d:
db:bf:33:df:9f:06:e0:3f:36:57:56:0f:6f:3e:7b:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4E:0D:F5:F4:3F:B6:6D:DE:27:1E:4D:44:16:3C:61:82:F4:E7:3E
X509v3 Authority Key Identifier:
keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:5d:42:1e:89:98:44:27:e6:be:ac:23:e3:6a:da:01:51:34:
65:ff:af:5f:a5:bb:94:6a:89:35:1c:b4:bf:0e:73:d4:d6:db:
c9:ac:4b:f1:56:66:da:54:b0:15:dd:d3:1e:42:bf:c7:f9:3b:
98:4c:ea:9e:1a:aa:eb:9b:d1:4e:0d:85:6d:4d:44:c8:dd:96:
4a:ba:12:72:f3:50:b9:70:42:3e:9e:f8:a5:a3:16:25:70:62:
8d:e0:b3:70:04:b2:c8:8a:06:4d:f8:ef:5d:4f:09:9e:d3:5c:
d2:23:98:4e:16:0b:7c:91:47:e2:db:40:bc:c5:3a:71:90:61:
94:55:41:81:a2:92:6c:41:e3:2a:42:2f:c1:ab:25:69:37:9e:
7b:37:e6:49:cd:ab:20:9d:9c:06:9a:43:a5:e1:81:2f:71:ef:
c8:2d:9c:b3:00:6b:96:89:42:25:cd:d7:f4:17:6c:80:35:8f:
d5:a7:49:a3:b2:fe:27:d9:57:d2:fa:e9:59:02:e6:ed:d6:4a:
3e:dc:b9:7b:71:f3:3e:7d:0e:28:40:1c:05:a5:59:b8:98:13:
ee:2d:66:61:9d:04:11:36:bb:72:9f:ec:f0:3d:59:78:f6:74:
56:10:44:ca:11:14:47:98:5c:aa:e9:36:0c:c8:b5:37:b0:b0:
ba:22:61:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD
QUNFRDBFQ0EwHhcNMjYwMjE4MTkxNjUwWhcNMjYwMjI1MTkxNjUwWjAYMRYwFAYD
VQQDDA02OTk2MTAyMi1hNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr//eRTMRjyhnV4Gaywh4N85OeH8w34Dz0HNKTluRBmbu5n/zQrbGSCjlQQN1
YST6En+iYGPDLk1BQbktXND3eedvafn+pGW5/X2g5euP9zIMpNMQT1ObUj/G99Kq
T+eIRIvVk6uZCSn7fJfQjTnbbLU7zAlWvss4jYXAkUOoz/wYMfMWAfBuiL7fNwk9
ZjafE6nYWL1DDNxa97vJQxkZezeXoUggg0RZti6sG4cKGwCke4eqcIMPbxczOvZ+
GIQQsMbIZ+sJ7Cdnzq41HeTDbF0xF8tzhUsaJIhRIeZ0pyzYUA3f3vdwvfogJ5Gp
fi3bvzPfnwbgPzZXVg9vPnuYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBODfX0
P7Zt3iceTUQWPGGC9Oc+MB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0
NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX
T1JISTB0WlJ1aW5LenREc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABXUIeiZhEJ+a+rCPjatoBUTRl/69fpbuUaok1HLS/DnPU1tvJrEvx
VmbaVLAV3dMeQr/H+TuYTOqeGqrrm9FODYVtTUTI3ZZKuhJy81C5cEI+nviloxYl
cGKN4LNwBLLIigZN+O9dTwme01zSI5hOFgt8kUfi20C8xTpxkGGUVUGBopJsQeMq
Qi/BqyVpN557N+ZJzasgnZwGmkOl4YEvce/ILZyzAGuWiUIlzdf0F2yANY/Vp0mj
sv4n2VfS+ulZAubt1ko+3Ll7cfM+fQ4oQBwFpVm4mBPuLWZhnQQRNrtyn+zwPVl4
9nRWEETKERRHmFyq6TYMyLU3sLC6ImFV
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:37 2026 by rpki-client