
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier: 8DDn53jUUXyusGkuMI6fmUNBixK6ybFloIYV3l98n5E=
Subject key identifier: E8:BE:A5:4C:8B:C4:3C:B1:F7:C6:98:08:72:B4:E0:00:88:19:56:2E
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 2539
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number: 2523
Signing time: Wed 18 Feb 2026 15:37:08 +0000
Manifest this update: Wed 18 Feb 2026 15:37:08 +0000
Manifest next update: Wed 25 Feb 2026 15:37:08 +0000
Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: ZiqzkbaHzTS1xNYsDE6c2X5bEjinVEHsf7f+A1FzRKA=)
2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9529 (0x2539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Validity
Not Before: Feb 18 15:37:08 2026 GMT
Not After : Feb 25 15:37:08 2026 GMT
Subject: CN=6995dca4-4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:af:f5:2e:15:b0:84:e5:ab:23:26:e2:7b:
2e:f6:30:69:55:35:14:83:6b:f6:a4:7e:0c:ca:5d:
7b:f6:8d:d0:c6:0d:b9:68:e2:99:30:16:e1:1c:c2:
4f:86:5a:75:d9:70:79:20:4c:cf:a0:66:5b:9a:9c:
04:38:10:37:91:94:1c:82:1a:77:4c:9a:8b:5f:b1:
b9:7f:3a:6c:d4:ce:98:b0:39:18:77:87:16:63:17:
a7:31:04:b1:fb:b5:9b:21:e7:57:66:e9:09:63:2d:
aa:f3:ac:b4:11:2a:83:e7:12:b0:47:cd:21:30:76:
7d:54:95:2d:ce:f3:0e:7a:f7:65:a1:17:7b:67:ac:
ba:d9:99:36:74:e7:c6:f8:e9:e0:01:18:68:29:ab:
dd:41:5c:b2:2e:09:68:c9:0d:64:b4:fa:f6:7c:aa:
8c:36:c8:b4:b2:08:57:c0:61:02:67:0b:83:54:0f:
af:a0:25:0f:73:ce:66:2b:65:c5:25:32:85:ef:6d:
fe:12:51:c6:21:4b:c4:b9:ba:c2:82:1d:d4:15:cf:
ad:a5:de:4f:ab:c6:66:d3:0f:87:c0:ba:33:45:06:
d7:6e:1c:0a:f1:f4:51:ab:fe:22:fe:40:47:2b:08:
b8:77:21:f0:40:3b:21:ce:8c:0c:74:3d:36:ed:ca:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:A5:4C:8B:C4:3C:B1:F7:C6:98:08:72:B4:E0:00:88:19:56:2E
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:6b:1d:b0:f2:3b:b3:3f:16:b1:3e:67:06:eb:a4:24:e9:19:
8f:14:8a:b6:94:50:fa:ac:64:ad:3e:5b:c5:7e:09:b8:c3:06:
4f:34:e3:86:ce:a4:15:e3:76:bf:b8:f3:3d:43:16:2a:aa:d3:
53:31:02:bd:32:6f:a5:76:51:ea:30:69:e4:5c:a2:11:24:53:
50:3a:ba:6f:d7:b7:82:ce:79:a7:7b:34:d4:f2:bd:66:e6:e1:
e3:40:fc:ae:c7:a1:93:88:80:1d:7b:6f:ee:f7:c4:c0:11:c5:
69:1f:88:0a:e0:bb:73:31:7c:a1:9d:33:ca:c7:ed:ea:ad:00:
43:14:63:ae:19:1d:5e:0b:67:c2:12:8d:76:20:bd:87:b6:5c:
0f:5c:93:52:6f:47:1e:a4:6b:c3:89:de:32:a8:c9:92:04:26:
32:1f:3b:b1:88:bb:d1:ab:59:f9:e0:b0:10:44:05:8f:65:4b:
37:56:b0:55:14:c0:f3:63:8e:19:25:43:5b:93:9c:3d:4c:72:
a6:f5:87:9a:af:f5:e8:22:49:ee:63:ce:2f:2d:71:71:c5:f9:
58:d3:fe:2c:a2:54:3b:1c:d5:03:da:32:52:c7:60:1d:00:6f:
6c:df:93:5e:a2:eb:13:87:ce:9b:fd:4a:83:ca:9b:7c:4b:bb:
8e:82:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:40 2026 by rpki-client