
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json)
Hash identifier: 2QB858qznBLcNng7hh2qE0vQbikEbO9OvJWcfUARcU4=
Subject key identifier: F2:CC:52:38:3F:3F:3E:2B:D8:6C:E2:21:01:FF:7C:0E:4B:31:E9:C0
Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Certificate serial: 1DB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
Manifest number: 1DA6
Signing time: Wed 18 Feb 2026 15:56:22 +0000
Manifest this update: Wed 18 Feb 2026 15:56:22 +0000
Manifest next update: Wed 25 Feb 2026 15:56:22 +0000
Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: b9CbE2QKJOPaYexht86JoIl4lWN10FDJd1YJoRG/WIk=)
2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: k8TIUAQe/uhiGTZr6cgQAthXD90vdh6WA7DCNugyFL0=)
3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: KJtFM/La7mL3fu5dlcMqDcraRcAtERap2FuVwdqAgkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7605 (0x1db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Validity
Not Before: Feb 18 15:56:22 2026 GMT
Not After : Feb 25 15:56:22 2026 GMT
Subject: CN=6995e126-8d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:dd:c7:be:0a:ae:88:f7:0a:fb:7d:78:23:
e5:06:6c:72:e2:8c:44:96:45:00:d5:1b:48:9b:2e:
e2:ac:d9:a2:24:05:12:f8:2b:e9:3e:e0:31:65:91:
d6:79:db:02:39:7a:81:29:24:a4:31:d1:17:ff:00:
8d:aa:79:e3:41:f7:83:09:1b:2e:4a:87:ba:a5:ff:
b4:5f:38:a9:57:2b:5a:ed:2f:9e:c7:fc:70:a9:23:
9f:f2:83:d9:44:9b:f7:d7:36:7c:0c:7c:5a:26:f0:
41:ee:ad:1e:85:98:b8:4a:a8:d1:ff:64:10:d4:26:
6e:47:cb:56:ed:d5:0f:50:4b:fe:a7:b6:e9:d0:e0:
ab:47:6f:e2:45:29:b2:94:9c:8c:d3:e2:47:fd:51:
e1:eb:39:24:aa:a5:74:0c:f0:fc:2e:01:58:ed:cf:
82:4a:17:84:49:0b:b1:87:e6:91:f0:35:08:1a:bd:
9a:ae:ff:b4:eb:b8:15:4f:4c:ae:d7:80:83:5c:df:
75:48:ac:d9:1f:8a:69:2a:28:14:aa:99:50:c6:92:
c6:91:84:94:f5:63:2b:7d:27:8e:4d:c0:5c:00:65:
ca:fb:91:b9:c1:f1:21:20:b5:5f:21:ed:a4:12:d2:
ba:c6:8a:53:83:76:78:d5:b2:84:0f:99:23:ed:8f:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:52:38:3F:3F:3E:2B:D8:6C:E2:21:01:FF:7C:0E:4B:31:E9:C0
X509v3 Authority Key Identifier:
keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:84:ad:52:a5:42:de:13:c7:66:18:39:ff:99:ee:57:d3:b1:
c4:86:2a:29:ef:73:fa:b4:e3:ad:a7:54:70:60:0f:16:2c:0a:
a8:4c:ef:f1:0d:92:61:99:ee:89:70:d0:08:9b:54:5e:7f:6d:
22:d7:03:cf:11:83:05:17:8c:56:4a:56:3e:89:ff:b1:83:51:
9b:5b:80:3c:0f:2e:5e:9b:80:47:15:30:72:1d:0a:33:7a:d4:
56:55:a6:85:2e:58:ff:97:38:fa:8b:2e:64:94:39:4c:96:6b:
d5:35:8d:06:cd:a2:f3:a6:e6:eb:56:8f:fd:49:ce:c1:0e:6a:
f7:31:e7:5c:89:44:2c:85:9b:2b:3c:4c:01:56:85:28:9a:f6:
03:4e:81:50:7b:67:ce:79:5c:be:d9:7f:af:77:16:36:37:3b:
bf:ac:65:61:fa:41:14:4a:44:84:c7:3b:f6:de:fe:ad:a9:52:
7b:97:5c:01:72:fd:0f:37:e5:34:b4:cf:6a:09:7d:35:2c:7c:
bd:30:a0:8b:5a:22:c4:ee:78:01:84:8e:cc:84:1e:37:49:de:
d8:52:5a:3d:73:e0:47:18:e7:e3:af:3e:a3:57:b7:1e:95:9a:
85:f7:8d:a0:59:41:bf:81:44:f1:6f:7b:56:13:e4:5f:64:9b:
3b:78:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:20 2026 by rpki-client