
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
File: aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json)
Hash identifier: 26QZswvFD2VzxX5fGQWQZmagWn+JbQld4bd/bW8WIxQ=
Subject key identifier: 97:B2:21:D1:13:6B:25:99:C9:42:C5:13:72:E0:66:8F:D7:01:14:0F
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
Manifest number: 08
Signing time: Thu 19 Feb 2026 07:24:39 +0000
Manifest this update: Thu 19 Feb 2026 07:24:38 +0000
Manifest next update: Thu 26 Feb 2026 07:24:38 +0000
Files and hashes: 1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: GaCpblfglL956qFZoLtktVyFdU0flX4wEK8Yq0nTB+U=)
2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: tEgQGD303wd4wLHz36nCQCa5a3KwSI+T4puQSCCo+wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Validity
Not Before: Feb 19 07:24:38 2026 GMT
Not After : Feb 26 07:24:38 2026 GMT
Subject: CN=6996bab7-6c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:64:01:36:99:6a:20:83:1f:aa:cc:ef:2f:
09:ab:63:c2:cb:ba:a8:de:13:66:ed:65:85:3a:38:
45:02:97:f8:2d:cc:07:43:5b:95:cf:22:87:ab:15:
3c:50:e8:20:a0:08:23:d5:e0:72:c7:d6:84:26:b6:
fe:08:09:42:b2:e5:11:81:6d:9e:54:ea:31:5d:cf:
6a:1b:ab:2c:e0:af:95:fe:73:72:ea:ed:c5:1c:c3:
de:3f:e7:8a:d8:f0:67:67:8b:85:fc:f9:15:1b:d7:
99:91:b8:6c:2c:04:c1:ac:91:b5:fd:0b:ba:a3:64:
ea:8f:ef:88:13:13:a2:52:c4:c8:2e:b6:69:4c:d0:
98:df:73:e1:4a:1e:a3:5b:ea:38:4b:e4:f3:b4:e9:
6d:2b:bc:05:c9:50:3f:97:8d:3b:bc:f7:7f:1e:9b:
a6:5a:e7:9d:39:22:6c:f7:6b:6e:52:0d:a5:4b:f4:
d7:d1:f7:8e:7a:cb:b8:47:cc:fa:77:89:b2:5a:32:
f6:88:18:6f:ee:74:45:bd:c2:d1:0c:33:64:4d:a1:
94:e5:d3:2c:31:69:a2:69:7f:e3:40:4e:2f:c1:50:
93:cb:2c:ba:4a:c1:57:7d:c1:dd:74:10:92:93:65:
28:f4:39:60:e2:85:9a:50:5b:09:ad:0d:d1:68:1c:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B2:21:D1:13:6B:25:99:C9:42:C5:13:72:E0:66:8F:D7:01:14:0F
X509v3 Authority Key Identifier:
keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:1b:23:a2:a9:08:4d:0c:ff:d5:7c:ac:86:52:1f:7a:0d:4a:
0a:6a:f0:25:ec:ee:b2:57:34:20:cb:e7:94:dc:eb:9a:c4:0c:
0f:8a:b3:74:7b:aa:19:eb:f8:a0:9c:67:67:4a:f1:5f:cf:e3:
e3:e1:2a:70:af:36:e0:d4:93:73:62:77:67:45:e0:68:8a:10:
93:8b:7f:58:93:42:b4:91:8a:8a:8b:fe:58:3a:0b:cc:ec:bf:
6f:ba:33:24:06:4f:1c:38:49:dc:32:6d:a9:07:46:6d:13:2f:
c6:83:49:fb:ac:e9:e6:ec:fa:f2:c4:28:97:fc:6e:29:73:f6:
a5:0b:9e:b1:49:63:ef:58:fb:67:3d:23:b2:63:a5:82:4f:d9:
18:e1:92:df:61:09:32:97:9e:24:2a:87:2c:2e:2f:a3:35:33:
03:2a:23:60:56:bd:0d:3f:f0:f3:f2:bd:05:0f:fc:29:66:eb:
d1:3b:e5:60:fd:fa:6d:fb:6c:0b:7c:66:25:37:55:6e:55:53:
d3:db:9f:a8:d7:e1:6d:be:59:c0:46:6d:cf:ab:b9:d3:89:40:
f3:89:ee:ba:22:e2:ac:3f:0f:1b:d4:6e:fa:d6:11:bb:7a:3d:
90:fc:17:8b:aa:35:a9:dd:a0:d1:f1:32:60:de:7a:c5:d3:fb:
d3:48:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:04 2026 by rpki-client