
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier: g3FlkyMvn0ind2chfXTyainNPqt4l5ztyS7hADSiTks=
Subject key identifier: CA:D7:0A:14:05:F8:7B:61:D2:F4:66:ED:2F:D8:B2:B9:24:3D:80:E6
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number: 0310
Signing time: Thu 19 Feb 2026 00:20:51 +0000
Manifest this update: Thu 19 Feb 2026 00:20:51 +0000
Manifest next update: Thu 26 Feb 2026 00:20:51 +0000
Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: nCNOkI1cMI1a4NIHmG0tSCd7rMC+MrDtMEoXUfnSIHU=)
2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: 2ErCU/J+DpquU4qqc3TwXCkDxCXKfSH2bvg7aekBShk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
Validity
Not Before: Feb 19 00:20:51 2026 GMT
Not After : Feb 26 00:20:51 2026 GMT
Subject: CN=69965763-0a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:9c:a7:24:0a:cf:66:aa:ec:88:45:97:c5:
2a:12:85:2d:7e:71:88:35:39:86:33:71:bf:77:9a:
72:a4:52:08:ad:e5:55:f5:00:5d:06:79:93:06:b4:
18:91:5f:92:35:32:df:fb:61:f8:c6:06:ec:2f:c4:
11:57:24:0e:77:96:e6:61:e7:ea:73:ac:74:34:39:
95:eb:48:86:cd:8e:a0:af:6b:2f:4f:00:ae:a3:35:
e3:0f:17:53:a6:5b:07:66:86:5b:2e:30:36:c4:a5:
09:6c:dc:4b:09:e3:e6:ea:fe:0b:77:f6:08:45:0c:
9a:b9:98:93:27:9a:c8:19:38:27:c0:1c:c0:42:d2:
17:b3:74:2f:60:0d:fa:dd:bc:45:97:50:40:19:04:
bd:17:83:40:64:95:cd:00:9f:92:0a:56:e2:68:3c:
8b:f8:d2:ce:88:56:29:95:7a:e5:3b:40:8a:80:3d:
ec:54:33:d6:73:47:d8:b3:87:02:34:01:b4:f9:35:
dd:fd:d0:88:3b:7d:22:12:b3:20:1d:61:36:1e:6f:
35:b7:e6:80:97:7b:46:e2:49:22:4e:a7:fd:61:ef:
1d:d3:f7:fd:f8:73:e9:6a:e7:35:67:90:9b:2b:b3:
0c:c1:54:69:a4:ce:66:14:05:e9:49:8a:6d:9b:33:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:0A:14:05:F8:7B:61:D2:F4:66:ED:2F:D8:B2:B9:24:3D:80:E6
X509v3 Authority Key Identifier:
keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:ee:4c:ba:81:bd:35:48:cb:56:e4:12:3b:25:c6:1d:bc:
51:47:f3:6b:15:34:d1:24:a5:0f:b9:16:50:3b:4e:94:6e:c9:
2d:a4:47:b2:dd:ce:d5:7a:48:3d:c0:fb:1d:ed:57:f8:e9:12:
f6:91:10:af:35:d9:fe:72:d4:0c:88:55:ca:d6:76:a9:d9:1f:
6c:0f:95:08:fa:3a:b2:92:31:e9:b7:77:3d:c1:7f:3b:82:96:
a1:4d:f9:b0:54:8f:1c:33:de:c9:a2:52:b2:31:68:23:50:fe:
4b:c7:a0:b8:76:cc:c1:6b:42:2c:8d:a5:e5:61:85:14:d4:4e:
f5:fe:7f:94:42:95:94:f5:7d:1e:40:9e:6c:cd:8d:0b:1c:6e:
30:97:70:9f:28:67:ba:f8:56:c8:de:37:54:18:e4:75:81:8f:
93:07:cd:e2:72:fb:dd:e6:45:7d:1a:36:1c:1e:24:56:1f:3b:
03:1d:9d:e0:ea:04:df:7d:86:56:30:87:4d:19:3c:fa:db:a5:
05:91:dd:bf:de:4a:1f:c9:77:43:c2:59:64:e8:79:09:40:59:
09:61:9a:1e:e9:8d:b8:fe:f3:ee:87:4d:dc:0b:5c:01:02:b6:
63:a9:89:b9:f4:d0:db:1a:98:bd:73:28:13:26:a6:61:b6:55:
7a:55:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:39 2026 by rpki-client