
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json)
Hash identifier: rzXjcXPbHfZ9v/Iu7zDcUaSozX2+jSYD2MAQWyBBKmc=
Subject key identifier: 8D:BF:C5:3B:E1:D7:14:84:27:32:AB:C2:E0:2D:6E:77:73:C3:E2:74
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial: 09E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
Manifest number: 09DC
Signing time: Wed 18 Feb 2026 19:26:57 +0000
Manifest this update: Wed 18 Feb 2026 19:26:57 +0000
Manifest next update: Wed 25 Feb 2026 19:26:57 +0000
Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: wotY421z/F/5W1bRFH922TqftR6fGjtzZFVlCM6MpFg=)
2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: Y4bw++TnnqHhnQXoIqONS+4c30WzzpJSk4du/GajLxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Validity
Not Before: Feb 18 19:26:57 2026 GMT
Not After : Feb 25 19:26:57 2026 GMT
Subject: CN=69961281-862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:88:3e:a5:30:1a:da:10:59:5d:c7:e5:58:
f4:3c:0d:79:4d:26:5f:c8:93:a8:ad:1d:9d:79:e2:
60:0a:19:4d:b9:bd:de:51:99:a7:16:6a:c6:37:c8:
d0:b0:39:3a:58:63:a0:d2:b7:c9:7d:d9:ed:4d:29:
bd:f2:1e:31:0d:82:3b:02:06:3b:08:46:2d:08:3c:
8f:72:ca:c4:07:6a:8a:d3:34:ee:fd:da:37:d4:8e:
08:3f:73:1f:77:e5:c2:41:d0:4d:f0:51:cf:2b:f0:
a8:d8:2b:ad:e2:a2:56:b7:5e:4c:68:45:3e:6f:61:
1f:ba:b4:da:95:ab:7b:9c:34:a3:27:21:64:54:b7:
74:d1:51:a7:50:a2:ea:58:8c:88:5f:af:d2:dd:28:
fc:35:93:9a:33:89:c7:f6:31:0c:46:49:57:0e:bd:
9a:dc:83:a5:0b:c1:ad:fd:64:86:c8:c6:d0:5f:5d:
d4:58:aa:eb:19:3a:7a:80:65:5b:de:b0:5e:da:0c:
95:66:09:99:b2:cb:37:2a:be:c0:b9:24:cf:fa:58:
cc:90:38:5a:fc:36:6c:9a:cb:14:01:01:6f:ab:1a:
45:cc:b6:c2:9d:8a:ce:c1:07:7f:aa:4b:13:57:1d:
8d:df:43:42:f8:8f:fc:6e:a3:d8:cd:e2:3b:64:d6:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:C5:3B:E1:D7:14:84:27:32:AB:C2:E0:2D:6E:77:73:C3:E2:74
X509v3 Authority Key Identifier:
keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:fd:b0:90:4b:1d:35:8c:fb:a7:0e:d7:db:b2:c4:04:63:4e:
a8:2e:72:f4:8d:7b:e7:ea:7a:6a:df:72:fa:2d:d8:fa:17:60:
2a:66:d2:cb:92:73:d6:46:15:f5:b4:4a:be:fd:18:9a:e3:fa:
ba:a8:93:96:e0:d9:87:e5:13:8c:29:07:ce:08:fd:32:91:fa:
b0:cd:11:e3:5d:66:ed:18:f2:7b:26:f5:b9:ae:35:86:21:4b:
1f:18:a2:ca:bc:b4:6b:21:47:7d:a8:0e:f5:04:ae:d2:6a:72:
c6:95:8c:23:fe:fc:68:f8:c3:e5:73:bd:89:4d:73:84:41:1f:
f8:7f:4b:fe:f5:98:3c:40:5d:43:11:8d:34:50:51:f4:6b:76:
94:f7:04:84:81:b6:b4:1f:48:4b:9e:8f:6a:66:e2:25:5f:fd:
0a:fc:c0:82:32:5a:83:e8:db:84:73:22:cc:a5:d6:0d:5a:07:
91:c8:dc:cf:9b:29:61:ad:46:3e:60:e7:ea:12:21:91:22:5b:
9b:c9:fa:18:b0:c9:2f:c8:7b:b2:6b:47:cb:f1:06:a9:a4:b1:
ca:c3:8e:06:5a:b0:6e:8e:e9:c1:40:5e:f6:4d:54:77:95:45:
ce:9c:c3:6c:5d:1e:47:30:44:95:cc:55:27:15:47:48:e2:48:
ff:ec:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:16:00 2026 by rpki-client