
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json)
Hash identifier: yfExCfoRaGK37BNWFVp7nI6HJGz9fWD1isfBTGeoEg4=
Subject key identifier: 5D:4E:A7:68:40:3F:E3:A3:13:66:2F:EF:C6:03:B4:FC:FF:D3:A7:DC
Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0
Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0
Certificate serial: 0327
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
Manifest number: 031F
Signing time: Thu 19 Feb 2026 00:17:52 +0000
Manifest this update: Thu 19 Feb 2026 00:17:52 +0000
Manifest next update: Thu 26 Feb 2026 00:17:52 +0000
Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: Uu31x7EvjyNPmr0GSNRGplUXmnRaGVSxQCnnQExIsIU=)
2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: LoYEejNqn6llhBwJ7xFsIlEEw1I815MKrVHi2CZC9n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl
rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0
Validity
Not Before: Feb 19 00:17:52 2026 GMT
Not After : Feb 26 00:17:52 2026 GMT
Subject: CN=699656b0-8dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:d7:1e:85:06:c7:54:86:77:4d:42:6b:92:
c9:f2:1f:27:38:da:d5:de:c6:25:66:b6:50:94:5e:
d3:65:c1:09:5f:34:a2:d4:43:23:53:27:d8:8e:b1:
00:8d:81:bb:d6:68:ca:43:1f:87:0a:31:03:f9:02:
70:46:5b:94:9d:c8:d5:db:e6:25:db:a4:42:4d:35:
8b:42:2f:6e:a9:df:98:17:62:64:86:27:39:65:a4:
16:25:23:e6:1c:59:b0:97:54:9e:71:ad:76:11:23:
fc:89:03:e7:9f:76:8e:84:c8:bb:ea:a3:6e:e5:d8:
32:77:bc:d2:9c:97:94:70:16:ef:19:2b:72:bd:ae:
d1:56:76:ec:00:bf:52:ea:95:1a:bc:5e:e7:ba:7c:
8f:d3:2b:eb:31:07:14:c3:00:90:6d:51:cf:3d:4f:
42:1e:26:16:8f:a6:88:ce:55:22:d8:44:5e:c1:85:
aa:95:db:35:0f:83:08:d6:25:8c:3e:37:67:b4:bb:
91:69:97:3f:27:59:c1:f5:a9:db:04:1c:e7:96:19:
d1:99:82:5f:9e:89:41:51:27:db:9e:0c:58:e4:0e:
25:28:93:71:42:e3:d2:e2:98:f2:5a:21:c6:97:53:
ab:ef:44:9e:4e:b0:31:e5:cd:a1:8c:bd:a6:10:db:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:A7:68:40:3F:E3:A3:13:66:2F:EF:C6:03:B4:FC:FF:D3:A7:DC
X509v3 Authority Key Identifier:
keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:a0:b8:2f:ba:ee:f3:d0:8c:50:34:2c:68:69:dc:18:d1:6d:
08:54:f6:cc:f5:14:4a:46:5d:64:cf:4c:df:62:81:f5:21:53:
3b:6d:52:ce:0a:8a:dc:4e:08:e0:f3:f1:45:3e:d8:cf:1b:8f:
6f:51:81:c3:86:3c:5c:f6:bc:a2:9f:16:f8:d6:c2:46:7c:13:
13:dd:3c:62:22:a4:95:6c:f5:e7:0b:75:6f:f7:28:fc:50:fd:
58:f8:f7:de:be:87:cc:42:43:68:ed:32:16:09:dd:b1:c7:f7:
7a:7f:e6:3a:ac:06:32:ef:7e:20:80:7d:61:c2:34:d4:9e:72:
46:8f:84:2f:1f:53:9b:1d:58:98:5e:c9:61:3e:66:80:a7:06:
f7:52:8d:24:ab:3e:20:fc:1e:11:b3:8c:99:f2:6d:06:0d:e9:
22:a7:3e:50:a6:30:24:84:04:56:44:22:2d:93:d0:08:81:2c:
99:08:02:3d:d8:a3:b3:37:2b:e7:80:c1:b7:a6:65:c8:0f:87:
16:d4:95:a7:3d:f2:ff:19:5b:c5:17:39:4f:4c:9d:4b:93:25:
13:5c:e9:bb:6b:76:f1:a0:34:3c:88:a7:4a:a9:f9:1a:de:f2:
31:5f:27:dd:b3:64:5e:16:09:9c:ee:64:25:97:2e:8c:2d:ac:
8f:69:77:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE
RTAzMzA5QTAwHhcNMjYwMjE5MDAxNzUyWhcNMjYwMjI2MDAxNzUyWjAYMRYwFAYD
VQQDDA02OTk2NTZiMC04ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOfXHoUGx1SGd01Ca5LJ8h8nONrV3sYlZrZQlF7TZcEJXzSi1EMjUyfYjrEA
jYG71mjKQx+HCjED+QJwRluUncjV2+Yl26RCTTWLQi9uqd+YF2Jkhic5ZaQWJSPm
HFmwl1Seca12ESP8iQPnn3aOhMi76qNu5dgyd7zSnJeUcBbvGStyva7RVnbsAL9S
6pUavF7nunyP0yvrMQcUwwCQbVHPPU9CHiYWj6aIzlUi2ERewYWqlds1D4MI1iWM
PjdntLuRaZc/J1nB9anbBBznlhnRmYJfnolBUSfbngxY5A4lKJNxQuPS4pjyWiHG
l1Or70SeTrAx5c2hjL2mENtdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1Op2hA
P+OjE2Yv78YDtPz/06fcMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy
NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2
NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDoLgvuu7z0IxQNCxoadwY0W0IVPbM9RRKRl1kz0zfYoH1IVM7bVLO
CorcTgjg8/FFPtjPG49vUYHDhjxc9ryinxb41sJGfBMT3TxiIqSVbPXnC3Vv9yj8
UP1Y+PfevofMQkNo7TIWCd2xx/d6f+Y6rAYy734ggH1hwjTUnnJGj4QvH1ObHViY
XslhPmaApwb3Uo0kqz4g/B4Rs4yZ8m0GDekipz5QpjAkhARWRCItk9AIgSyZCAI9
2KOzNyvngMG3pmXID4cW1JWnPfL/GVvFFzlPTJ1LkyUTXOm7a3bxoDQ8iKdKqfka
3vIxXyfds2ReFgmc7mQlly6MLayPaXd3
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:39:55 2026 by rpki-client