
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json)
Hash identifier: pbMSTtGIxtbOcOH8I6GlmfHlZt68Z3xUHg2qJ46rjYM=
Subject key identifier: 54:AE:24:B3:A2:6B:9A:07:31:32:E1:84:AD:33:8D:A3:54:9C:A8:F1
Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A
Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
Manifest number: 015A
Signing time: Thu 19 Feb 2026 03:35:32 +0000
Manifest this update: Thu 19 Feb 2026 03:35:32 +0000
Manifest next update: Thu 26 Feb 2026 03:35:32 +0000
Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: pqs/Ie1HyLxQUniT7prlmH01XxS/fZg0yHa787mNZRk=)
2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl
rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A
Validity
Not Before: Feb 19 03:35:32 2026 GMT
Not After : Feb 26 03:35:32 2026 GMT
Subject: CN=69968504-f0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:95:5c:06:bf:8b:46:ba:a8:7e:e1:d0:72:
b8:2c:8d:44:05:b9:99:53:38:98:ff:88:9c:ec:62:
a7:c0:50:9e:d8:49:3d:6c:fe:b2:7b:f9:31:59:a9:
82:c8:13:c6:f9:8d:23:6e:12:e7:36:ab:47:b8:36:
67:48:fb:e0:2b:d2:9b:20:0d:62:38:e7:7e:61:1d:
90:a3:8a:f4:02:9c:15:e7:71:9c:52:66:29:40:02:
45:33:19:1c:2f:03:e9:b7:0b:4b:5f:13:e0:e3:48:
0c:26:e0:dd:ce:43:7e:4e:f1:0c:8c:3a:9c:42:91:
e2:33:f9:6d:c0:eb:a8:42:e2:39:82:ac:aa:46:69:
11:8c:75:7c:3a:dd:5b:03:f4:3d:70:23:30:a3:7b:
37:38:ae:98:e5:dc:bf:79:cf:d2:54:a3:2d:23:9e:
ac:76:07:83:28:18:92:26:bb:2e:18:01:60:9b:05:
19:de:ae:68:2a:c5:f8:c8:78:dd:7b:b9:e6:6e:40:
5c:f9:c5:2d:74:88:c0:34:a2:32:ff:cd:c8:d8:f7:
2d:c7:8d:b6:ca:f0:97:38:4c:43:ed:aa:94:0c:af:
bd:4c:5b:bc:6b:a0:65:18:ef:f4:d0:9a:ed:08:53:
5a:68:ce:1d:4c:35:29:93:f1:40:f9:66:6b:63:af:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AE:24:B3:A2:6B:9A:07:31:32:E1:84:AD:33:8D:A3:54:9C:A8:F1
X509v3 Authority Key Identifier:
keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:fe:ba:65:77:67:44:8d:d1:12:cd:98:a1:ba:87:64:e2:44:
58:20:73:18:a7:88:33:bf:8b:1c:cc:bb:8d:77:2e:90:56:72:
8c:6c:31:5f:b3:53:ff:9a:34:74:ee:0e:15:67:3b:71:82:74:
55:d3:12:cc:f9:78:e6:9b:95:7d:3b:cb:29:e1:c7:4a:7d:16:
8b:ff:31:15:e6:05:f4:e2:a0:af:38:64:d5:3a:25:20:ad:47:
9a:19:55:1c:e3:8a:a5:32:f8:82:55:ef:7a:7d:e6:af:c8:e2:
49:34:26:65:c6:e1:9c:e2:3c:1e:7d:e7:a7:9a:39:01:85:d7:
2e:06:93:e6:7e:b9:59:70:86:ba:47:5c:8e:d3:ad:bb:37:aa:
e6:03:9b:21:e1:06:43:ab:91:34:2f:4c:c0:e5:86:3b:19:47:
69:49:01:2d:6b:e7:48:1e:db:15:6a:05:b3:e6:ee:87:ae:63:
e5:06:29:b8:56:d3:33:2f:1a:18:44:b7:51:e5:45:90:ff:91:
41:76:6e:f4:18:36:dd:5f:95:9c:50:77:33:85:6a:3f:aa:e8:
07:cb:e0:1d:a7:73:7c:93:3c:48:aa:a9:43:6e:57:7a:fe:e0:
01:40:50:d5:f9:4a:0a:fe:8a:1b:43:d4:e7:d6:bd:2c:44:ac:
bd:f9:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:54 2026 by rpki-client