
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json)
Hash identifier: U+wFoNBuHzrhxXewDdY9P6KgFAN4tSnc1F9Yt9YsHaM=
Subject key identifier: 97:FD:46:95:70:51:9B:89:55:37:5A:FC:02:58:35:DA:DD:03:52:80
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
Manifest number: DC
Signing time: Thu 19 Feb 2026 05:00:29 +0000
Manifest this update: Thu 19 Feb 2026 05:00:28 +0000
Manifest next update: Thu 26 Feb 2026 05:00:28 +0000
Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: 1gracETdky9KwPXL5/nYW33Rh7TZKWSVDoYtyUkhwlI=)
2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: yvK9knQEE9/5qk9MXvg3FGC10d83BjLOLkQcXI/rfs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Validity
Not Before: Feb 19 05:00:28 2026 GMT
Not After : Feb 26 05:00:28 2026 GMT
Subject: CN=699698ed-4e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:2b:99:a0:59:fa:80:c3:98:a6:67:93:89:
91:33:93:d9:99:ea:c8:0e:9b:08:cd:55:fa:8c:2e:
e7:0e:40:81:4a:1a:57:4d:b8:30:39:93:ce:fa:ba:
aa:37:e7:b1:87:3f:77:63:02:d2:0f:3c:2d:5d:1f:
92:cc:10:5f:77:25:3d:35:db:7f:f3:05:49:a4:e9:
fe:53:50:8d:49:ac:30:38:9c:43:74:9c:ff:d4:6c:
0d:2b:3b:7e:d9:77:fe:3b:bd:3b:e8:f4:9d:6a:4b:
93:8f:c5:d8:07:87:43:5a:8e:de:85:c3:d2:af:38:
4e:75:ef:f1:15:34:02:64:e9:bd:6c:90:a4:88:e1:
78:37:74:a1:07:eb:73:e7:94:9e:0f:9b:0f:6e:71:
97:c8:d8:c5:3b:69:7b:20:f0:25:0f:57:1c:ae:eb:
3c:5a:fb:0c:ab:44:7a:ad:e1:fd:6e:95:d8:41:af:
be:4c:d3:77:31:5f:c9:7b:a7:36:6f:8e:14:cb:cf:
19:c3:14:4a:ed:ba:76:13:d8:92:f5:1e:29:e5:78:
02:cd:73:c8:81:5d:ea:56:10:c3:59:ed:e6:e5:a8:
cc:42:e1:99:46:42:f0:85:c3:45:2e:3b:b3:19:21:
2f:e1:87:0c:42:71:70:d1:e5:de:b8:58:f4:46:30:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FD:46:95:70:51:9B:89:55:37:5A:FC:02:58:35:DA:DD:03:52:80
X509v3 Authority Key Identifier:
keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:4b:88:15:44:4a:7b:34:10:11:c1:f3:13:9f:e7:d0:99:e9:
90:23:53:b4:b9:67:0a:e7:1e:b0:22:92:1f:24:9a:4f:6c:fb:
82:64:34:c7:27:f5:39:e8:70:a9:19:8b:58:52:4d:90:a2:e3:
62:cb:d7:88:ed:ea:86:93:e7:43:69:fd:19:89:f9:9a:5d:10:
a3:19:ad:60:00:4d:3a:5f:de:29:2c:d0:fe:fd:82:1b:8f:f2:
f0:11:9b:bc:0e:d2:0b:94:fe:57:62:8e:a6:f0:a9:5b:b7:77:
6d:1a:ad:70:2f:44:df:e9:3d:ce:f6:1b:ca:6f:e1:e7:0a:d7:
67:8f:88:2c:65:ea:bc:4f:31:bf:2e:08:50:f0:83:51:be:a5:
3e:d6:1f:93:9f:62:98:c3:04:ae:d9:84:3f:1e:5b:3c:5e:fc:
46:21:e2:6b:9e:69:6c:cf:a4:3e:bb:c1:4a:e7:74:79:7a:a3:
a6:62:73:f4:5c:54:cf:a2:6a:fb:e5:07:54:c5:0b:50:f2:44:
60:e4:1a:74:b0:9c:d3:da:c0:dc:5a:04:f8:cc:e0:3b:25:a1:
bc:04:cc:db:a5:38:39:0c:63:51:fe:6c:49:b0:9f:75:bc:f2:
fb:4c:d8:f0:7e:ac:d7:4b:55:59:f9:c4:96:fc:5b:71:e2:ea:
dd:9c:44:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzgzMDcxMTAvBgNVBAUTKDNERDA5NUJFN0EzQkQxREQ4MjlFMkEyNjQ5RkM3RTgx
QTdFRkUzNEMwHhcNMjYwMjE5MDUwMDI4WhcNMjYwMjI2MDUwMDI4WjAYMRYwFAYD
VQQDDA02OTk2OThlZC00ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PgrmaBZ+oDDmKZnk4mRM5PZmerIDpsIzVX6jC7nDkCBShpXTbgwOZPO+rqq
N+exhz93YwLSDzwtXR+SzBBfdyU9Ndt/8wVJpOn+U1CNSawwOJxDdJz/1GwNKzt+
2Xf+O7076PSdakuTj8XYB4dDWo7ehcPSrzhOde/xFTQCZOm9bJCkiOF4N3ShB+tz
55SeD5sPbnGXyNjFO2l7IPAlD1ccrus8WvsMq0R6reH9bpXYQa++TNN3MV/Je6c2
b44Uy88ZwxRK7bp2E9iS9R4p5XgCzXPIgV3qVhDDWe3m5ajMQuGZRkLwhcNFLjuz
GSEv4YcMQnFw0eXeuFj0RjChAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf9RpVw
UZuJVTda/AJYNdrdA1KAMB8GA1UdIwQYMBaAFD3Qlb56O9Hdgp4qJkn8foGn7+NM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8zNDMyRjYwQ0JF
Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9QZENWdm5vNzBkMkNuaW9tU2Z4LWdhZnY0
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BkQ1Z2bm83MGQyQ25pb21TZngtZ2FmdjQwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODMwNy8zNDMyRjYwQ0JFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9QZENWdm5vNzBk
MkNuaW9tU2Z4LWdhZnY0MHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYS4gVREp7NBARwfMTn+fQmemQI1O0uWcK5x6wIpIfJJpPbPuCZDTH
J/U56HCpGYtYUk2QouNiy9eI7eqGk+dDaf0ZifmaXRCjGa1gAE06X94pLND+/YIb
j/LwEZu8DtILlP5XYo6m8Klbt3dtGq1wL0Tf6T3O9hvKb+HnCtdnj4gsZeq8TzG/
LghQ8INRvqU+1h+Tn2KYwwSu2YQ/Hls8XvxGIeJrnmlsz6Q+u8FK53R5eqOmYnP0
XFTPomr75QdUxQtQ8kRg5Bp0sJzT2sDcWgT4zOA7JaG8BMzbpTg5DGNR/mxJsJ91
vPL7TNjwfqzXS1VZ+cSW/Ftx4urdnETa
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:45 2026 by rpki-client