
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json)
Hash identifier: rmRChkeaYQUaVh3tSpjV2iuAWhR1KLPKUlGWgK89p2U=
Subject key identifier: 4F:03:E3:4F:49:63:A1:D0:34:D1:A4:A9:40:23:2A:AE:F7:D2:0A:40
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
Manifest number: 0533
Signing time: Wed 18 Feb 2026 22:48:43 +0000
Manifest this update: Wed 18 Feb 2026 22:48:42 +0000
Manifest next update: Wed 25 Feb 2026 22:48:42 +0000
Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: IAX84xiujY47V/DueZBDJpH2TVO1oNPEmdRjUwbljQg=)
2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Validity
Not Before: Feb 18 22:48:42 2026 GMT
Not After : Feb 25 22:48:42 2026 GMT
Subject: CN=699641cb-ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:f4:85:f2:8a:e9:fd:34:45:33:30:2f:36:
24:aa:ec:35:be:88:e6:17:63:1e:3d:8b:0d:38:f9:
c7:aa:25:eb:61:6c:56:ec:cd:56:94:01:d3:08:0f:
9c:2e:3c:90:b6:95:57:cf:d0:94:98:41:be:f0:50:
85:93:b7:e4:07:d9:35:49:b0:b3:1f:28:f8:d3:50:
66:98:88:c9:7a:2b:38:9c:e0:b4:2a:53:ac:3b:69:
44:b3:9e:3d:82:72:27:0a:0d:72:a4:d8:c9:7e:76:
f9:33:80:4b:7b:1a:5a:fa:b3:f7:ad:50:98:5e:68:
30:71:6e:4a:9a:00:64:ac:c7:b5:5c:3a:65:ac:69:
f8:5f:89:d4:0f:2e:39:53:aa:5d:13:03:f4:2e:83:
1d:4d:6e:1d:6a:44:55:ac:97:7c:fc:6f:a5:df:54:
34:71:40:f9:a0:8c:38:f4:67:99:d4:7c:ac:8d:9f:
b6:76:dd:35:90:89:31:71:11:ee:64:22:4f:19:ef:
8f:05:75:84:46:0b:a2:2f:65:e2:0e:f3:c7:3e:f9:
bb:e8:97:b3:95:6e:01:15:d7:bb:02:15:93:e5:24:
5a:6b:f4:9d:fb:dd:8b:46:c7:98:63:53:c9:04:7d:
03:6e:75:92:9f:bf:be:ea:bd:a3:42:3f:77:02:40:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:E3:4F:49:63:A1:D0:34:D1:A4:A9:40:23:2A:AE:F7:D2:0A:40
X509v3 Authority Key Identifier:
keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:40:39:ba:fb:35:a5:69:56:20:70:01:c4:69:12:ee:47:
a6:ee:db:fd:4e:93:12:e5:bb:0d:7c:74:07:8b:27:8e:1c:01:
22:47:77:86:5b:b5:4c:22:1f:47:3f:5e:10:5f:ea:53:75:34:
77:33:93:e1:52:73:d4:b1:e6:bd:16:01:f1:e7:b9:1a:08:ff:
b6:05:a7:14:4e:ed:5e:44:e7:10:41:e4:b4:5e:5e:b7:e2:4c:
87:48:fe:88:ae:18:1e:a8:d9:57:90:db:21:81:45:28:00:b0:
cf:6f:f9:df:3f:0f:6e:43:7d:b3:12:40:81:93:a2:51:0e:db:
6c:34:46:1c:80:cc:be:72:23:11:dc:b0:f5:40:e3:d5:26:d6:
9c:e2:1d:90:e3:c4:a6:b4:3d:8d:e2:30:c8:62:1c:99:66:62:
fc:88:29:70:a8:72:e1:ce:1b:ee:1e:43:ca:b7:ae:1d:ef:90:
ff:ab:7b:e9:c0:88:ed:ec:90:b9:b8:95:6b:6b:d8:87:6a:ae:
3d:97:f4:49:ca:0d:bf:d2:9b:00:12:bf:2c:09:7a:9a:12:dd:
15:23:08:89:77:ff:9b:0f:a6:92:e6:12:9b:1c:11:fb:4c:24:
5f:fa:70:28:5d:c4:6e:d4:a6:f9:34:a6:1a:a4:09:63:09:5d:
cd:2e:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:22 2026 by rpki-client