
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json)
Hash identifier: KbGElnFeuwWK7dMN177AaUBhE5zO8TwxlUhwQqWNoMY=
Subject key identifier: F4:07:FF:E9:B5:66:25:26:A1:CB:F0:82:FA:19:E6:0B:37:12:D9:27
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
Manifest number: 011C
Signing time: Thu 19 Feb 2026 04:14:49 +0000
Manifest this update: Thu 19 Feb 2026 04:14:48 +0000
Manifest next update: Thu 26 Feb 2026 04:14:48 +0000
Files and hashes: 1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: Iwph42FQWEFZ+M+N6K7KSNT2XqLGWhziiFxx6S4Uzws=)
2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: GCMBGFfjL07x7SqicgzDicIqCejugsZ+LueaE228tBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Validity
Not Before: Feb 19 04:14:48 2026 GMT
Not After : Feb 26 04:14:48 2026 GMT
Subject: CN=69968e39-6741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:4e:59:9b:6a:28:2c:74:6e:bc:eb:5b:c6:
90:81:da:76:c1:ec:eb:14:f3:75:92:02:b5:22:18:
dc:1f:f4:68:16:f9:5b:ec:c1:8a:73:2a:30:dd:62:
20:7e:10:92:33:aa:5b:ad:5a:14:3c:a7:9a:80:b3:
94:96:74:de:1d:2b:e1:56:59:a2:0f:d6:f5:70:be:
cb:9b:8a:29:5f:36:03:0d:aa:88:cb:01:60:2e:89:
f9:b7:98:25:e7:52:9c:2c:65:8f:57:72:ff:61:5a:
a9:1b:79:a5:8a:48:f5:24:d2:f6:27:80:8d:a7:8e:
02:fa:1c:5b:8b:17:46:9c:d6:1e:60:12:91:95:a2:
92:dd:d4:66:4b:3a:a4:65:c1:35:35:9a:8d:50:42:
b4:6f:24:9b:a5:76:bf:4b:27:08:39:99:f4:4a:7a:
45:f8:f4:8e:bf:d3:1a:19:5a:b0:b8:94:b5:bc:26:
48:00:41:42:55:f2:a8:9c:fa:ec:e6:29:ca:a0:38:
b4:44:52:5e:8e:3e:00:68:fd:3b:4b:3b:c7:9a:9b:
75:d2:44:3f:0b:84:22:a6:d0:63:c3:cb:0d:b3:83:
30:4c:0c:33:cc:ab:02:82:2d:b3:10:1c:42:45:35:
35:9c:46:64:03:06:27:46:dd:85:ff:37:d4:dc:82:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:FF:E9:B5:66:25:26:A1:CB:F0:82:FA:19:E6:0B:37:12:D9:27
X509v3 Authority Key Identifier:
keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6b:27:22:b8:d0:6a:2a:28:6d:a1:ff:36:8a:dd:5a:34:14:
70:ff:1d:ff:5a:42:66:e5:bb:06:1f:3c:e8:76:a9:e0:a5:55:
ea:bf:8a:04:cd:fd:0f:e2:1e:87:8e:df:00:15:fd:71:3d:f9:
82:9a:a3:2e:de:a5:ba:7a:fa:e2:dc:73:55:a4:aa:a1:23:2c:
63:9a:5d:36:8e:f8:5b:2c:98:05:bc:84:f0:1e:d3:c0:03:f6:
8c:e8:9a:d9:35:e6:3a:cd:99:51:43:04:a9:b0:83:4b:0a:94:
78:4f:6c:3e:c5:70:ae:98:a7:df:d4:57:20:56:33:d5:dc:3e:
97:0f:0b:69:1c:6a:50:04:a6:d3:b3:0e:61:10:de:c2:af:27:
7d:98:63:24:eb:c9:62:87:32:b4:0c:bb:2d:ca:0e:1a:6f:51:
ac:c6:dc:57:65:8c:24:b6:8f:f4:21:33:4d:cb:4f:71:39:8f:
7f:44:0a:af:e1:9c:c8:00:44:57:c8:17:bf:49:88:b6:68:96:
a6:24:d7:13:e9:b0:9e:3d:bb:5e:42:74:28:03:9b:09:f4:2c:
a9:3f:ca:1b:5d:46:fc:74:18:7f:c0:5e:ce:72:fe:e6:33:9e:
ef:d1:63:7c:81:70:b1:31:5e:44:83:54:10:e2:c5:f2:29:1b:
4f:1a:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:25 2026 by rpki-client