
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier: lkPISJwF1kgJw8BXqxHB6+8RV6a2kyl2udsdWrss3JY=
Subject key identifier: 91:DB:64:FA:14:D5:AF:87:C2:C7:6E:52:3B:4E:CE:3E:8F:03:5E:80
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial: 1415
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number: 140B
Signing time: Wed 18 Feb 2026 16:40:33 +0000
Manifest this update: Wed 18 Feb 2026 16:40:33 +0000
Manifest next update: Wed 25 Feb 2026 16:40:33 +0000
Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: YlYA+m++L8B5buIw0Rn29EDrsG/z8QNKTz12hxGnaqY=)
2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 9C6Tg9SKyHhrTv8/E20KOofW2E66mUILhErIQqYMZ/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5141 (0x1415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Validity
Not Before: Feb 18 16:40:33 2026 GMT
Not After : Feb 25 16:40:33 2026 GMT
Subject: CN=6995eb81-9f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:27:d5:bd:0d:a5:d8:ac:11:a2:df:58:7f:
92:19:f7:82:91:6a:80:26:16:e9:e1:d9:07:cd:88:
5e:5f:32:0a:7b:94:71:fe:66:ae:98:9c:dd:80:63:
c6:2a:8c:33:a5:7d:f6:af:13:38:22:7f:2d:65:d5:
b7:39:56:ad:56:80:78:04:b8:21:b1:9c:d1:26:12:
3c:02:6f:58:db:6f:e2:42:2a:6c:b6:7f:74:b4:6f:
93:90:9a:77:5e:c2:c2:58:f0:c3:38:ed:d7:74:a5:
16:44:d6:0b:30:5e:63:4a:6d:da:18:4f:d7:dd:f7:
9b:26:9c:c7:b9:ba:1c:29:05:84:35:a3:9b:c6:52:
4a:9e:de:e4:73:0c:96:bc:7e:1a:fa:60:5f:62:ef:
9b:8f:1e:41:5b:80:16:0f:69:4b:af:cb:08:40:96:
1c:57:cd:98:66:73:cb:62:5c:8f:7a:68:28:4b:ac:
64:bc:6c:fd:7e:1b:23:3e:1a:9c:f0:76:69:2f:11:
d1:f6:5c:54:0d:e0:e2:54:3e:0b:00:d9:17:c0:51:
ea:f4:17:b0:0b:84:44:6d:45:c5:89:30:28:fc:fb:
bd:c4:a5:8c:13:47:d4:4f:09:7a:12:01:38:a1:85:
11:7d:46:5e:82:3f:9c:38:58:c2:02:13:08:0b:34:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DB:64:FA:14:D5:AF:87:C2:C7:6E:52:3B:4E:CE:3E:8F:03:5E:80
X509v3 Authority Key Identifier:
keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:53:9b:48:97:86:44:5d:5c:71:d5:8f:e1:9f:56:67:fd:97:
0b:b3:d9:3b:ae:d3:3e:2e:48:f8:86:1c:bc:34:7c:dc:23:08:
a2:b9:ef:a9:a1:6d:64:72:b2:e6:ea:45:dc:d2:ef:ce:29:3b:
b5:45:fc:b3:2b:74:0d:e7:98:c1:fc:fd:7d:d8:e2:14:6f:f1:
68:ff:02:4a:69:6b:9f:09:8b:81:f9:fd:f9:94:0f:d0:7f:51:
b9:9c:59:0a:f2:c4:c8:d5:41:25:3f:8d:de:3e:06:f9:ff:04:
90:c7:07:cc:24:fa:9d:93:29:70:a3:12:08:3a:f3:f9:da:d9:
c1:80:3a:40:8d:f5:bc:f1:18:fe:bd:ee:e3:42:05:23:50:66:
17:dc:c3:66:b3:cc:47:ce:5c:81:d3:fe:e7:4a:76:e5:f4:54:
a4:bb:e3:93:82:bf:d7:53:df:7a:a5:05:69:ac:cf:d6:61:96:
02:ca:2a:3d:be:0b:cf:1f:5c:65:e7:7f:4a:5e:cc:aa:05:e8:
a9:34:05:32:dd:c2:c7:fe:24:81:0a:ea:a5:11:6c:3a:10:b3:
ff:02:7d:44:9a:1b:1b:84:57:ca:e0:31:49:21:cb:6b:b3:7f:
36:7b:df:cc:e1:dd:bf:50:8f:30:12:0a:21:c3:97:1f:6b:76:
7d:16:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:39 2026 by rpki-client