
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier: j8MFrpY5+WY+tl3mP/5q7VoA6cavKAU7qCwQ9AnW6lc=
Subject key identifier: 67:C1:15:62:AE:89:0C:04:91:18:74:51:AB:32:CE:98:D5:E9:30:CF
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number: 082D
Signing time: Wed 18 Feb 2026 20:57:05 +0000
Manifest this update: Wed 18 Feb 2026 20:57:05 +0000
Manifest next update: Wed 25 Feb 2026 20:57:05 +0000
Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: OEnO67RrfvmL2DLsbkiTLZm1XTOK6UaVC05uPRt2Y/Q=)
2: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: xyRyhhQBvFg1P0171dGNRFnwuXqCBoYXwtzjvJ6IHcw=)
3: 0112375EA05411EDB043385AC4F9AE02.roa (hash: aBs0HSQclxaDqKZvgHQYQl981j8saXju4dpMEUuQAU4=)
4: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: Rtf4SCa2SLq1aWm8pt96fKW5kPl75H0zBH9P2CmsGlU=)
5: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: JCIJiRdjoJPwGnugBIK3v/SX30S5Hj97puNSPDnZHa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Feb 18 20:57:05 2026 GMT
Not After : Feb 25 20:57:05 2026 GMT
Subject: CN=699627a1-dd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:f1:18:f6:e8:8a:cf:5f:1c:9e:98:64:94:
c1:c5:03:9a:21:a1:ff:b2:87:01:f1:52:1d:35:a1:
89:72:04:5d:ad:31:c2:4f:bc:04:e5:d5:54:bf:cf:
c1:1d:ca:a4:a7:ea:d9:fc:fd:f7:21:5c:75:69:af:
ba:b2:26:8b:a5:25:33:d7:c2:79:cd:3e:fe:21:c9:
d7:80:65:8d:e7:62:23:45:af:97:d8:0a:fe:64:af:
a4:ef:75:06:b8:41:d1:7b:20:d3:85:c0:bd:ff:9e:
ab:8f:35:6d:30:3a:dc:a7:57:f2:8e:4f:c3:9d:71:
f3:5e:ad:9e:96:13:7b:ce:b3:55:23:45:19:22:f7:
a2:e8:a7:a5:c9:a1:12:1c:5a:72:1f:bc:99:5f:99:
10:0d:bb:84:0d:41:57:d8:cf:1a:9f:09:03:d4:87:
0f:be:ef:24:79:85:13:4b:8d:24:e0:61:9b:e8:2f:
72:bf:91:4e:fd:33:f0:0d:7d:2f:3d:d8:a3:00:6f:
03:ca:e7:1b:6e:27:f8:1a:5b:65:1f:b4:c7:6c:ec:
4d:1e:47:70:41:7e:1e:38:0e:21:f5:60:e7:5b:ca:
b2:d8:5e:b6:c4:5e:5b:cb:24:7a:eb:03:66:9e:37:
b4:f8:20:d0:09:d4:39:d6:3d:32:e5:ea:ce:48:b4:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:15:62:AE:89:0C:04:91:18:74:51:AB:32:CE:98:D5:E9:30:CF
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1b:56:46:7b:f0:9e:6e:64:e4:44:26:ff:37:59:6f:86:40:
fd:fd:9a:6b:a4:60:47:a8:ba:c5:47:62:c7:21:31:2e:3d:dc:
f5:d4:98:4d:59:da:74:e3:b0:df:63:e3:10:81:a9:67:06:92:
f1:2b:b1:1c:7e:ba:95:e3:41:4d:ef:9a:9e:72:88:d0:d6:ac:
bf:72:52:8c:94:7f:2d:f3:d6:62:26:84:54:4e:f6:32:99:df:
f5:5e:f7:08:f2:3b:54:5c:62:48:62:56:ec:49:a4:40:ba:b8:
3c:b2:08:e7:9e:4a:25:0d:45:e5:f0:8b:58:10:ac:14:51:ed:
e3:60:5c:35:34:f7:17:28:87:1c:0d:c8:1f:50:ac:00:04:d7:
da:96:29:6e:00:f9:b3:27:72:cd:64:c4:7b:23:63:87:3d:7c:
bb:5e:4e:ed:2d:a1:91:ab:a2:d3:a0:68:26:09:95:be:4b:ce:
b6:09:8d:7d:ad:d2:5c:03:5d:3e:53:2c:f2:18:26:8c:b7:96:
58:9e:2a:17:74:aa:7d:d4:62:ab:b9:00:42:3c:42:44:7c:24:
97:ee:e8:46:88:8a:7f:4a:2d:3d:3f:80:b4:7f:0e:15:e1:00:
82:f0:b0:04:d8:aa:9b:d8:17:18:31:30:34:a8:6a:21:30:4b:
52:64:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:19 2026 by rpki-client