
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json)
Hash identifier: ngo56rPFWvC/l6WDvEB8cH0dQdOqrbhlGmqTNSu0mjY=
Subject key identifier: 32:CB:1D:A9:B4:E3:6E:3C:BE:AD:70:40:45:F0:26:11:1B:5B:55:CD
Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Certificate serial: 03AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
Manifest number: 03AA
Signing time: Wed 18 Feb 2026 23:55:08 +0000
Manifest this update: Wed 18 Feb 2026 23:55:08 +0000
Manifest next update: Wed 25 Feb 2026 23:55:08 +0000
Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: HiukMt91OJZsPgi7mFfUDnCytm3y6jlUpfNKl+iGR6s=)
2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: mfXzwKGY7gUqiLkJW1SqazxLmJ2CAU7Yff9kCtQmKuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Validity
Not Before: Feb 18 23:55:08 2026 GMT
Not After : Feb 25 23:55:08 2026 GMT
Subject: CN=6996515c-bdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:c1:cb:c1:4f:92:22:2a:c6:d5:11:d8:cd:
b9:4a:77:de:ff:bd:97:75:cd:0c:41:59:a8:46:24:
36:45:01:e3:9c:2b:5a:c1:67:56:27:72:60:0b:84:
a9:6a:04:83:e2:c6:3f:19:41:23:3e:c6:64:0d:71:
da:28:1f:60:b9:d1:22:91:5b:d3:8c:ca:28:97:3a:
ed:74:14:d4:f4:a8:16:7b:85:54:b9:1c:12:34:a1:
16:a8:62:75:ee:6f:93:09:04:75:b1:a4:38:af:e7:
7b:a6:6d:4f:a6:b7:b4:20:f6:5b:f4:6e:44:ba:fd:
9a:a6:95:b7:0d:1a:6a:70:0b:04:b5:69:56:87:4b:
ef:c6:a1:5b:f6:3e:1a:33:4e:c4:79:a0:39:76:1b:
a7:ab:d5:ea:12:76:03:3d:66:6e:43:0a:f9:7f:94:
c2:c7:a0:4c:1f:3b:d9:3b:e2:8a:90:fa:c8:88:7a:
da:c6:f9:cd:84:2b:25:de:0f:7f:a7:53:b1:90:a3:
5f:a1:f7:e2:a6:47:80:f2:36:1c:af:1e:d1:6d:f0:
66:a1:4f:73:09:29:3e:fa:30:57:7f:81:8e:98:e3:
41:b2:6b:06:fb:df:01:cb:67:f3:2b:ea:08:bd:c4:
a4:49:89:e6:f8:1a:ed:68:04:c6:b1:37:37:1e:d2:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:1D:A9:B4:E3:6E:3C:BE:AD:70:40:45:F0:26:11:1B:5B:55:CD
X509v3 Authority Key Identifier:
keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:b1:cf:ad:59:69:1b:99:f1:94:a6:31:c4:31:e0:b4:fb:
64:49:91:88:4a:2d:8f:12:09:e0:9a:48:73:50:1f:ce:3f:3d:
84:0a:b1:95:d3:8a:5d:35:5d:87:6d:ed:a8:52:54:16:48:a2:
0e:46:3b:e1:91:a9:f6:65:81:b3:ef:07:f1:3d:88:1f:53:86:
22:f2:02:2e:c8:8d:49:86:ac:0a:1c:50:1e:38:19:28:66:8d:
0c:fb:b7:73:c0:ee:b6:92:04:79:12:a0:b5:04:32:d8:e9:ce:
d3:95:5c:5e:61:61:2b:6c:c6:8b:9c:d5:04:9f:ac:d4:d0:8f:
68:21:81:71:8b:fb:fb:9d:52:b5:41:24:4d:ad:f4:06:c3:02:
4f:18:71:51:cc:5d:31:13:e2:27:0b:b1:1e:83:31:b8:d2:18:
39:a9:f5:e7:53:be:7c:ca:5a:52:ed:ed:4e:c6:99:ac:21:27:
5f:ec:9c:b5:a8:ce:4d:b6:87:74:e1:7a:43:f3:e2:f7:a8:d2:
5f:86:cf:e1:59:16:74:e9:cf:d5:b1:48:6f:79:7d:66:6c:d0:
e2:01:21:f2:17:aa:c7:ca:ec:7a:ce:af:ef:12:2a:80:31:57:
2d:84:82:ef:00:4b:02:01:e3:4e:5a:21:e6:a0:1e:e5:80:06:
2c:45:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:25 2026 by rpki-client