
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json)
Hash identifier: 45Dgekabf67oEq3pIGmZq1npq2xe8bt4736ebXSxTOQ=
Subject key identifier: 79:BF:8B:C6:BE:0B:E8:00:3C:C0:D2:C2:80:D2:5B:8C:FF:0D:24:42
Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
Manifest number: 01FA
Signing time: Thu 19 Feb 2026 01:50:49 +0000
Manifest this update: Thu 19 Feb 2026 01:50:48 +0000
Manifest next update: Thu 26 Feb 2026 01:50:48 +0000
Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: LkN6kHZJHsHXCHT7LqxJPlZDU05PEZq8e+kpBno6u18=)
2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: SwrvoVYgU6/JlbNtHbJmqe4zyeb9jSsFgyQPBZNxoww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl
rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4
Validity
Not Before: Feb 19 01:50:48 2026 GMT
Not After : Feb 26 01:50:48 2026 GMT
Subject: CN=69966c79-e3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:8a:63:07:19:a1:38:9d:42:f5:38:b8:56:
f5:3a:b6:30:c5:93:7f:f0:54:43:b9:cd:e9:f3:3e:
f7:ab:70:06:56:fc:14:c6:05:87:c7:28:c3:38:e8:
00:35:cc:a1:a3:b9:4e:0b:db:3d:64:b4:05:52:3e:
98:fa:02:3c:84:21:ad:bb:b1:a5:97:f0:fe:7f:b2:
f9:e8:55:f7:06:86:c9:e5:66:89:b1:68:54:fd:1f:
43:2e:06:ad:70:69:d6:0a:e3:3d:ea:be:b1:7e:df:
b8:d9:45:72:60:fa:da:da:aa:58:79:f6:be:aa:f0:
98:c3:a0:00:f0:49:9e:53:51:b1:f3:0b:45:fb:aa:
1c:27:56:e7:54:40:df:24:02:ab:a1:33:9f:28:97:
43:83:83:25:9b:ac:aa:50:c6:85:85:c7:a5:3f:b4:
51:41:97:53:f0:36:ba:f3:fe:65:14:08:6c:ba:2b:
f0:e5:2e:bc:d4:0a:bd:8f:d1:3d:69:a5:4b:03:86:
6d:6f:74:d4:cd:c7:1b:27:a3:ac:93:79:02:a6:ea:
05:31:8e:bc:43:44:0e:55:fc:95:65:a4:aa:79:23:
5c:d4:34:3d:e5:51:0e:87:0f:15:83:9b:e4:d8:90:
ee:db:71:f0:65:f0:16:ee:61:5b:83:77:18:e0:91:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:8B:C6:BE:0B:E8:00:3C:C0:D2:C2:80:D2:5B:8C:FF:0D:24:42
X509v3 Authority Key Identifier:
keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:ab:3b:11:8d:fe:43:14:09:60:bc:fb:c1:7b:15:10:65:
45:0a:a6:bb:7a:da:d1:34:f6:b5:75:49:b3:fb:1f:f7:0e:dc:
68:80:e3:c2:be:f6:3a:c5:c3:a3:af:0d:e6:bd:ac:75:4f:65:
85:ae:be:2e:66:d1:0b:23:da:57:67:08:65:3d:b0:a5:48:f3:
7d:5b:01:e4:20:21:2f:50:9b:c3:a0:cb:4b:48:21:b5:bb:24:
5c:3a:02:9e:ab:cd:4a:05:e0:87:33:3f:46:88:a3:4e:b2:32:
24:df:41:84:1f:b5:81:16:15:4a:f4:15:2d:53:dd:63:26:e3:
0f:84:df:49:c1:1d:df:53:87:22:b0:fd:69:88:74:c7:eb:5e:
f9:ff:42:c7:97:0a:80:3c:f8:bd:0a:a9:16:0c:62:ab:b5:28:
1c:61:8b:d3:48:a0:66:43:77:73:17:04:7b:c0:af:6d:bd:42:
3a:67:e5:30:2a:cf:6f:70:41:2b:47:19:ce:21:d2:38:f3:ea:
60:1c:49:ca:1f:f8:a2:f0:87:0f:34:23:01:9d:7a:62:e6:49:
83:26:2d:9b:c1:76:75:1b:b3:2d:06:90:37:f0:6b:d2:0a:1a:
51:70:87:5e:00:9e:4f:9c:68:cc:0f:37:e7:08:23:38:11:03:
74:33:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:50 2026 by rpki-client