
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: WnI2/OCyI5RKHg3btrM+dcVUbOyQjciGz9LWT/Bs1yc=
Subject key identifier: AC:77:33:0A:50:1E:5B:B6:85:DD:B0:E5:75:DE:F2:B2:9A:26:B2:6B
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 0232
Signing time: Thu 19 Feb 2026 01:24:44 +0000
Manifest this update: Thu 19 Feb 2026 01:24:43 +0000
Manifest next update: Thu 26 Feb 2026 01:24:43 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: b/te61QdDIW5mOkTs4Beb0of/WP83DX+qNQ1vBbrsac=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Validity
Not Before: Feb 19 01:24:43 2026 GMT
Not After : Feb 26 01:24:43 2026 GMT
Subject: CN=6996665c-0466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:6c:9d:df:7e:73:71:9f:1a:7d:e2:d2:1f:
55:c8:e3:5e:f8:9a:e0:34:2b:17:e4:4f:80:3a:e6:
03:7b:bf:94:94:ad:d2:36:e2:9e:fc:ce:ba:c1:7f:
df:f4:6e:b2:44:f6:29:66:e0:84:c8:8b:9c:77:35:
c1:f1:9b:89:b0:23:1e:93:d6:70:d0:c6:1c:cb:48:
84:56:b4:6f:d3:6b:46:3d:c3:4e:3b:2a:8b:3d:16:
6b:5f:99:b5:0f:77:90:7c:25:9c:90:1b:36:94:9c:
f1:13:4d:92:57:05:f3:16:3d:9e:c6:d3:20:7d:de:
a7:6a:f1:ea:59:4b:13:98:6c:cf:d6:97:7b:80:fd:
7d:80:98:81:68:29:06:c3:36:d1:bc:50:01:b2:c0:
c4:36:d7:42:26:0a:d3:d5:1f:a4:57:70:44:bd:cb:
fd:31:8d:ac:2b:0c:16:59:25:0d:49:95:22:06:3b:
38:d3:75:24:cb:17:18:60:f1:01:ae:af:19:92:0e:
8a:2b:8e:fc:3f:34:07:e2:b5:93:6e:27:c1:93:1f:
4b:75:42:8f:49:07:f5:ff:14:b8:61:27:55:7f:7b:
bc:66:57:e7:ab:bb:94:29:74:a0:2b:fb:e2:03:2e:
8e:59:2b:3e:b0:48:2d:fb:6a:a4:d8:b8:75:66:53:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:77:33:0A:50:1E:5B:B6:85:DD:B0:E5:75:DE:F2:B2:9A:26:B2:6B
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:f4:d3:26:1d:86:b0:e5:da:55:e5:f2:6b:71:ed:d8:e3:10:
44:11:74:a3:fe:4f:16:07:de:51:2c:ad:e1:ba:b2:3b:3e:30:
bc:62:b2:21:64:0c:a7:a0:fb:83:31:40:b2:58:39:a0:3e:74:
e1:54:2d:41:cc:3e:5a:ae:a9:ad:9a:d7:89:68:78:ed:bd:2b:
07:c9:9f:26:1b:dc:6f:fe:7f:ac:e0:23:d6:e5:fd:05:92:85:
3b:33:f2:45:42:05:41:34:9b:13:e4:ce:56:25:03:83:45:4f:
93:ff:a3:b5:00:84:9b:38:44:69:4d:d8:da:f5:e7:e6:21:a5:
32:7a:fd:3c:99:f9:3c:1b:93:48:12:9e:27:24:b2:c4:90:8a:
fc:c0:84:40:2f:6c:71:e4:4f:67:3a:0e:cc:1b:e8:ba:aa:29:
03:94:72:39:26:07:27:a2:83:37:6c:97:a3:b1:89:2a:e4:38:
d6:47:79:9a:91:10:3c:27:55:a9:be:b2:d2:81:13:ac:c0:95:
0a:0e:07:61:ce:44:c9:6b:1d:79:66:a4:4c:ae:23:d3:fe:3d:
db:d3:6c:b5:7c:ea:ab:ab:e8:b4:6c:dc:58:03:a5:c2:d4:6e:
a0:b3:c2:54:d5:7a:8c:60:22:f6:be:75:0b:b6:0a:07:f4:57:
57:ea:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:26 2026 by rpki-client