
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json)
Hash identifier: rNUnpcZU7yyLqNrmCLvLySNP0JEElh1KBLnOEXmk2T0=
Subject key identifier: 02:A0:92:A4:83:1D:2D:29:CD:28:1F:51:00:0C:C7:04:6A:9B:F4:CA
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
Manifest number: 0142
Signing time: Wed 18 Feb 2026 15:35:07 +0000
Manifest this update: Wed 18 Feb 2026 15:35:07 +0000
Manifest next update: Wed 25 Feb 2026 15:35:07 +0000
Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: 95y/0KWJ0ESIqXxDOjqHgbL5gkQnUBCKUYO6/AgVFJU=)
2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: fWZETNQO/nq4+BYBCH9MSAL8N1aF88n2/dhae6ZuhiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Validity
Not Before: Feb 18 15:35:07 2026 GMT
Not After : Feb 25 15:35:07 2026 GMT
Subject: CN=6995dc2b-1457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:7f:54:fa:fd:df:ca:4a:6f:b8:d7:23:ab:
60:60:bf:dc:0f:d2:ba:26:ad:16:21:43:d1:d7:06:
f5:a0:a7:3a:02:3c:a6:43:90:62:29:48:a3:49:6f:
ec:45:15:41:11:57:e1:61:1b:76:0c:b1:86:ab:00:
ec:db:97:11:f0:1d:ef:c1:34:fc:5d:a8:d6:16:c1:
46:b7:a6:5f:92:77:ff:f9:de:ad:02:42:ec:2d:9d:
be:f0:ed:62:82:20:8f:4c:f0:e9:d1:e0:fe:fc:dc:
5c:b0:22:66:37:7a:0d:13:bc:7d:a4:63:e3:5e:84:
c8:2c:45:8e:f4:9e:68:86:7c:cc:c7:44:c6:35:63:
7d:2e:c8:8c:32:67:5d:a0:9d:81:c1:66:74:ac:89:
aa:f3:3f:77:a6:f2:96:a7:00:c0:e6:8b:74:64:de:
ef:0a:78:cd:71:8f:c3:51:7c:32:e7:19:8e:2e:a7:
8f:4c:03:f6:50:13:ca:e7:d4:84:21:88:de:72:b0:
46:5c:3a:ba:7a:ec:7c:08:8f:26:87:f7:ae:b2:c5:
e5:11:3b:b7:78:e5:b3:c9:7b:fb:ce:a1:7c:5b:27:
8c:88:79:61:30:90:65:2a:4f:7a:4a:6c:d1:d0:64:
a6:28:3b:8a:eb:54:9d:5b:9e:50:be:55:58:53:2c:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:92:A4:83:1D:2D:29:CD:28:1F:51:00:0C:C7:04:6A:9B:F4:CA
X509v3 Authority Key Identifier:
keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:0a:c1:a9:66:0c:a9:ab:62:74:c5:2c:b1:4c:c5:5e:7a:00:
58:2f:a8:34:9f:20:9b:c5:f4:43:ad:e8:7b:cf:53:fc:f3:66:
8d:07:fa:19:95:2a:28:90:e4:0a:c1:83:ae:b5:43:7d:d2:09:
4c:ea:ff:36:e0:ee:6a:be:e7:5f:39:52:4b:7c:7e:e3:79:35:
15:e9:0a:a3:75:b6:39:fa:28:9f:b2:c1:23:25:de:9b:18:17:
f6:ec:6d:a1:3f:4a:38:dd:16:c7:80:90:57:34:2a:b6:5b:b7:
0e:5d:29:7b:49:70:39:a7:5c:8e:68:42:07:86:d7:6b:a6:94:
f6:b6:76:3f:1f:93:2e:a6:7d:eb:6a:9d:29:cf:d4:bd:2a:05:
2e:37:a8:21:f5:97:5a:b4:93:a8:43:64:a4:af:3b:7f:70:66:
28:76:67:b0:79:c9:dc:74:9e:66:9f:b6:ab:34:4f:2a:fd:09:
fd:c7:0c:d6:88:7f:1c:91:f6:87:22:03:b6:e8:1f:fd:f5:f4:
d5:b4:50:ac:55:94:6b:3c:00:9f:c8:4a:73:4e:92:13:8f:e7:
f8:e3:63:53:c6:69:4f:c4:2e:1d:48:b6:d9:9f:5e:4d:dc:3f:
69:0d:67:6d:36:b4:1d:c2:16:05:b4:d8:40:06:04:23:3c:ef:
12:d5:50:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2RUMxMTAvBgNVBAUTKDMwNjcwRjYxQjdFNTBFMEIwQjg4RTcyNTFERTg3ODRD
MDNDOUU0NjIwHhcNMjYwMjE4MTUzNTA3WhcNMjYwMjI1MTUzNTA3WjAYMRYwFAYD
VQQDDA02OTk1ZGMyYi0xNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujx/VPr938pKb7jXI6tgYL/cD9K6Jq0WIUPR1wb1oKc6AjymQ5BiKUijSW/s
RRVBEVfhYRt2DLGGqwDs25cR8B3vwTT8XajWFsFGt6Zfknf/+d6tAkLsLZ2+8O1i
giCPTPDp0eD+/NxcsCJmN3oNE7x9pGPjXoTILEWO9J5ohnzMx0TGNWN9LsiMMmdd
oJ2BwWZ0rImq8z93pvKWpwDA5ot0ZN7vCnjNcY/DUXwy5xmOLqePTAP2UBPK59SE
IYjecrBGXDq6eux8CI8mh/eussXlETu3eOWzyXv7zqF8WyeMiHlhMJBlKk96SmzR
0GSmKDuK61SdW55QvlVYUyyQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKgkqSD
HS0pzSgfUQAMxwRqm/TKMB8GA1UdIwQYMBaAFDBnD2G35Q4LC4jnJR3oeEwDyeRi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy8wODJBODlGMDJB
MjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERnc0xpT2NsSGVoNFRBUEo1
R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01HY1BZYmZsRGdzTGlPY2xIZWg0VEFQSjVHSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTZFQy8wODJBODlGMDJBMjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERn
c0xpT2NsSGVoNFRBUEo1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWCsGpZgypq2J0xSyxTMVeegBYL6g0nyCbxfRDreh7z1P882aNB/oZ
lSookOQKwYOutUN90glM6v824O5qvudfOVJLfH7jeTUV6QqjdbY5+iifssEjJd6b
GBf27G2hP0o43RbHgJBXNCq2W7cOXSl7SXA5p1yOaEIHhtdrppT2tnY/H5Mupn3r
ap0pz9S9KgUuN6gh9ZdatJOoQ2Skrzt/cGYodmewecncdJ5mn7arNE8q/Qn9xwzW
iH8ckfaHIgO26B/99fTVtFCsVZRrPACfyEpzTpITj+f442NTxmlPxC4dSLbZn15N
3D9pDWdtNrQdwhYFtNhABgQjPO8S1VBa
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:43:29 2026 by rpki-client