
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json)
Hash identifier: tMY5bXsxI8pYn5STjrPy7GzD91pHahRvTLHVUK94RHY=
Subject key identifier: 55:1A:6E:D8:97:B6:91:3E:E8:37:3E:86:BF:53:64:92:F6:EE:CB:E8
Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6
Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6
Certificate serial: 260E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
Manifest number: 2602
Signing time: Wed 18 Feb 2026 15:35:10 +0000
Manifest this update: Wed 18 Feb 2026 15:35:09 +0000
Manifest next update: Wed 25 Feb 2026 15:35:09 +0000
Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: IYb0G53quLWClC5uv03CfmDgi7chj6q+oqg8XFrt/g8=)
2: 96F26DD8E4A511EF8259C769C4F9AE02.roa (hash: 106BmLtTyVCv8aiEyQESyMsMUTUgBCG4YPN0EmuEMYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl
rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9742 (0x260e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6
Validity
Not Before: Feb 18 15:35:09 2026 GMT
Not After : Feb 25 15:35:09 2026 GMT
Subject: CN=6995dc2e-78be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:a5:86:24:f7:a2:fe:aa:d4:5c:39:cf:66:
d2:0c:68:bc:d1:1d:51:cf:2e:38:13:fa:11:a9:8d:
8a:7c:27:b8:33:37:a2:ae:87:f8:87:b5:7f:0a:bf:
a4:55:5d:42:a1:1c:8c:97:23:3b:54:91:4f:d2:0d:
37:15:aa:1e:fc:85:6b:7b:85:2f:77:cc:d6:c5:a0:
be:65:7f:24:25:21:2e:88:09:99:d7:b8:c6:62:3c:
94:d0:53:29:c8:f7:af:b6:7d:0c:ea:ab:be:25:18:
90:fc:11:2d:80:20:4f:08:99:ed:f7:dd:cd:b8:bf:
c0:de:dd:81:58:cf:99:e1:20:9c:fa:81:bb:5a:7f:
12:ff:3e:c2:3d:d0:e3:3a:b2:48:71:04:7f:e7:68:
14:b9:f5:89:b7:17:c6:e0:50:be:8f:d8:4d:d8:f6:
d2:a5:d1:f1:86:23:37:85:fd:ec:b4:df:56:e9:e7:
b7:fc:44:47:ad:43:b5:35:5b:d4:07:4f:48:98:01:
62:7b:d7:27:b7:ee:6f:63:e7:9e:9d:24:14:64:70:
31:11:eb:23:b8:cd:9a:ed:a8:bd:cf:d5:84:f8:1c:
cb:69:ba:f0:0a:5f:79:d1:36:95:16:e9:c6:97:37:
59:da:07:43:89:a5:bd:46:4c:c0:55:89:ed:7a:aa:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:6E:D8:97:B6:91:3E:E8:37:3E:86:BF:53:64:92:F6:EE:CB:E8
X509v3 Authority Key Identifier:
keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:12:29:00:72:c7:51:a7:d6:d0:83:e3:5e:66:8c:17:15:73:
6b:ef:d2:0f:0e:f3:33:48:fa:f1:e6:88:30:74:e1:52:27:ef:
7a:0d:d9:f7:df:9b:94:5e:11:d7:81:f7:99:00:7a:41:65:18:
10:0c:0c:a7:56:46:c2:fb:9b:3a:5f:f8:c1:e7:bf:b8:2f:ff:
63:d3:42:51:47:de:9e:1f:9a:56:c3:e5:de:31:e2:b4:5f:1d:
1f:19:37:27:4c:e1:ad:61:36:6b:64:64:7f:c5:57:85:15:cd:
e0:eb:e2:2c:73:a4:ff:15:18:38:2e:c2:93:5f:a3:de:50:dc:
fc:32:3b:77:d2:8e:9c:15:78:80:d7:22:a6:17:a3:97:27:98:
78:4a:7a:16:6a:c0:7c:19:b4:de:bf:b9:3e:7c:6a:7f:ce:ab:
47:7f:22:3a:00:78:84:8e:f5:c6:8b:a4:a7:50:24:bf:09:d9:
43:bb:d0:4f:3e:16:78:f4:94:5c:ba:cf:d2:0a:a9:c4:51:4e:
f3:d6:9e:3f:eb:35:81:0c:70:24:c7:b6:d8:32:d1:d8:6b:25:
ff:85:97:e0:15:47:4d:0c:82:eb:63:e2:d6:f5:27:e1:1b:db:
41:90:6f:2c:51:0d:ef:0b:6e:fc:92:d4:9e:3f:4c:8b:0c:ed:
8f:8b:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:49 2026 by rpki-client