
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json)
Hash identifier: /LSA5NSAWl00F1wf7NCVYJDVxtTCrMI2Z4M2vXZH5MQ=
Subject key identifier: BB:BD:CE:CF:D1:1E:02:3B:1A:EE:47:E5:64:8E:21:27:CC:9B:D2:7B
Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
Manifest number: D3
Signing time: Thu 19 Feb 2026 05:05:20 +0000
Manifest this update: Thu 19 Feb 2026 05:05:20 +0000
Manifest next update: Thu 26 Feb 2026 05:05:20 +0000
Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: 0O3vCyji1jUsi+ZyiUl3DJk3h48Q8rQsVqOYjcw7dB8=)
2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: 0uD06YfXP8jJiypkQtgg/+0Dg/DOv6s8Gpjo5ybB4rE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Validity
Not Before: Feb 19 05:05:20 2026 GMT
Not After : Feb 26 05:05:20 2026 GMT
Subject: CN=69969a10-9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:9b:33:9e:f4:17:da:1d:5e:08:63:46:1d:
bb:33:1f:c4:ba:d6:1b:71:b6:82:01:e1:18:1d:e2:
6f:0f:69:82:27:81:be:4e:28:bd:27:32:f1:b0:56:
c3:27:04:92:d8:6c:b6:09:86:da:39:d0:94:b8:06:
c5:2e:6d:c8:c4:e0:22:31:80:b4:fc:f4:2f:9c:eb:
8a:76:a9:91:fb:c4:07:a7:ad:48:66:7c:16:ca:55:
cd:56:eb:7c:92:08:d2:2b:9d:b2:d2:58:a0:78:15:
16:48:d2:bf:2b:26:37:78:3a:2b:97:11:f8:a7:df:
e2:e6:e7:cb:aa:4f:05:82:83:2f:49:9c:c3:c8:cb:
df:16:dd:e7:e1:84:da:23:38:36:be:b6:9f:e6:a6:
3b:40:c2:8a:3b:aa:db:25:4e:92:4c:ec:c8:0e:ef:
bd:72:ef:dd:ba:3f:66:05:2e:bc:a0:5f:cb:e3:94:
b7:57:2a:44:f5:4d:9d:d7:87:fb:18:e1:29:c9:fb:
39:1b:0b:6a:7c:c6:6f:a4:b2:6b:48:a5:3d:eb:25:
db:6f:c8:41:82:86:0e:5e:78:4d:c4:b3:4a:43:ee:
5c:5c:25:45:32:9b:fe:76:30:02:6a:ea:8e:c1:55:
c6:bb:01:13:af:7e:36:3a:f9:3e:53:04:67:60:ee:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:CE:CF:D1:1E:02:3B:1A:EE:47:E5:64:8E:21:27:CC:9B:D2:7B
X509v3 Authority Key Identifier:
keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d9:2a:34:16:e8:5c:74:b2:5e:cf:82:59:e0:17:ac:f3:ec:
a1:7d:0a:71:a6:1f:ea:d5:ee:ee:fc:b7:d9:09:60:a7:55:55:
3c:bf:9a:db:b8:32:ea:22:68:8d:59:0c:28:4c:74:78:9c:8c:
5f:31:3f:5f:a9:74:81:23:11:ff:5a:9e:6c:16:24:37:a8:9e:
d0:04:c1:a4:0b:56:8e:45:fe:58:71:bf:5e:c0:dd:62:00:f0:
0b:fe:bd:1c:dd:0e:31:cc:3c:2a:d0:f9:93:bf:b0:e9:05:d5:
1d:7c:cf:6c:e6:66:b2:c7:db:45:9f:9f:82:50:75:f7:5c:14:
29:14:c1:29:b0:a2:ca:fe:01:8b:4d:bf:96:47:09:0a:0b:ca:
ea:21:b8:49:bc:c9:16:c5:8f:19:0e:aa:12:d1:24:0d:3c:c7:
40:cf:41:2a:5e:f7:a2:9f:ec:ec:ea:b5:5e:60:50:45:0c:50:
0d:7d:95:05:da:56:71:2c:8f:79:87:01:ba:79:c4:a8:af:39:
90:33:69:46:ab:a6:df:9a:52:9f:96:fe:1b:c6:66:24:87:54:
5a:10:8d:d4:bc:ec:4c:e2:99:53:08:75:93:cf:77:a6:69:0a:
a6:f7:b4:a9:31:b8:5e:0e:bb:d2:df:20:f3:fc:44:62:f2:a5:
3e:e5:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:43:31 2026 by rpki-client