
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier: OTFaLsH4IbWPlYXF5iZXnSz1Es0LYG8sKZpgMqI1tFs=
Subject key identifier: 99:CC:8F:DF:8D:94:23:5D:42:01:E9:CA:57:0D:E9:9D:79:FC:C1:98
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number: 0260
Signing time: Thu 19 Feb 2026 01:00:57 +0000
Manifest this update: Thu 19 Feb 2026 01:00:57 +0000
Manifest next update: Thu 26 Feb 2026 01:00:57 +0000
Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: aZ0VPM4rZ+Cs/5ZZ9a6OFCaGSiDrd738lcL38hbSZJ8=)
2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: lGnrQ3842agDvnpgF+nJ7WvDfJ9Hvbpu2XOPWGO29f0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Validity
Not Before: Feb 19 01:00:57 2026 GMT
Not After : Feb 26 01:00:57 2026 GMT
Subject: CN=699660c9-9edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:f0:72:b6:0b:1b:6d:fa:b2:97:95:dd:ac:
40:05:6d:44:c6:dc:07:18:92:52:cd:1f:44:b1:ed:
6a:38:2b:46:c9:3a:7d:97:da:b1:48:e7:5c:a1:88:
3b:ad:59:76:65:bb:1c:71:a2:5f:c8:fe:c7:0f:2c:
21:e3:f8:f8:47:b0:4d:02:38:58:64:d1:24:17:28:
aa:7c:d6:38:0f:26:48:aa:1c:46:38:60:e3:fb:eb:
f3:a8:1d:24:31:a0:ff:26:43:0f:ec:58:9e:7a:2d:
96:2f:ad:b2:eb:78:39:cd:88:72:a8:68:d3:fc:fc:
d8:1e:76:da:0a:4c:a1:36:54:2f:d0:5f:50:37:70:
d4:48:9a:06:2c:a8:7c:0d:ca:59:e6:05:55:b8:a2:
e6:39:cd:c8:48:60:ff:09:5e:34:b3:bc:1b:7a:1b:
15:52:ca:10:7b:a2:ee:91:02:0d:f8:34:f8:f2:0b:
cf:ad:a7:8b:09:81:b2:a5:f7:3e:11:f4:0f:a2:63:
72:e5:79:62:72:d2:c8:cb:f8:fd:b0:a7:a7:c6:ec:
57:55:ed:30:bf:44:35:e8:c0:f1:de:7f:31:40:b5:
b5:ca:59:c4:6b:15:ad:72:12:7d:49:3a:7b:dd:6f:
8a:03:45:75:78:cd:16:ca:1b:a8:10:78:3a:01:0b:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CC:8F:DF:8D:94:23:5D:42:01:E9:CA:57:0D:E9:9D:79:FC:C1:98
X509v3 Authority Key Identifier:
keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:04:1f:ef:f0:b8:88:4a:12:a3:1b:42:7e:b3:63:9e:04:
b6:e2:fb:e1:0a:0e:5e:44:69:82:9e:6e:44:dd:38:ae:0a:b5:
80:d4:6c:a9:99:e8:a5:3d:bb:d1:43:d3:79:b4:d8:a6:04:18:
84:80:23:d8:42:c7:47:80:db:fb:21:5b:cb:05:20:c6:66:64:
6b:a2:67:88:9b:9a:5a:77:8a:fc:66:74:2f:d1:1a:c6:b7:96:
41:cb:48:05:a1:68:4b:e8:49:bf:6f:52:88:eb:05:18:d3:5b:
78:99:a4:3a:86:2a:8e:b5:15:e7:dd:d8:06:4c:19:e9:61:90:
76:9d:70:a0:43:1b:df:16:24:55:d0:16:00:28:b8:04:ea:b3:
7b:54:fc:d7:69:b4:66:d0:e8:63:68:b3:97:31:a9:82:62:97:
b2:05:5c:45:b3:2a:4c:2a:2f:fc:25:10:c0:0e:5d:f1:37:3e:
80:f6:2f:53:f1:de:e5:3e:bf:45:70:5a:e5:b9:29:d6:ea:60:
03:a2:6f:58:37:f5:4f:1e:c9:25:3b:df:64:cb:3a:c5:aa:45:
52:55:b8:25:38:18:6b:a6:bb:be:1b:a1:1c:b7:05:05:b3:ef:
10:ea:b7:9f:3e:cc:fe:56:e7:3d:8d:a2:fe:33:96:75:2f:56:
5d:6c:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:53 2026 by rpki-client