
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json)
Hash identifier: KE+2okltHk8miN7bd/bM6yrkE5hyeiogM5Hw+Xns3Sc=
Subject key identifier: 2C:0E:56:F3:32:1A:59:DE:65:AD:D0:B8:90:47:14:4B:D9:56:08:E5
Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Certificate serial: 02AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
Manifest number: 02AB
Signing time: Thu 19 Feb 2026 00:38:16 +0000
Manifest this update: Thu 19 Feb 2026 00:38:15 +0000
Manifest next update: Thu 26 Feb 2026 00:38:15 +0000
Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: 3lwwjxleT8Q6osB74OWayojy2vq+q3VbBr9VD4lT12k=)
2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: VRyCE3JIOzBpP9NZ2rEktKLNmOidYXbFC2ISWDAI10A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl
rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Validity
Not Before: Feb 19 00:38:15 2026 GMT
Not After : Feb 26 00:38:15 2026 GMT
Subject: CN=69965b77-4a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:d9:de:05:46:ec:2f:aa:40:f4:1a:b6:41:
e7:54:d1:4d:bd:8d:cc:6a:10:90:8a:03:00:de:e2:
c9:d8:1c:ba:cb:11:a0:56:1b:70:7d:7e:dd:5c:9d:
ed:86:7d:75:2c:e0:e8:88:ea:4a:45:a9:47:d0:88:
b7:13:56:89:93:70:d9:ba:90:b1:cf:f0:89:25:52:
d8:34:62:43:0a:cd:ab:43:bf:b3:29:cf:08:f6:5c:
36:ae:c4:62:88:68:fc:35:b9:87:1d:e3:eb:b1:c6:
b8:41:3a:86:62:7a:b8:3d:98:12:2a:d6:e7:ab:9a:
6b:80:25:2e:00:62:9c:18:83:c9:27:9a:be:dc:4e:
1b:5e:3c:13:47:17:8b:f3:6e:6a:d1:d0:84:7f:61:
81:6a:af:a3:d3:b9:bb:d9:a9:1a:bb:52:f2:a7:74:
68:ef:a0:3c:c2:0a:7e:ce:ef:0a:b9:19:22:2b:63:
96:bf:5e:19:3b:5e:09:3d:29:ee:19:61:86:8a:f7:
b3:e0:ba:15:7b:44:98:4b:e5:87:39:dc:48:78:5e:
e5:75:dd:14:44:7d:16:fa:68:82:ba:a5:75:ac:4e:
0d:90:14:e6:72:68:28:f1:5d:7a:7a:a1:77:d9:8e:
d7:87:1a:89:a8:ab:7a:94:a4:15:e7:ea:79:f7:5c:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:56:F3:32:1A:59:DE:65:AD:D0:B8:90:47:14:4B:D9:56:08:E5
X509v3 Authority Key Identifier:
keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:11:f7:ed:ca:f1:6b:af:9e:d9:56:37:d5:23:6a:f1:e8:6f:
da:6b:1e:db:16:ce:8e:d3:65:c8:a3:5a:37:99:55:fe:68:13:
bc:e3:29:fa:99:74:62:54:15:29:ee:6d:0e:a1:3f:f9:73:68:
71:3a:4f:37:55:c9:77:6d:4c:43:da:6c:f3:e8:19:71:86:82:
6e:e3:44:f5:70:ab:15:d7:f4:49:0e:5c:7c:61:1f:6e:15:89:
6a:ab:fb:90:f7:84:75:04:5a:76:cf:33:26:58:c4:54:b5:17:
a9:43:8c:9c:c1:71:ec:31:35:a6:24:82:a2:3f:50:86:21:2f:
9d:91:55:dd:b8:98:b9:b4:be:72:7d:02:61:28:bf:4a:98:e9:
8e:97:81:e9:99:93:2b:23:f3:21:3c:d7:ea:3e:76:b9:38:a3:
1d:24:e9:da:be:a7:96:d6:c2:9a:c1:45:f9:a6:ae:08:0e:e2:
ba:1e:82:d3:f4:83:56:31:77:ab:53:80:f6:b7:95:b9:42:54:
e0:af:82:42:73:de:a9:c9:eb:ec:ec:a3:2e:a5:48:fa:f0:b8:
5c:d6:17:53:b9:36:0c:d8:f4:ff:61:c1:62:96:e1:02:7e:4f:
51:23:d2:cc:be:8e:5b:55:03:a0:93:c0:9e:78:74:c3:b3:4a:
4f:2e:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:04 2026 by rpki-client