
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: srQgF9bM7/lO7sGNUlYC/NY/jwCq+TR32k+Q9vw6pqc=
Subject key identifier: 3A:33:CC:03:F9:E3:DF:05:AA:B0:76:25:3A:EA:44:17:75:51:0C:C3
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 0864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 085C
Signing time: Wed 18 Feb 2026 20:10:34 +0000
Manifest this update: Wed 18 Feb 2026 20:10:33 +0000
Manifest next update: Wed 25 Feb 2026 20:10:33 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: HbfmrZGu6uErdtNpHmPUy9v4rUeCbMEzKdkI1YBrO5o=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: FrUF8k+q0iQX/Bos2myD8zLROjp2eOpyug9lyw9AGzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Feb 18 20:10:33 2026 GMT
Not After : Feb 25 20:10:33 2026 GMT
Subject: CN=69961cba-d544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:10:87:fd:67:fd:01:ff:a9:ef:d8:32:b3:
0a:32:1e:68:cd:63:1a:0e:90:22:97:89:f3:4c:c4:
fb:c1:62:5a:d4:0a:09:bb:b5:8b:11:80:e5:bd:ab:
86:18:a1:be:d7:e8:9d:82:00:33:05:ea:43:e9:7a:
2e:28:df:97:c9:ad:0f:4f:eb:63:cd:68:e5:74:2e:
01:34:c0:19:7d:92:39:07:2e:e3:97:f8:3e:b5:18:
ba:72:34:a9:63:02:74:aa:df:c4:32:7b:d9:80:e1:
b0:04:13:ef:5b:38:a1:d8:78:70:92:f9:1f:6c:bf:
7a:98:fc:6f:0f:18:ed:a4:9e:fa:72:a0:08:63:74:
32:98:d2:ec:0d:4b:b1:08:10:57:6b:93:42:53:a5:
1f:ad:5a:2d:05:bc:5e:7c:fc:c3:b2:8c:b3:6d:4b:
dc:cd:07:64:a5:e0:ed:dc:fe:d2:a5:86:cf:c7:fe:
09:97:fa:b9:2d:4a:11:8c:f2:ba:af:62:22:60:e4:
51:9d:7a:cf:e7:63:a6:17:4c:ec:b7:0f:17:39:d1:
85:fb:5c:04:98:23:b2:52:63:7f:b1:56:42:56:f7:
60:13:c4:0a:1e:27:94:1d:28:62:fa:ae:11:9f:b6:
4c:1a:4d:f1:7e:27:72:11:87:73:15:dd:b3:b8:e9:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:33:CC:03:F9:E3:DF:05:AA:B0:76:25:3A:EA:44:17:75:51:0C:C3
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a6:0a:e5:db:6d:5a:99:40:7b:28:d7:1a:71:46:2e:87:3a:
f3:f9:08:fa:35:9b:4a:89:db:a0:03:97:ab:30:26:5a:10:02:
b1:b3:d5:33:5d:e3:e2:9c:29:3f:7e:78:56:e1:1c:56:84:da:
26:a6:4c:b9:b2:a3:cb:a9:26:5d:eb:34:01:90:60:e3:52:2b:
92:04:98:a4:e9:43:fe:e1:78:e3:2e:8f:fe:dc:76:36:ea:cd:
aa:8e:11:0a:d0:b9:73:92:6d:43:90:c5:6d:27:d6:4a:6c:3f:
f0:56:71:2e:61:4f:a3:13:9e:0d:7c:c7:e3:88:ea:55:0c:d3:
42:8a:ba:27:e9:29:00:1e:cf:7e:43:b8:77:4b:c3:d3:d0:3d:
aa:1a:c3:a4:ff:80:23:31:11:57:12:8d:a9:72:17:69:5a:c5:
ff:74:90:0e:e6:56:07:4e:ae:2a:8e:05:3e:f2:f6:fa:b4:6e:
5e:24:b3:d8:c2:ad:5d:b8:c8:6c:c4:8c:47:52:a7:27:7e:24:
e8:4a:5a:b0:79:43:11:9c:bd:54:eb:d8:88:67:54:4d:8d:9e:
4e:c1:b5:07:8c:84:36:86:36:b5:78:6e:86:79:25:c8:a1:38:
a6:0a:9b:ea:07:35:1d:4d:f4:4d:00:e6:4a:24:f9:0a:22:5c:
97:9a:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:54:32 2026 by rpki-client