
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json)
Hash identifier: ZjaogLyoFm3bZQ8Cmfsxwqtz3ngZsEN4TIHGjP+LE9Y=
Subject key identifier: A2:98:0A:58:F8:5E:33:5C:23:FD:FC:29:EB:C3:AD:C7:99:75:D5:5E
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial: 0CE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
Manifest number: 0CD4
Signing time: Wed 18 Feb 2026 17:56:48 +0000
Manifest this update: Wed 18 Feb 2026 17:56:47 +0000
Manifest next update: Wed 25 Feb 2026 17:56:47 +0000
Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: sMniMja63+/2Q2yTPnEHo5U854kH9tHgVwCDIt3O2kQ=)
2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: Es8XS7g0+bPB2VUMzuh8jLLqheaUliLQZn9wcmlkbao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3298 (0xce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Validity
Not Before: Feb 18 17:56:47 2026 GMT
Not After : Feb 25 17:56:47 2026 GMT
Subject: CN=6995fd5f-8dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:0d:4d:e9:a9:a6:18:b1:db:ea:cf:b1:70:
00:d4:8d:62:54:d9:2e:c9:c3:a6:05:7c:6d:9b:ce:
c6:10:43:db:ad:66:e4:56:81:9b:79:82:eb:9a:52:
bb:c9:b8:a1:ff:65:e5:ed:89:76:3e:47:27:3a:7c:
36:0c:c5:6a:67:80:ce:ea:7d:70:b0:8d:9d:82:1a:
ab:4f:60:0a:8f:68:d4:e1:2e:05:77:21:cb:0e:8d:
d1:0e:ea:06:71:81:52:c3:58:bf:39:11:70:09:06:
8b:c0:a9:ca:01:36:8e:d5:88:88:30:83:a9:e5:a5:
56:69:91:45:a0:04:28:c2:49:32:51:b8:3d:c3:74:
01:c7:a0:8c:3d:f9:e5:c5:44:09:2e:0b:cf:5f:39:
ea:ea:0e:c4:7e:05:46:53:3e:11:33:e9:95:f1:9b:
62:9e:6d:c0:21:41:86:ff:46:f1:5b:40:df:8a:16:
43:a6:17:43:2f:45:43:c7:28:ad:e4:c2:47:12:ea:
e1:b0:a9:d6:c2:0c:06:61:39:e4:db:3a:78:51:5c:
f4:03:6f:fe:b2:e2:4a:f0:21:d2:4d:5b:58:2d:cf:
f3:a8:70:4d:39:6d:89:ad:63:d3:f7:a6:e4:8a:38:
3a:1b:ed:a7:81:4c:4f:a9:e0:f9:07:fa:93:f0:c1:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:0A:58:F8:5E:33:5C:23:FD:FC:29:EB:C3:AD:C7:99:75:D5:5E
X509v3 Authority Key Identifier:
keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:86:95:2b:af:24:0e:c2:19:2a:c1:d0:3f:99:a2:aa:bf:
14:28:0e:ea:8f:d5:49:d3:36:d7:92:5a:3c:0a:c7:be:62:57:
90:e4:b9:fd:66:e2:49:3c:4f:8a:9d:56:6f:bf:26:11:71:8f:
8b:bd:9f:9d:33:30:1a:78:42:0b:79:35:97:97:95:e2:78:d8:
23:3b:32:35:29:f8:11:b5:ff:f7:37:0f:30:09:b6:6c:17:a3:
67:1a:53:31:c7:fb:e9:a1:33:a9:4c:11:83:20:20:5f:fa:6c:
3f:15:e3:11:fa:d5:c9:76:1a:d0:2f:3c:74:58:aa:7e:b1:3e:
57:42:2f:a0:e9:47:1d:aa:09:9e:ca:1e:99:d5:a4:d6:4d:25:
09:87:bf:3c:cd:ab:37:e4:9f:7c:27:7c:83:0f:85:05:24:63:
15:aa:c0:40:14:77:29:3c:e0:62:7a:0c:d1:f7:51:c3:3f:4d:
0c:46:68:05:81:ab:9e:f1:42:23:fc:0f:93:94:9c:1c:0b:f1:
16:42:8d:a6:0a:0b:3a:46:0f:ca:1b:91:39:96:93:15:a8:73:
ba:f5:d1:56:7a:9f:6f:98:47:08:cf:88:da:eb:ee:00:88:5c:
16:f7:ee:bf:8f:26:fd:e4:0c:d6:07:1b:e2:b5:8b:36:1a:a2:
48:7e:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:40 2026 by rpki-client