
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
File: 3Y89lj-o0fItV_Tfspq9cNJVjjc.mft (raw, json)
Hash identifier: bXl4oiqn7bgbzo+73KzJcOER+WElyKJ9O17zsoGFBpc=
Subject key identifier: 6B:13:CB:89:26:CD:08:F2:45:2E:F5:92:1D:94:02:4C:D9:F0:66:4F
Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
Certificate issuer: /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Certificate serial: 0343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
Manifest number: 033F
Signing time: Thu 19 Feb 2026 00:11:38 +0000
Manifest this update: Thu 19 Feb 2026 00:11:38 +0000
Manifest next update: Thu 26 Feb 2026 00:11:38 +0000
Files and hashes: 1: 3Y89lj-o0fItV_Tfspq9cNJVjjc.crl (hash: cjCR0GezKuk6qh9ZwALAi9tcNRIeh5I56hCtWt/ojPk=)
2: 76C5241CF47311EC8721C33DC4F9AE02.roa (hash: k+SbCpllhZI/PId+36V/JG+wlkp2Gdvk2xv/XzOQ3v8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Validity
Not Before: Feb 19 00:11:38 2026 GMT
Not After : Feb 26 00:11:38 2026 GMT
Subject: CN=6996553a-1f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:cc:5d:d6:6f:05:2e:ea:cd:8b:55:6e:97:
8f:e2:31:55:a5:1d:25:54:e0:11:0e:4e:34:53:1e:
d3:1d:3f:90:c6:de:20:2c:3d:97:d7:e5:20:99:0d:
b8:d1:69:9e:76:62:8d:9b:83:39:86:17:10:4e:e5:
d3:a5:89:66:f8:ae:4e:ef:87:5c:a8:a0:5f:b3:39:
da:8c:8b:b0:7a:9c:93:4d:a1:4a:e5:de:50:c2:35:
84:b2:94:7e:60:96:b4:2d:4b:7f:6f:7f:72:76:ed:
fb:b7:eb:0a:c8:ea:34:e5:a1:22:67:4b:ff:e0:42:
cc:6a:d9:9e:02:27:28:48:c4:b6:04:f1:16:db:16:
df:78:dc:0c:66:b4:50:d9:5c:c1:3f:0b:e2:61:5b:
30:57:55:a6:93:01:46:b0:52:4c:58:50:63:af:09:
2c:31:8b:7d:01:82:c6:27:4d:37:b3:87:76:44:ce:
14:38:01:ad:d1:48:4e:1f:c8:6d:14:d0:bb:82:1a:
4e:77:59:df:30:e7:a5:c8:7d:cd:25:2e:47:93:82:
ac:0f:b6:59:ad:07:fa:06:e4:de:22:bc:3a:8a:c1:
1e:a4:d6:ce:60:98:97:e9:90:5b:a8:07:db:e5:d6:
3d:46:e8:d2:32:53:1e:3a:eb:b3:77:3b:7c:2d:43:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:CB:89:26:CD:08:F2:45:2E:F5:92:1D:94:02:4C:D9:F0:66:4F
X509v3 Authority Key Identifier:
keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:6a:32:de:fc:06:5e:40:d5:77:57:14:6c:01:2e:70:92:4e:
c4:ce:ae:8d:9e:24:83:39:f1:c8:74:9d:ea:7d:40:5f:63:ec:
c5:63:3f:15:d0:22:c9:c4:66:ac:dc:b5:7a:72:e1:fd:89:9a:
29:fb:3a:5e:c2:fd:65:f0:cb:b0:03:7b:5f:08:d1:cd:c2:c6:
59:6b:8b:54:b6:75:d3:c0:13:f9:b8:d5:04:82:c5:f2:a6:cc:
e5:2f:35:de:30:91:99:ea:85:87:25:fb:4d:1d:01:63:73:40:
d1:5f:d0:43:51:8c:84:ab:e4:6c:11:ea:ed:e4:77:e4:74:9b:
fc:23:4a:76:17:41:cd:b4:42:b2:67:25:39:d5:70:e6:4f:35:
4e:a1:98:71:e2:c7:e4:95:d6:6b:c5:6d:1f:d3:fd:f3:23:18:
95:9f:ee:cc:32:8e:41:0b:ae:1b:33:c2:b7:6d:60:0f:f9:f8:
34:af:8f:9a:cf:9d:29:0c:c4:c3:bd:d3:19:75:b0:f9:55:b5:
61:b3:20:e6:ce:ad:37:93:2a:b0:df:5c:6b:35:02:ca:16:fd:
53:a6:da:10:8c:b7:e4:df:b2:13:db:5d:0a:8c:fa:4b:2d:3d:
66:52:cd:b4:91:a8:6e:d8:29:44:8f:9e:4a:6a:52:05:13:b2:
76:e7:04:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUwNkMxMTAvBgNVBAUTKEREOEYzRDk2M0ZBOEQxRjIyRDU3RjRERkIyOUFCRDcw
RDI1NThFMzcwHhcNMjYwMjE5MDAxMTM4WhcNMjYwMjI2MDAxMTM4WjAYMRYwFAYD
VQQDDA02OTk2NTUzYS0xZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCXMXdZvBS7qzYtVbpeP4jFVpR0lVOARDk40Ux7THT+Qxt4gLD2X1+UgmQ24
0WmedmKNm4M5hhcQTuXTpYlm+K5O74dcqKBfsznajIuwepyTTaFK5d5QwjWEspR+
YJa0LUt/b39ydu37t+sKyOo05aEiZ0v/4ELMatmeAicoSMS2BPEW2xbfeNwMZrRQ
2VzBPwviYVswV1WmkwFGsFJMWFBjrwksMYt9AYLGJ003s4d2RM4UOAGt0UhOH8ht
FNC7ghpOd1nfMOelyH3NJS5Hk4KsD7ZZrQf6BuTeIrw6isEepNbOYJiX6ZBbqAfb
5dY9RujSMlMeOuuzdzt8LUPrlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsTy4km
zQjyRS71kh2UAkzZ8GZPMB8GA1UdIwQYMBaAFN2PPZY/qNHyLVf037KavXDSVY43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTA2Qy80NjYxOEIxQ0Y0
NkUxMUVDOEM2MDcwMEZDNEY5QUUwMi8zWTg5bGotbzBmSXRWX1Rmc3BxOWNOSlZq
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNZODlsai1vMGZJdFZfVGZzcHE5Y05KVmpqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTA2Qy80NjYxOEIxQ0Y0NkUxMUVDOEM2MDcwMEZDNEY5QUUwMi8zWTg5bGotbzBm
SXRWX1Rmc3BxOWNOSlZqamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3ajLe/AZeQNV3VxRsAS5wkk7Ezq6NniSDOfHIdJ3qfUBfY+zFYz8V
0CLJxGas3LV6cuH9iZop+zpewv1l8MuwA3tfCNHNwsZZa4tUtnXTwBP5uNUEgsXy
pszlLzXeMJGZ6oWHJftNHQFjc0DRX9BDUYyEq+RsEert5HfkdJv8I0p2F0HNtEKy
ZyU51XDmTzVOoZhx4sfkldZrxW0f0/3zIxiVn+7MMo5BC64bM8K3bWAP+fg0r4+a
z50pDMTDvdMZdbD5VbVhsyDmzq03kyqw31xrNQLKFv1TptoQjLfk37IT210KjPpL
LT1mUs20kahu2ClEj55KalIFE7J25wRZ
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:53 2026 by rpki-client