
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier: P/TQ2odVtKJ9UlrO4Ei9PJ86NeX4nHN9Z4U6L0JPgEA=
Subject key identifier: 39:E2:D2:F5:57:84:F5:99:C0:42:13:B7:BA:2D:9D:BD:79:6D:F4:92
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial: 0656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number: 064D
Signing time: Wed 18 Feb 2026 22:02:31 +0000
Manifest this update: Wed 18 Feb 2026 22:02:31 +0000
Manifest next update: Wed 25 Feb 2026 22:02:31 +0000
Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: yFlLVz0CkfDOlWzxQiDTxFUvWn/HGg1X3rvjHV0o8XY=)
2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 9l/idt3LJislssNxfPBsqgjifz4U+6PzxoXpIp44G34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Validity
Not Before: Feb 18 22:02:31 2026 GMT
Not After : Feb 25 22:02:31 2026 GMT
Subject: CN=699636f7-3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:e2:0c:aa:8f:9a:af:16:1a:e2:3b:49:bd:
85:96:54:23:20:0e:19:3d:99:83:99:e0:b3:2e:3e:
50:d2:d4:51:37:e2:c7:a0:33:07:5a:bb:52:42:6f:
11:cf:dc:8d:c9:25:7f:34:87:b2:97:42:a5:d2:24:
f2:15:d2:1f:77:08:92:6d:67:38:53:a0:a0:2c:6e:
fa:3f:47:b3:a2:ee:ac:c1:e5:7b:8a:21:9b:4d:43:
68:6c:26:34:dd:cc:04:3a:30:26:82:2b:53:fe:f6:
a0:60:8b:c4:b1:d6:96:e2:ed:56:31:63:77:0c:0a:
47:f6:af:ba:a8:05:8d:8b:a8:80:94:bf:23:bf:c1:
5b:26:fc:12:7c:b7:71:e6:75:e3:2a:f0:e7:ee:c7:
ae:34:45:a6:d2:b1:4c:ef:d2:63:ce:4c:42:a9:ac:
3c:38:3d:04:67:12:9f:b1:7f:d5:5e:9c:85:c7:2d:
d6:85:d9:41:a8:93:22:ff:64:d9:71:cc:cd:81:43:
dd:a2:58:82:76:62:90:db:a1:00:50:9f:9f:ac:a9:
85:8a:cf:47:a7:05:77:d4:b8:ba:ac:cf:10:d9:82:
90:3f:9d:73:5d:03:d4:2a:25:4c:54:a9:c5:a0:4c:
0a:7b:37:db:27:8a:8c:0e:a4:4c:47:65:00:9f:f4:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E2:D2:F5:57:84:F5:99:C0:42:13:B7:BA:2D:9D:BD:79:6D:F4:92
X509v3 Authority Key Identifier:
keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:b5:10:42:88:db:71:e6:eb:ca:48:cc:de:2c:0a:c3:3e:27:
76:a8:b8:0e:d9:b5:cd:36:4d:ac:c4:d1:01:71:9c:ba:9a:a1:
cd:23:8a:7e:4f:4c:5d:50:a8:52:82:ea:ab:b4:94:b2:6c:d4:
4d:40:9e:b7:4a:43:ce:8b:29:40:f3:85:d1:cf:6d:cf:84:79:
0e:d7:76:83:ae:cf:ce:8d:36:06:02:7b:3c:e5:10:f8:d2:1a:
5f:ac:6a:2f:29:7d:12:14:72:de:c0:5a:d3:29:33:52:2e:dc:
73:8b:e3:81:3b:ac:09:10:be:6f:ce:81:d7:74:82:71:6f:c7:
77:9d:bb:a1:8e:b2:e0:a6:38:a7:27:be:7f:8c:65:fe:07:97:
ae:26:6c:5f:c0:8a:9d:55:46:6a:b8:98:0f:ab:e5:c6:b9:9e:
50:37:56:d7:2b:68:73:6f:e2:81:ed:15:27:48:c6:2d:dc:f0:
c6:19:80:49:fb:6c:92:d6:c7:76:0b:0e:a8:6b:87:92:05:f6:
2d:a9:e9:32:dc:84:a0:37:a1:92:ef:cf:ad:b2:33:a0:72:43:
a7:b7:fa:21:31:d3:68:89:f2:cd:2d:a7:de:2c:6b:af:05:fe:
1f:5d:35:46:8b:5b:fd:d5:56:a6:76:79:7f:4d:10:b8:6a:71:
95:2a:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:14 2026 by rpki-client