
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier: 4CibNr1w0DCxcSaz3jXuHGKIHwX3Sj0yUI61COL7TEE=
Subject key identifier: D9:07:18:24:62:EA:E8:A5:01:D1:41:E8:35:F4:5B:E8:1D:E1:20:36
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number: 0F4C
Signing time: Wed 18 Feb 2026 17:28:10 +0000
Manifest this update: Wed 18 Feb 2026 17:28:10 +0000
Manifest next update: Wed 25 Feb 2026 17:28:10 +0000
Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: RgmeR24hBuzHCtid33d4QfpzaKfSGT3dN8eGqAJZnpE=)
2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: Dfnpdx7fQvQO0Rh8jNA5Tx09pBgCccW2N8IKNsboZGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Feb 18 17:28:10 2026 GMT
Not After : Feb 25 17:28:10 2026 GMT
Subject: CN=6995f6aa-9680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:d2:44:bc:1b:a1:06:78:3a:03:5f:f1:e5:
f3:eb:4b:b9:78:89:ee:01:59:80:88:43:66:03:df:
dd:d3:f2:29:2c:ee:2e:0f:89:eb:42:46:65:57:00:
cc:4a:0b:44:b3:0a:29:f2:7f:77:dd:64:fd:19:2a:
a2:2d:2e:eb:1d:85:f5:86:c5:49:f3:ba:51:46:31:
e8:3d:02:4b:2c:ce:97:2c:2d:27:fc:c6:f6:25:0c:
a1:28:9c:67:85:ab:11:01:54:a8:b3:6f:b2:b4:a2:
10:2a:8c:36:05:39:3a:19:bd:bb:51:d2:70:79:e7:
fb:31:02:1f:de:ac:41:13:be:d5:37:f3:32:4f:91:
f0:9f:f6:15:e8:b9:ed:1a:ce:09:70:ee:54:7a:45:
e4:7b:d8:98:4e:5d:38:76:36:de:be:88:2a:8c:d4:
8f:65:23:00:33:1e:b1:85:10:41:88:41:fc:cd:12:
ac:2e:d7:0a:5e:53:03:9f:02:0e:73:28:e6:e4:b7:
f8:54:cd:62:cd:0f:4e:2e:e7:7e:d5:ab:90:2f:1b:
bb:e6:72:e1:bd:cb:58:14:a5:1f:1b:0d:6d:14:d0:
ca:a1:89:f8:d9:b3:b0:40:f4:c8:c9:89:d6:79:7f:
bc:71:35:67:8d:44:96:3c:fb:49:00:56:93:11:87:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:18:24:62:EA:E8:A5:01:D1:41:E8:35:F4:5B:E8:1D:E1:20:36
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:5e:7c:07:6b:bc:28:b6:6d:a2:e9:a7:b2:62:5f:07:f2:df:
6b:c1:b8:8c:26:cd:10:bd:9e:0f:82:ea:60:39:fd:95:63:c7:
90:50:64:bd:71:01:b2:ef:94:c5:6d:05:84:db:8f:05:ea:46:
c9:27:dd:4d:2c:fa:47:8c:fe:28:53:c5:32:4e:2c:12:88:97:
c7:ac:2c:9f:2f:5c:79:38:c3:dd:4b:5e:fe:3e:fe:26:ce:b3:
e5:43:e7:8a:27:0c:61:6d:b9:82:09:3e:03:98:ae:34:6d:13:
2a:95:d2:47:1f:29:b9:c6:bd:02:ee:28:7b:49:03:47:ae:71:
e3:76:24:02:0b:75:d7:ba:5f:87:c9:cc:dd:d6:17:35:79:d9:
31:38:f2:24:51:27:bb:0d:26:42:91:3d:31:31:77:ad:88:6a:
06:a2:02:84:9b:ac:29:08:26:75:86:a6:80:bd:3a:d5:5e:e8:
17:6e:f6:b3:dd:f7:d1:fe:be:c5:4e:26:f9:e6:a0:d2:f2:03:
b4:ff:91:f2:f0:8f:be:59:66:f4:54:53:a8:78:77:4e:21:e3:
12:2c:0d:45:63:05:95:4a:82:57:ff:22:77:a5:e8:74:fb:96:
7e:b7:bc:8f:99:f1:21:21:d6:8a:63:59:8d:7e:2e:2c:13:fd:
c6:c4:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:28 2026 by rpki-client