
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File: lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier: bqkhv5SaQe3Xjf6Kqj38UGrmEs1zggAxQYCSfBrz7sM=
Subject key identifier: 8E:84:A2:DE:3E:80:BD:A5:E5:6F:BE:9E:3F:F8:24:79:99:A1:65:5C
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial: 0EC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number: 0EBD
Signing time: Wed 18 Feb 2026 17:23:26 +0000
Manifest this update: Wed 18 Feb 2026 17:23:26 +0000
Manifest next update: Wed 25 Feb 2026 17:23:26 +0000
Files and hashes: 1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: CRqs93P+8OUyCKMfZZdbVacNxcnwbP0CgMliftc/TJ4=)
2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: FB/I0gTgEb20qtL8a4Y3PnJsdj8cSocHpg/e5FisnJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Validity
Not Before: Feb 18 17:23:26 2026 GMT
Not After : Feb 25 17:23:26 2026 GMT
Subject: CN=6995f58e-667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6c:29:1a:6d:79:a0:74:89:71:37:4f:82:c3:
bb:15:0b:a8:11:bc:50:cd:b0:89:d4:b8:1e:1d:3e:
ca:5a:d4:15:90:e0:ba:4e:5d:24:2b:5b:89:fa:de:
35:5a:b0:39:c0:c0:7f:7b:3e:fe:01:78:98:b4:56:
72:34:6f:e4:ad:b2:18:24:15:63:9b:c7:05:3d:80:
84:32:2b:71:24:f0:a8:89:a9:f6:27:89:9c:99:f1:
17:c9:b0:f2:4e:c4:38:b0:b3:e8:0b:4c:cf:47:13:
58:37:17:72:5c:8c:fd:97:4c:71:04:fc:e2:bc:38:
e7:69:d1:58:c2:33:b4:07:d0:3a:8d:f7:21:7e:c3:
84:74:da:ba:c3:c6:6f:1a:2b:f6:41:17:9c:5a:9c:
ae:09:e8:c1:12:2c:2e:f3:83:4c:a8:2f:0e:a2:d8:
fc:77:87:d7:50:59:4d:82:49:df:8c:c5:7c:b6:1b:
e7:cd:18:96:f5:52:0b:fb:eb:2f:ea:38:b7:c9:6d:
ed:a5:cd:d7:ef:8f:0b:7f:58:a2:72:1a:84:6f:f0:
d9:00:02:41:60:32:33:29:bf:2c:3e:65:77:3e:49:
cd:db:b3:fd:9f:ff:09:76:55:39:3c:af:6f:59:21:
73:ea:a6:5d:66:2a:96:77:d5:15:6d:1b:10:ff:bd:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:A2:DE:3E:80:BD:A5:E5:6F:BE:9E:3F:F8:24:79:99:A1:65:5C
X509v3 Authority Key Identifier:
keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:58:51:68:2b:25:b0:5b:71:ee:b4:46:3a:5c:14:7c:f8:
cc:05:f1:52:7b:4f:19:59:03:1a:95:5f:9e:be:8d:2b:88:e2:
3b:22:75:55:18:6c:c0:d1:9c:e0:56:ea:3d:2b:d1:d6:6a:a2:
5b:67:f4:dc:b4:e4:91:94:d7:23:e9:98:d8:95:52:8d:e4:96:
82:b2:25:5a:5b:82:69:a2:a8:f1:d8:cd:7b:c5:67:50:be:f2:
1d:1e:dc:86:e8:84:a0:ac:ef:a4:bb:ea:da:b4:21:a2:69:52:
e1:b4:76:6f:c2:70:11:25:95:31:41:90:d7:38:18:5c:58:81:
5b:ad:ff:e5:6c:f6:80:3e:b5:53:ff:6d:b1:c9:37:8c:58:95:
f8:86:e3:a0:d2:db:d3:a0:09:ad:3b:81:29:f9:fc:74:fe:f6:
66:fb:cf:e0:a2:e9:36:43:81:21:45:69:8c:fe:52:e5:1c:45:
45:f4:83:f9:e2:1d:66:db:4a:45:69:3c:d1:dd:45:b6:52:a3:
cc:01:da:0e:b1:08:c1:35:df:7e:c2:e7:32:f2:16:a6:1f:3b:
89:b1:95:7c:13:1c:14:8f:ff:f9:15:bd:1e:a0:ba:ec:bc:f4:
c2:f3:82:9a:a3:6b:56:81:7e:75:ee:95:24:9c:4c:e5:43:81:
c1:f1:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:37 2026 by rpki-client