
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier: BdCqLMJZkVDOP7UzfyeaIKpAcTkBkNTJPZLgbPsgAyg=
Subject key identifier: 3E:A8:9F:5E:7F:ED:05:D1:EE:9A:A0:21:A6:C1:9D:5D:BC:F7:A9:67
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number: C1
Signing time: Thu 19 Feb 2026 05:17:29 +0000
Manifest this update: Thu 19 Feb 2026 05:17:29 +0000
Manifest next update: Thu 26 Feb 2026 05:17:29 +0000
Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: 1dL2On9z0aEm3V7uNlrjVIjgP8Q9MkonrRkZBWxDQpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Validity
Not Before: Feb 19 05:17:29 2026 GMT
Not After : Feb 26 05:17:29 2026 GMT
Subject: CN=69969ce9-2af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:64:b1:6b:a3:ed:d5:92:ff:be:89:ab:e6:
5f:4f:07:9d:dd:0c:92:f2:0b:7f:c8:05:87:33:bf:
61:ef:cc:26:17:3b:17:f6:6c:6b:b4:cb:fb:b8:f7:
88:e0:a2:a2:eb:3f:78:9f:d4:cf:6d:97:36:af:dd:
bf:d3:9f:3f:88:66:72:7a:12:ec:b4:23:b0:17:74:
06:9b:de:c8:06:aa:7a:17:21:cc:af:33:2a:14:ab:
a6:62:68:fd:68:d4:61:2e:ef:99:51:19:aa:b5:ba:
d0:66:c5:63:59:c1:25:96:32:fb:42:56:17:1b:18:
7c:af:4b:d7:52:56:6b:cb:91:34:88:b1:d2:6a:04:
5a:f8:51:ce:51:72:ab:55:8d:9d:b9:6f:ef:ec:f8:
39:4f:90:5a:e8:3f:08:83:68:c6:6f:ad:79:b0:17:
4c:bb:2c:53:d0:20:36:2f:c7:82:05:5e:ef:8d:67:
e5:c1:e1:b2:54:eb:ad:8b:84:e3:92:43:ea:7a:e7:
84:f3:b5:d7:ac:41:96:94:46:c7:11:19:af:2a:43:
33:10:49:58:65:f4:9c:b8:a3:fe:5d:c8:76:b4:f0:
53:19:65:0e:a5:a8:c7:4c:d4:2b:17:43:6c:e9:c3:
37:04:92:58:d5:f7:d1:fb:17:c2:48:ec:ff:f2:55:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:9F:5E:7F:ED:05:D1:EE:9A:A0:21:A6:C1:9D:5D:BC:F7:A9:67
X509v3 Authority Key Identifier:
keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:75:ce:b9:97:e4:b8:24:54:74:3d:01:fc:04:b3:a2:b6:fc:
d9:e1:3b:0f:96:49:8b:9b:29:22:90:e6:00:f4:6e:35:89:7e:
1d:d6:0b:1b:59:d3:ec:b1:3a:cb:7c:36:86:4c:a7:ea:fc:5e:
d3:0c:60:70:fe:ce:ca:dc:86:ac:48:03:5d:16:a7:75:72:e1:
01:87:ee:d0:7b:e5:36:68:0e:2e:e2:f4:2a:e6:f9:5c:93:c3:
48:8e:a1:45:66:87:f1:6b:0e:b5:1f:69:0a:7c:72:e8:b5:42:
eb:22:b3:b7:a3:95:55:67:33:1e:d7:b3:99:b1:5a:ed:c6:e0:
db:f8:53:cb:6f:4a:df:6b:9c:08:1f:2e:c2:e2:56:a7:20:e4:
42:c0:31:02:2b:62:03:b1:60:de:f7:5b:50:52:30:7a:58:6a:
08:e3:93:ab:fc:6f:fb:fc:eb:ea:da:75:42:89:a4:7f:bc:3e:
32:9b:69:24:99:1a:40:8a:19:33:0d:7c:29:c7:bc:c1:9d:35:
2b:ec:09:40:bd:53:c2:a4:b8:b6:67:06:1b:03:ff:14:7e:db:
6a:ed:db:39:94:b7:3d:26:19:65:1a:bf:3e:9f:eb:40:ad:31:
03:68:fe:4b:b6:ff:07:44:c5:41:c4:59:de:a3:4b:2c:c7:67:
72:f5:f9:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDlDQTgxMTAvBgNVBAUTKEU0OTc0Qjg0MTZBRDNCOTlERDExRjNCMDQwNTZGMEM3
OTlCN0ExQ0IwHhcNMjYwMjE5MDUxNzI5WhcNMjYwMjI2MDUxNzI5WjAYMRYwFAYD
VQQDDA02OTk2OWNlOS0yYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHBksWuj7dWS/76Jq+ZfTwed3QyS8gt/yAWHM79h78wmFzsX9mxrtMv7uPeI
4KKi6z94n9TPbZc2r92/058/iGZyehLstCOwF3QGm97IBqp6FyHMrzMqFKumYmj9
aNRhLu+ZURmqtbrQZsVjWcElljL7QlYXGxh8r0vXUlZry5E0iLHSagRa+FHOUXKr
VY2duW/v7Pg5T5Ba6D8Ig2jGb615sBdMuyxT0CA2L8eCBV7vjWflweGyVOuti4Tj
kkPqeueE87XXrEGWlEbHERmvKkMzEElYZfScuKP+Xch2tPBTGWUOpajHTNQrF0Ns
6cM3BJJY1ffR+xfCSOz/8lVMRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6on15/
7QXR7pqgIabBnV2896lnMB8GA1UdIwQYMBaAFOSXS4QWrTuZ3RHzsEBW8MeZt6HL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUNBOC8yOTMyQzU4OEU0
RkQxMUVGQUMxQ0U2N0ZDNEY5QUUwMi81SmRMaEJhdE81bmRFZk93UUZid3g1bTNv
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVKZExoQmF0TzVuZEVmT3dRRmJ3eDVtM29jcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUNBOC8yOTMyQzU4OEU0RkQxMUVGQUMxQ0U2N0ZDNEY5QUUwMi81SmRMaEJhdE81
bmRFZk93UUZid3g1bTNvY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwdc65l+S4JFR0PQH8BLOitvzZ4TsPlkmLmykikOYA9G41iX4d1gsb
WdPssTrLfDaGTKfq/F7TDGBw/s7K3IasSANdFqd1cuEBh+7Qe+U2aA4u4vQq5vlc
k8NIjqFFZofxaw61H2kKfHLotULrIrO3o5VVZzMe17OZsVrtxuDb+FPLb0rfa5wI
Hy7C4lanIORCwDECK2IDsWDe91tQUjB6WGoI45Or/G/7/Ovq2nVCiaR/vD4ym2kk
mRpAihkzDXwpx7zBnTUr7AlAvVPCpLi2ZwYbA/8Ufttq7ds5lLc9JhllGr8+n+tA
rTEDaP5Ltv8HRMVBxFneo0ssx2dy9fnR
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:34 2026 by rpki-client