
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File: 74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier: UTaO4JH68G3ze8Qj9xeJ6yEx/CVWeOpMMfduDpj8yaI=
Subject key identifier: DA:61:DF:26:E9:5D:54:C1:96:7E:56:0E:45:5A:4F:56:8B:D2:77:34
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer: /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number: 29
Signing time: Thu 19 Feb 2026 06:59:31 +0000
Manifest this update: Thu 19 Feb 2026 06:59:30 +0000
Manifest next update: Thu 26 Feb 2026 06:59:30 +0000
Files and hashes: 1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: UDvEU8EMbTEiP3IeXfX0m2aFCeOHGxGaVuHIWHWTIW8=)
2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: wcuLm38qVMVNfKNHp4RygYOU4qm8i0LLeiUXLc8K4jI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Validity
Not Before: Feb 19 06:59:30 2026 GMT
Not After : Feb 26 06:59:30 2026 GMT
Subject: CN=6996b4d2-129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:c3:06:bd:30:7f:f9:11:ca:45:11:df:4e:
09:91:66:5a:63:c2:b2:77:0a:7a:7e:12:36:d9:07:
b5:df:82:98:94:da:91:c0:e3:07:cf:e1:d7:c4:9b:
82:42:45:5a:66:44:90:36:91:33:20:f4:bf:8e:4c:
9b:7b:be:9a:85:f3:0d:bd:1d:c6:7f:8b:1c:f0:16:
95:b1:6e:75:f7:73:40:46:73:7b:26:c9:97:a1:23:
56:40:17:80:27:45:27:ea:fb:c4:f6:56:dc:b8:db:
c2:b4:32:26:c9:0f:85:bf:e9:20:11:ff:01:21:7b:
a6:e4:ec:1d:10:23:f4:ef:a2:31:0a:8c:63:9e:f1:
5a:21:1f:8f:53:2e:48:49:1e:66:cc:c4:f7:4c:db:
1e:d8:52:e5:72:a6:47:5c:05:df:56:01:33:a0:fb:
fa:5d:0f:96:9a:09:f2:bc:3a:1d:e5:0b:a3:6a:71:
2b:18:36:3e:66:e8:6c:7e:20:f2:72:1d:e4:13:5e:
54:2e:04:89:33:d8:bf:07:23:b5:a3:76:67:f7:ed:
7a:88:89:81:ce:d4:57:3a:a0:f9:99:0f:ee:46:4a:
4a:9b:42:aa:2a:e2:75:fa:03:e9:6c:33:7d:85:4b:
2e:67:11:c5:09:d4:69:cc:8f:86:86:4a:c2:fe:16:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:DF:26:E9:5D:54:C1:96:7E:56:0E:45:5A:4F:56:8B:D2:77:34
X509v3 Authority Key Identifier:
keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:da:7b:e6:97:43:80:6a:9b:b4:a8:c1:0d:fd:51:30:71:05:
50:22:e6:10:5b:3d:bd:87:cc:6c:70:d5:e5:a1:36:cf:bb:fe:
c2:75:2c:f1:b0:4c:79:0e:3d:e7:d8:32:7e:ec:ea:cb:44:80:
ab:93:9b:1e:3e:b0:2a:af:3b:35:9c:b0:58:f1:b6:73:85:19:
3a:a1:d0:69:67:c7:cc:c0:96:75:f8:3b:91:9a:c4:80:96:83:
be:d7:ac:d9:b3:43:8e:54:be:1e:eb:1a:84:99:38:bf:a5:1c:
f8:84:e5:ab:3f:97:90:4f:80:ed:70:4a:34:6d:7b:4a:fc:54:
f8:b8:6c:74:cf:39:2c:36:3d:64:4f:b4:0c:a7:a0:9e:91:89:
b4:96:78:cc:1b:1b:d3:6f:22:d8:26:d4:60:8d:02:79:4e:e4:
5c:4d:58:54:d7:bf:e3:d1:c1:7c:cb:00:ad:5a:cb:b2:ed:23:
14:f7:b8:59:38:bf:14:8e:2f:4d:67:bd:05:e1:c8:f6:6e:73:
02:ed:c3:84:5b:c9:9c:e0:c7:f2:34:f1:a6:03:fd:e2:bc:e6:
a9:86:77:0c:8a:3b:7d:9a:ee:eb:6e:71:01:14:d5:47:18:95:
37:9e:60:c1:31:66:7b:8a:bc:44:c6:ba:54:2b:f1:7e:e5:63:
43:2d:13:22
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QUJBQTExMC8GA1UEBRMoRUY4Qzc3QzgxN0VEREQzRkRDQzY2QjYzNTJENkVBNzhE
NzJDNUFDNjAeFw0yNjAyMTkwNjU5MzBaFw0yNjAyMjYwNjU5MzBaMBgxFjAUBgNV
BAMMDTY5OTZiNGQyLTEyOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDp+8MGvTB/+RHKRRHfTgmRZlpjwrJ3Cnp+EjbZB7XfgpiU2pHA4wfP4dfEm4JC
RVpmRJA2kTMg9L+OTJt7vpqF8w29HcZ/ixzwFpWxbnX3c0BGc3smyZehI1ZAF4An
RSfq+8T2Vty428K0MibJD4W/6SAR/wEhe6bk7B0QI/TvojEKjGOe8VohH49TLkhJ
HmbMxPdM2x7YUuVypkdcBd9WATOg+/pdD5aaCfK8Oh3lC6NqcSsYNj5m6Gx+IPJy
HeQTXlQuBIkz2L8HI7Wjdmf37XqIiYHO1Fc6oPmZD+5GSkqbQqoq4nX6A+lsM32F
Sy5nEcUJ1GnMj4aGSsL+FqL3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2mHfJuld
VMGWflYORVpPVovSdzQwHwYDVR0jBBgwFoAU74x3yBft3T/cxmtjUtbqeNcsWsYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQkFBLzQyMEMwRjZFRDE5
RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0M1RfY3htdGpVdGJxZU5jc1dz
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNzR4M3lCZnQzVF9jeG10alV0YnFlTmNzV3NZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB
QkFBLzQyMEMwRjZFRDE5RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0M1Rf
Y3htdGpVdGJxZU5jc1dzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACHae+aXQ4Bqm7SowQ39UTBxBVAi5hBbPb2HzGxw1eWhNs+7/sJ1LPGw
THkOPefYMn7s6stEgKuTmx4+sCqvOzWcsFjxtnOFGTqh0Glnx8zAlnX4O5GaxICW
g77XrNmzQ45Uvh7rGoSZOL+lHPiE5as/l5BPgO1wSjRte0r8VPi4bHTPOSw2PWRP
tAynoJ6RibSWeMwbG9NvItgm1GCNAnlO5FxNWFTXv+PRwXzLAK1ay7LtIxT3uFk4
vxSOL01nvQXhyPZucwLtw4RbyZzgx/I08aYD/eK85qmGdwyKO32a7utucQEU1UcY
lTeeYMExZnuKvETGulQr8X7lY0MtEyI=
-----END CERTIFICATE-----
Generated at Fri Feb 20 05:00:39 2026 by rpki-client