
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json)
Hash identifier: p1ZTz522NTfj8JOoW4HUtydZIQQ7UeWhIsTPgQIY2EU=
Subject key identifier: C5:57:EF:69:87:98:90:31:9E:5E:55:75:B7:75:19:24:C0:E0:BD:7B
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial: 09B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
Manifest number: 09AC
Signing time: Wed 18 Feb 2026 19:30:40 +0000
Manifest this update: Wed 18 Feb 2026 19:30:39 +0000
Manifest next update: Wed 25 Feb 2026 19:30:39 +0000
Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: FAFjJFTObRhVnKwGedjI1jBD78PSLBHbe6LMIO3pPI0=)
2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: 8rvezRlfEmng/UgYNLuDBBrL/AQ4sVZHRDguwah88WU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482 (0x9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Validity
Not Before: Feb 18 19:30:39 2026 GMT
Not After : Feb 25 19:30:39 2026 GMT
Subject: CN=6996135f-35e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:38:87:88:8b:c4:c5:48:fe:ee:69:74:54:
4e:ed:39:38:8a:f4:44:68:a0:19:d7:7e:2b:49:10:
43:d7:e8:6f:c5:c8:44:ed:a4:bc:84:6d:2d:fe:59:
a5:41:24:dd:13:c8:01:9f:73:c9:56:4b:9e:76:d4:
28:c5:14:a3:cd:94:3f:1d:b8:87:8f:be:6c:c5:6e:
66:66:cb:d2:33:2b:af:82:9a:3d:ca:f2:df:e3:19:
e3:5d:81:f5:62:9a:1a:95:fa:2d:59:e7:76:ec:d6:
06:8d:d8:f5:d9:18:b5:b8:bb:42:c2:0b:9a:32:d7:
c0:c5:4f:ef:41:08:45:73:52:17:d8:aa:f2:5e:2f:
19:20:ab:91:73:c6:8b:7b:8f:bd:3e:fb:55:bf:55:
8e:73:e6:dc:fd:b6:2a:85:16:08:93:c7:c9:b1:90:
6a:29:e6:92:30:7c:78:07:a4:e7:93:13:ce:8e:71:
8d:ee:03:72:f1:1b:e1:e0:eb:f8:ac:86:e5:f3:56:
fb:80:1f:3c:d4:09:73:3b:47:7a:86:5b:b1:56:8a:
f7:37:71:f5:90:38:83:f7:cf:66:e7:30:28:f5:de:
9e:58:72:d2:65:f3:e2:ff:34:c4:ea:95:e0:c5:91:
18:7e:93:0d:cb:82:45:55:db:ce:48:f7:43:0b:e1:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:57:EF:69:87:98:90:31:9E:5E:55:75:B7:75:19:24:C0:E0:BD:7B
X509v3 Authority Key Identifier:
keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0d:34:eb:89:e7:d5:1f:7e:1b:bc:90:83:93:ce:dd:81:e0:
fe:cb:62:79:ad:0f:fb:e2:ce:c1:aa:1c:54:48:37:90:c1:fc:
09:6b:15:63:46:53:aa:f9:27:82:44:f9:f1:08:5a:b7:64:21:
82:e1:52:56:0d:88:13:b3:eb:9d:21:8a:4e:fd:a4:bd:4c:a6:
20:f0:21:d7:b0:ab:a4:6d:9e:0c:f9:ca:bb:08:1c:0a:a9:d3:
e3:83:e6:3a:f0:f7:4d:87:9f:a5:fa:15:34:2f:21:ea:6a:2c:
88:fe:7f:f8:44:38:44:78:23:71:00:23:68:14:cc:97:e7:b3:
5b:6e:74:92:f7:cc:0a:30:48:eb:55:a7:41:93:31:b0:fd:89:
cb:a8:27:59:47:99:df:e5:85:07:db:ff:bc:1d:83:d1:f6:d2:
34:b0:eb:78:b8:95:3d:ec:8e:3b:16:3a:38:21:6d:a0:c1:af:
4e:cf:7c:c6:70:99:15:13:a1:71:cc:da:ba:08:8a:48:e1:56:
96:5e:d5:f2:4f:11:ee:a0:11:9d:44:ce:3b:ff:d9:7d:55:24:
de:ba:51:1e:73:e6:91:a5:92:c1:c8:e4:3c:fc:eb:62:06:4f:
e3:92:42:d6:6d:42:64:a2:93:b9:ef:75:fa:e6:38:ed:c0:3f:
82:35:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:39 2026 by rpki-client