
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json)
Hash identifier: 452HSnV0cQD974CU+6XSXfwXTfDzr4XWJKQ4LrVq6bc=
Subject key identifier: FA:FB:41:12:D8:67:F4:F4:98:08:AC:1C:62:A4:31:05:6B:84:64:2C
Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85
Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
Manifest number: 0B
Signing time: Thu 19 Feb 2026 07:22:23 +0000
Manifest this update: Thu 19 Feb 2026 07:22:22 +0000
Manifest next update: Thu 26 Feb 2026 07:22:22 +0000
Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: K5OpHtOopUIicb5fUB9eswvSq42Ph6jhDwy2rO06bdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl
rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085
Validity
Not Before: Feb 19 07:22:22 2026 GMT
Not After : Feb 26 07:22:22 2026 GMT
Subject: CN=6996ba2f-dfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:fa:52:6d:c3:37:d3:55:35:c7:9b:19:17:
98:ff:bc:9c:88:49:59:dd:36:f9:16:e2:71:e0:8f:
cc:52:e3:3e:7c:52:45:5d:56:7a:76:25:9e:bb:0e:
40:25:43:3b:fa:94:af:57:f5:fb:d4:97:0d:7f:de:
41:83:83:46:25:f5:aa:fd:d2:73:fb:b9:a7:01:1a:
a4:cd:63:a2:6d:49:8e:9b:9c:5c:0a:48:7b:71:8e:
53:59:22:97:59:6a:c0:fc:ce:e0:f0:fa:f3:c5:62:
1f:f5:d3:90:e9:08:63:b7:ac:ec:28:20:32:bc:0c:
3d:42:93:0b:5d:c2:f4:64:d7:7d:15:f2:f2:a3:2e:
9d:78:31:93:0e:e1:34:45:6f:50:43:7b:78:c9:e5:
3a:08:d0:d8:70:dd:99:2f:fe:f7:18:2b:8d:1d:0b:
b7:b1:a3:bd:54:21:c8:89:5f:fa:bd:2f:23:bd:e0:
3f:e9:58:ae:fc:38:fb:ca:38:0a:62:9a:a7:18:ec:
9c:7a:c2:2d:7f:76:83:b3:ed:b2:d1:9c:28:7c:3f:
9c:3d:1b:6f:95:fa:3a:b9:8d:0a:ab:53:3f:11:95:
d4:a1:f8:f8:12:78:dc:6b:54:4e:ce:d2:b1:a3:3f:
7e:3d:a8:c8:fd:3b:d0:4f:51:cc:94:0e:f5:1f:ba:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:41:12:D8:67:F4:F4:98:08:AC:1C:62:A4:31:05:6B:84:64:2C
X509v3 Authority Key Identifier:
keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:2b:ae:5f:90:2e:01:42:3d:94:8a:54:db:32:86:3e:44:24:
c9:cc:a4:eb:aa:36:b9:4a:b5:d0:05:d2:77:b3:0e:6e:ef:cf:
9a:9e:e7:db:e8:ae:75:e4:8a:b6:55:69:ca:5a:ec:4f:6a:84:
0e:c3:c4:34:81:ed:b2:3c:a3:60:2e:1d:fe:db:8b:ff:e2:ad:
ad:52:e3:89:5b:d9:8e:7e:cf:b9:dc:1a:b9:8b:a7:9d:f0:a7:
4b:cf:67:1c:af:ae:dc:c8:87:63:16:e5:d9:ca:3c:d2:71:e8:
01:00:aa:0b:96:ab:72:a5:89:af:af:21:2a:43:61:e8:b9:74:
8a:b5:74:e2:cc:20:d3:38:e9:fe:b1:77:d6:3d:f3:d4:a9:5e:
6d:51:be:d0:e9:30:c9:89:e2:8e:da:ce:18:27:c0:7f:e9:c1:
f1:8c:88:c4:64:a7:84:d2:45:e0:9c:e9:53:04:84:0e:35:68:
ee:59:cf:f3:38:f9:e1:ff:53:1c:c3:80:5c:be:7a:74:ed:1d:
14:40:3e:dc:b6:0b:ad:e8:aa:63:53:d1:53:fe:4d:f0:1f:0c:
7b:07:2d:56:24:81:65:28:10:33:34:ef:5f:01:d0:dc:c2:63:
32:39:c3:86:9d:50:6d:fe:c0:a4:dc:ad:af:56:30:6c:c0:37:
58:a8:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:09 2026 by rpki-client