
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json)
Hash identifier: WCCdfdES7wN2xoOCnpTPPUgwM0jLfbr4JU2owsaU9To=
Subject key identifier: 7C:94:CD:AC:B2:3F:AD:27:EA:DF:A6:58:E4:86:4B:26:E1:94:EF:94
Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
Manifest number: 016C
Signing time: Thu 19 Feb 2026 03:21:24 +0000
Manifest this update: Thu 19 Feb 2026 03:21:23 +0000
Manifest next update: Thu 26 Feb 2026 03:21:23 +0000
Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: qawUpu75B43l99/fs6qt/ukPJ2l+QHIvo+NdjlobEhQ=)
2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: WXs23PC9oNPUDjoMufc2iqduojTIGtlpeP1luMoHhDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl
rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Validity
Not Before: Feb 19 03:21:23 2026 GMT
Not After : Feb 26 03:21:23 2026 GMT
Subject: CN=699681b4-35f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:85:13:2b:ab:61:b1:eb:9e:de:61:60:97:
ee:c9:80:c7:38:dc:89:24:ea:0e:4d:b4:de:a0:5f:
fa:4a:c3:ad:4c:cd:53:2d:cc:2a:02:5e:6b:e4:61:
99:fe:bf:bb:af:bd:2b:9f:7e:38:5f:ac:a6:fb:b6:
4e:bf:a3:ee:8b:80:d9:eb:c8:e2:33:9b:21:4c:96:
bb:39:37:d7:2d:78:0d:83:0e:1b:c4:7e:50:73:c8:
6c:50:07:d7:13:e9:ff:e9:f0:30:23:f7:0b:ac:65:
1e:6c:25:ba:ae:70:ac:2e:73:52:12:f5:65:bc:5f:
97:54:04:85:57:5c:0c:7d:38:2f:58:d6:56:19:b8:
e5:02:74:4e:ed:84:2d:1d:cf:51:f6:b9:60:f3:55:
de:68:4b:e8:3d:26:93:35:b9:36:2f:3f:79:97:8b:
17:c1:ce:e7:02:78:dc:43:bf:b1:a7:ab:c8:f4:37:
a1:8a:cc:5c:7f:11:77:8f:72:2a:f1:83:b5:06:21:
74:7e:80:c2:b8:03:26:a2:44:d2:46:ce:e5:a9:18:
ec:0e:56:6a:74:15:41:26:4b:62:84:55:87:fa:ec:
ee:fe:08:6c:c8:76:5f:fb:8b:64:09:00:bb:f5:ae:
b3:6b:e7:2e:1f:3a:9b:8c:d0:72:03:ec:66:b5:46:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:CD:AC:B2:3F:AD:27:EA:DF:A6:58:E4:86:4B:26:E1:94:EF:94
X509v3 Authority Key Identifier:
keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:66:6d:42:d6:bc:f7:12:3f:fd:64:5c:c8:d1:7e:9d:28:42:
31:29:37:dc:98:78:03:ec:ac:85:93:97:ba:0b:8a:d9:15:a1:
d7:d8:f5:f7:6a:cc:a6:ff:4a:db:f2:cd:b0:2e:98:42:0e:9b:
13:c4:b7:ac:58:05:3f:17:a4:fb:6c:8a:50:f6:91:c8:e3:70:
b2:88:4a:00:f3:21:83:47:79:29:ad:50:60:02:ec:cb:5f:3a:
11:2a:9a:c6:22:0a:63:51:14:9f:6c:15:18:24:0f:9e:3b:8f:
69:45:02:ed:eb:66:eb:4c:69:66:fb:70:db:5a:c4:52:23:54:
bc:d7:9f:d3:67:c2:25:13:58:fe:9e:5d:8a:90:0a:15:ab:5d:
37:50:74:79:6f:c8:d9:8e:3f:a4:88:6c:be:61:f5:e6:57:00:
29:7d:84:95:26:dc:e0:07:0e:11:99:6d:e0:6b:3f:ff:0e:d8:
06:9b:69:a4:11:a3:0c:d6:1f:c1:e9:f4:4a:60:04:fa:0f:48:
7b:d4:85:97:55:ae:a4:8c:03:d1:da:10:8a:e3:c5:05:a0:72:
1d:1d:ac:cd:00:40:67:31:1b:68:79:07:ee:17:64:eb:07:51:
a4:c0:ad:2d:fd:18:e5:bd:02:19:a2:27:12:3c:87:47:1f:8e:
de:48:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:34 2026 by rpki-client