
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft
File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json)
Hash identifier: WJWhNWwOEioniE6P7NAtGc5BOdDJ/1JcZlOddB7guVA=
Subject key identifier: D1:42:BF:5C:3C:B9:DC:DC:99:3E:1A:A5:9F:77:4C:34:8E:8A:7E:2D
Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E
Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft
Manifest number: 4F
Signing time: Thu 19 Feb 2026 06:36:14 +0000
Manifest this update: Thu 19 Feb 2026 06:36:14 +0000
Manifest next update: Thu 26 Feb 2026 06:36:14 +0000
Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: FY8UCg4TGT1Xq6yIOdT7t36CcB656is7NY/yIUe69EU=)
2: DA06E7EAA37511F09017D760C4F9AE02.roa (hash: wpQC06DiQ+xzlEL7d1LfcmEUWMK/NDUMBZdyTADqLL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl
rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E
Validity
Not Before: Feb 19 06:36:14 2026 GMT
Not After : Feb 26 06:36:14 2026 GMT
Subject: CN=6996af5e-d96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:70:cb:dd:93:1b:75:9b:43:d9:c5:80:53:
24:6a:47:67:06:07:74:f1:81:56:2a:2c:4f:87:ca:
4a:ea:13:0b:ae:f3:b0:b6:58:03:e3:d2:26:98:0d:
60:a1:a6:cc:aa:c6:e9:c5:b5:d5:44:ce:27:b2:0c:
34:9d:a7:10:a9:7a:95:30:e8:43:a6:1a:90:c5:4c:
ba:8f:b3:a4:ec:3b:e5:e8:07:6e:6d:2d:72:f5:d3:
a0:d3:3c:ae:c3:8a:35:81:d0:89:8e:73:a1:0d:18:
2b:99:bf:8f:e1:32:8f:3b:58:af:cd:8b:81:21:56:
cf:96:08:e5:05:f9:70:a6:e4:55:d0:33:4b:c5:d0:
4d:57:00:97:44:d7:fb:4e:08:2d:1e:14:c7:4b:50:
6e:5e:80:c5:76:af:1d:fa:54:8d:85:4a:5b:31:28:
9f:7d:c0:5d:ea:31:84:5c:81:00:1e:6d:d6:2e:94:
cb:f0:ce:96:11:ae:c2:0c:a6:c4:88:00:e3:3e:e7:
fb:25:e0:5c:cd:d2:79:60:dc:50:aa:6a:2f:3b:36:
68:f1:9f:dd:73:ff:20:9d:0d:87:c0:cd:5e:a5:dd:
01:00:ee:6b:b6:99:04:a2:28:7d:d8:12:5a:af:1f:
5b:f0:cc:8c:4f:41:f2:3f:b2:f4:b0:6d:fe:d0:8f:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:BF:5C:3C:B9:DC:DC:99:3E:1A:A5:9F:77:4C:34:8E:8A:7E:2D
X509v3 Authority Key Identifier:
keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:13:20:80:63:1a:d8:ec:fd:73:23:da:7d:33:32:4c:88:63:
2e:e6:86:5b:e4:e3:45:12:7c:53:75:40:97:37:76:6e:d6:a9:
ae:9a:12:0f:b9:d2:7d:d5:1d:69:85:78:e3:67:04:fa:bf:67:
f7:b2:e3:c4:b4:37:58:3b:45:06:41:ab:5f:af:fd:da:36:8c:
72:61:dc:fe:8e:73:26:12:7b:8b:53:ea:ab:ae:5c:8e:96:9c:
70:3e:1b:11:a2:71:4a:92:c3:97:7b:91:f0:fb:75:81:c6:ac:
b2:f8:29:86:85:b3:87:e9:28:61:8e:5d:95:2b:e1:2f:1f:25:
8f:b1:47:ca:78:ff:d5:43:d9:9b:1f:55:93:52:e2:cd:9b:82:
43:20:60:88:ed:0e:e6:fb:e0:25:6f:e5:9f:d5:06:ca:d4:2d:
f7:2d:90:f0:3f:15:6e:01:02:46:8c:7e:4a:31:b3:35:b6:e6:
03:2b:e8:8e:e8:48:e5:91:cd:f4:ef:13:05:9e:05:18:49:80:
90:be:bb:72:a9:04:98:12:92:59:60:87:11:47:8d:aa:82:0e:
75:a0:18:5e:e1:af:3a:1a:95:a7:31:0a:a5:d8:f9:b4:e6:ba:
92:54:8f:df:3d:16:81:86:04:43:c5:6d:f5:23:dd:a9:6a:d6:
40:63:cc:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTE5QjExMC8GA1UEBRMoREYyMkE5QTU3QjdEM0E4QUVCMTI0RDY5MEM3OTE3MDY2
QjREQjU5RTAeFw0yNjAyMTkwNjM2MTRaFw0yNjAyMjYwNjM2MTRaMBgxFjAUBgNV
BAMMDTY5OTZhZjVlLWQ5NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEd3DL3ZMbdZtD2cWAUyRqR2cGB3TxgVYqLE+HykrqEwuu87C2WAPj0iaYDWCh
psyqxunFtdVEzieyDDSdpxCpepUw6EOmGpDFTLqPs6TsO+XoB25tLXL106DTPK7D
ijWB0ImOc6ENGCuZv4/hMo87WK/Ni4EhVs+WCOUF+XCm5FXQM0vF0E1XAJdE1/tO
CC0eFMdLUG5egMV2rx36VI2FSlsxKJ99wF3qMYRcgQAebdYulMvwzpYRrsIMpsSI
AOM+5/sl4FzN0nlg3FCqai87Nmjxn91z/yCdDYfAzV6l3QEA7mu2mQSiKH3YElqv
H1vwzIxPQfI/svSwbf7Qj+05AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0UK/XDy5
3NyZPhqln3dMNI6Kfi0wHwYDVR0jBBgwFoAU3yKppXt9OorrEk1pDHkXBmtNtZ4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMTlCL0RBQjg1RTI4QTM3
MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRa
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3lLcHBYdDlPb3JyRWsxcERIa1hCbXROdFo0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MTlCL0RBQjg1RTI4QTM3MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29y
ckVrMXBESGtYQm10TnRaNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABwTIIBjGtjs/XMj2n0zMkyIYy7mhlvk40USfFN1QJc3dm7Wqa6aEg+5
0n3VHWmFeONnBPq/Z/ey48S0N1g7RQZBq1+v/do2jHJh3P6OcyYSe4tT6quuXI6W
nHA+GxGicUqSw5d7kfD7dYHGrLL4KYaFs4fpKGGOXZUr4S8fJY+xR8p4/9VD2Zsf
VZNS4s2bgkMgYIjtDub74CVv5Z/VBsrULfctkPA/FW4BAkaMfkoxszW25gMr6I7o
SOWRzfTvEwWeBRhJgJC+u3KpBJgSkllghxFHjaqCDnWgGF7hrzoalacxCqXY+bTm
upJUj989FoGGBEPFbfUj3alq1kBjzGY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:50 2026 by rpki-client