
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json)
Hash identifier: c1egNqkFU81vqW2OvshDuRu709yIUSypWPET8Mu9bUg=
Subject key identifier: B1:D5:CF:13:A5:3C:4F:BA:EB:5B:00:24:7B:82:C9:74:58:75:EA:04
Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
Manifest number: 01BE
Signing time: Thu 19 Feb 2026 02:25:43 +0000
Manifest this update: Thu 19 Feb 2026 02:25:42 +0000
Manifest next update: Thu 26 Feb 2026 02:25:42 +0000
Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: K89S5U6HII4dRmQIyHj/UyE5w8wv2F+LStKM8iT4HaU=)
2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: aEwpt3FN/b3agcSqsy028NBcRbgaV2C2DNdzwhDgaUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Validity
Not Before: Feb 19 02:25:42 2026 GMT
Not After : Feb 26 02:25:42 2026 GMT
Subject: CN=699674a6-33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:56:ee:32:32:67:46:12:0b:b5:0e:55:43:
0e:3b:ad:24:5d:db:ba:5b:ff:37:ec:05:99:49:dc:
52:44:47:a9:95:24:0f:10:82:77:2b:fe:3e:51:4c:
60:93:91:67:aa:8a:18:5e:3f:ff:7c:3b:14:3e:81:
78:f5:04:f2:4d:ce:5f:fc:14:96:10:6a:58:b2:b8:
0c:08:1a:94:4c:dc:e2:18:a6:fb:94:f4:ff:49:6b:
18:24:bb:45:92:71:c1:77:11:f5:e8:10:0d:8a:f1:
a4:c8:1b:d6:63:c7:bf:d0:ad:53:f8:76:7f:05:50:
64:10:b1:33:29:d3:7f:d3:1f:c6:d0:28:ae:8e:8f:
da:7b:05:ef:31:82:bb:82:7f:a4:c6:f2:4c:17:44:
81:f9:01:1e:a5:2e:9b:7a:cb:0e:c7:7b:95:4f:91:
23:da:17:09:2e:e8:3f:2a:4c:bb:20:db:99:1e:45:
d5:fe:6e:0e:12:48:6a:70:7d:32:29:b2:4b:54:21:
ca:a1:15:4d:67:ec:0e:e5:06:c9:3d:f9:f4:07:e6:
5b:1a:3f:0f:01:92:e0:4a:9d:19:ff:74:b4:e7:75:
92:0f:23:1d:3d:96:6d:0f:39:f9:29:7b:95:29:f1:
fe:90:39:fd:5c:f2:9b:c0:44:c5:16:ff:96:a0:a0:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:CF:13:A5:3C:4F:BA:EB:5B:00:24:7B:82:C9:74:58:75:EA:04
X509v3 Authority Key Identifier:
keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9c:d7:f0:35:14:1b:c9:7d:93:25:ee:8d:61:37:39:74:64:
be:98:7d:33:11:a8:0b:00:ba:c0:61:15:de:e4:ee:86:4e:0f:
25:c6:0b:cf:7d:b0:f3:f0:9e:65:a5:e3:3c:f9:69:d3:89:0d:
50:a4:7e:75:6e:07:8a:80:5b:92:41:5f:83:ea:1b:4a:56:bb:
0c:d6:3a:10:37:04:c9:a0:df:11:aa:50:97:cd:05:08:7a:a9:
14:66:9d:1e:1f:3e:fe:4f:68:e8:ca:25:19:f4:2e:00:0b:cb:
06:03:a2:33:bd:29:c3:ad:ab:49:4c:4c:aa:18:87:99:81:7f:
eb:da:f9:9c:f8:37:13:c9:19:7a:e7:20:32:fe:4f:c4:b8:a6:
f3:60:b5:5a:5b:7e:7b:1b:f1:86:5c:4e:4e:99:ab:77:67:fe:
21:4e:75:d9:4a:57:7a:f7:13:f2:2a:a5:ba:93:1f:5b:0e:85:
07:0f:0d:db:18:bb:f6:63:4c:ac:f1:83:b2:c5:1a:93:2e:f8:
96:1b:a9:66:a3:36:01:3f:ea:54:8c:92:f5:39:ed:55:f9:e2:
d3:81:5e:1b:7a:aa:78:c1:2f:38:2c:47:7a:78:25:74:80:0f:
91:41:28:7c:8b:32:54:7e:4d:d2:e2:ec:1a:af:c1:ec:c0:b5:
d8:62:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:14 2026 by rpki-client