
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier: WdyghqxhSc/s4ifAVT9LacRdVkcxpSQyhuKSNPs61FE=
Subject key identifier: B4:0B:68:1F:4D:B7:6F:ED:CE:8C:63:BE:65:55:F0:EC:92:33:0B:A4
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 031D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number: 0316
Signing time: Thu 19 Feb 2026 00:20:57 +0000
Manifest this update: Thu 19 Feb 2026 00:20:57 +0000
Manifest next update: Thu 26 Feb 2026 00:20:57 +0000
Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: gL2pRctwyNLFP72EJB+VHJ4QJjZbCRk7+HuLSMMyvRI=)
2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: 7RWQhgSbZcnPOnEsIYtd3qHWkXqAq8ZnwRthU2QRdqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Feb 19 00:20:57 2026 GMT
Not After : Feb 26 00:20:57 2026 GMT
Subject: CN=69965769-2640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:e1:fc:87:ed:0d:19:a5:ba:b2:46:b5:ef:
dd:e2:26:c5:dd:be:ac:5d:20:d1:2c:bb:45:9e:50:
18:88:41:f4:b6:e0:b7:af:48:32:e4:0a:58:34:05:
92:4d:d4:79:83:75:9f:92:f8:d7:2e:82:09:e1:dd:
74:8f:3c:31:4e:69:2c:47:e4:e4:80:c9:39:89:9d:
ad:bf:c7:cc:4d:c8:3a:bb:d9:2d:05:4a:ae:e2:82:
ae:72:49:10:fe:6f:60:9b:f9:e5:b3:30:cf:89:6e:
2a:d7:71:10:76:d9:18:c3:95:c0:dc:b4:ea:39:c7:
ab:de:54:74:db:bd:91:09:1f:24:5d:3f:85:c6:22:
62:32:45:ce:7a:48:45:48:81:41:9a:0d:3a:e4:09:
51:8f:7c:95:b9:0d:89:0a:a9:e4:c2:de:40:68:72:
56:5c:2e:c1:1c:e4:55:8c:80:95:b3:1c:2e:d1:84:
58:bf:49:53:10:91:de:d3:f4:ee:e1:d3:c6:ff:42:
f7:7c:cf:bf:56:ca:95:77:9d:94:3d:71:d3:62:14:
45:a3:80:15:15:e4:42:ff:f6:47:a3:49:7e:2c:22:
2b:7f:22:9c:e9:10:36:02:f1:e0:00:ff:87:72:09:
a5:3a:e8:2e:d2:b7:0a:64:f5:97:f3:f4:80:6f:33:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:68:1F:4D:B7:6F:ED:CE:8C:63:BE:65:55:F0:EC:92:33:0B:A4
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:84:c0:57:02:ac:0c:6c:92:82:26:94:5b:76:39:5c:6f:0f:
80:d4:60:76:9c:78:9a:c4:c8:b4:2b:79:8d:44:c2:2d:6e:4f:
7a:4b:ea:72:dd:4c:c7:4b:2b:b6:b3:a3:7d:d1:2b:f8:21:d7:
8e:7d:4a:7d:cb:67:d1:aa:0d:55:bf:37:de:90:a9:44:7b:bc:
38:86:bf:35:5a:05:54:a1:17:8d:2e:8a:e2:1e:b7:86:55:2b:
cc:7b:5b:82:fa:ef:f9:93:e8:31:0a:08:83:78:a9:4a:13:bd:
38:87:0f:e9:90:da:c6:66:61:f8:74:38:37:4a:8b:29:b1:3a:
1d:21:c8:66:a0:fb:8f:96:f4:1c:02:2c:1c:6f:75:c5:ab:a7:
20:a6:aa:30:c5:75:86:b0:f5:af:d9:2f:ee:90:7c:82:93:4a:
d5:11:52:34:90:80:b9:dc:ed:d2:78:b9:26:a3:a9:3c:5f:9b:
37:94:fb:7a:bf:b5:d8:42:e6:4b:a5:e0:0d:25:ff:3f:3b:25:
36:d8:fc:6f:fb:6c:5a:fe:35:e3:56:77:74:d6:5c:f1:6d:64:
ab:eb:0b:ce:4f:84:1b:9c:5a:0d:aa:15:82:98:4c:0c:d9:f4:
6e:53:b9:34:f1:7f:ab:db:36:59:69:0c:85:ed:92:88:0d:30:
73:05:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:30:49 2026 by rpki-client