
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: RfSLQgcqEm08mrbaWjF6iOXVmIjZ0gLXhDk76+90QaM=
Subject key identifier: 1F:D1:47:1F:40:2F:D7:54:1D:8B:CC:3F:35:41:43:97:E8:0F:07:65
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: 31
Signing time: Thu 19 Feb 2026 06:50:29 +0000
Manifest this update: Thu 19 Feb 2026 06:50:29 +0000
Manifest next update: Thu 26 Feb 2026 06:50:29 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: lJ+N4iMmQ7O14ZiDn+Pphv6DhAZ2QJkOd3ppHCV0nQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: Feb 19 06:50:29 2026 GMT
Not After : Feb 26 06:50:29 2026 GMT
Subject: CN=6996b2b5-e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:3e:17:07:29:47:38:de:f4:48:52:cc:9a:
39:dc:17:93:13:f5:2b:d5:cd:a4:87:39:67:5d:da:
d7:f0:08:56:66:e3:86:a4:0f:4a:bb:28:36:66:79:
23:e3:8d:0a:7a:56:43:5b:41:40:12:8a:33:73:cf:
ac:0d:de:71:da:3c:e4:15:8c:38:20:45:4e:96:f6:
79:8e:fb:b2:8c:f6:c7:94:1f:c8:14:61:39:de:8b:
0e:a6:39:fb:d1:44:28:1d:ab:db:96:1c:94:f0:bb:
91:f4:30:d4:87:52:ac:3d:25:76:59:94:64:ea:e1:
0a:e8:d0:4a:28:8e:34:1c:d7:65:b0:e3:9d:87:5c:
2b:92:1e:9b:ca:3b:4e:7b:72:d1:e7:e9:67:f7:91:
ad:ac:8d:05:eb:ae:ef:14:f2:08:8a:51:09:9e:da:
4e:b0:f8:a5:1e:f2:94:3a:99:a8:2d:63:7a:c6:ac:
32:6d:1f:ea:ef:6b:b7:b5:b0:70:51:25:d1:9a:28:
9e:c6:7a:37:f4:4d:20:20:a7:3c:a6:82:4f:ab:6b:
99:c6:02:54:3e:9a:5c:ac:be:6f:f8:51:12:58:8a:
28:8a:2b:10:df:8a:dd:df:56:1a:a8:51:59:c7:89:
33:62:68:99:a9:c8:71:d7:0a:4a:73:e0:3e:2d:4f:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:47:1F:40:2F:D7:54:1D:8B:CC:3F:35:41:43:97:E8:0F:07:65
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:96:73:d8:8d:a8:c4:60:1f:f9:0f:12:78:8e:e8:0a:c0:51:
80:a2:f1:82:6e:c0:1e:21:47:83:6b:0f:76:f6:38:94:7a:6e:
33:df:21:28:ed:49:f2:81:36:71:f9:a9:df:0a:21:57:9c:74:
ad:8f:84:f8:6f:fa:e6:43:4d:e8:c7:e6:3d:a7:8f:5f:48:67:
06:70:37:fa:15:31:2f:58:e0:6f:b1:f0:f7:4c:93:e2:21:29:
e1:17:2e:8a:9b:09:b9:dd:37:4b:8a:d1:c0:27:05:11:44:98:
c9:97:97:78:91:f5:fd:e1:fd:eb:8b:05:50:34:08:e6:a9:bf:
2e:49:c4:44:5e:42:91:b8:92:df:60:22:51:6f:04:7d:2a:14:
3a:64:10:4e:c8:95:6d:78:b0:02:02:3d:df:7a:e6:b3:b8:ad:
84:df:29:60:ac:fe:f6:92:e7:bf:65:0c:2d:59:7c:7d:1c:e6:
df:82:ce:6b:86:fe:20:b4:fe:9a:f8:51:f0:d2:e8:65:06:bf:
86:c1:1c:e4:5e:77:7d:e4:7a:da:d1:12:f8:28:06:da:bc:44:
3a:be:0e:a1:38:a7:ca:e0:b5:c8:59:42:6a:a4:dc:3b:9c:d3:
68:f4:2f:3a:94:7d:c6:d3:b2:87:dd:32:d3:ef:14:cf:f5:c4:
a2:7c:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:39 2026 by rpki-client