
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier: Gg4falpNrChioqB+NexGP8srL9f4AF8Nfwj5sItBJnQ=
Subject key identifier: 57:2B:8E:0F:96:D6:A3:42:4E:9B:08:DB:77:16:83:22:0C:C8:06:7C
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number: 029D
Signing time: Thu 19 Feb 2026 00:40:04 +0000
Manifest this update: Thu 19 Feb 2026 00:40:04 +0000
Manifest next update: Thu 26 Feb 2026 00:40:04 +0000
Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: nRsedMyp7dv8TPzlNFLx4NnRQRLNn34DT5bzyvYnp5A=)
2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: Feb 19 00:40:04 2026 GMT
Not After : Feb 26 00:40:04 2026 GMT
Subject: CN=69965be4-f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:c9:22:9b:f4:37:29:72:70:2f:ee:ab:2b:
a5:b7:e3:0e:d6:27:89:05:00:62:3e:6c:11:14:cd:
7a:64:2a:51:24:00:fd:0e:96:16:14:7b:10:72:1a:
ae:76:e2:16:ae:c6:26:74:26:77:42:d2:bb:d8:8c:
7a:ff:09:d2:0a:e0:7a:4f:5a:3b:da:3e:2f:fe:dd:
62:73:30:ff:c9:cc:6b:d9:05:c3:89:c5:07:83:85:
1d:3b:96:d7:d3:30:f3:c0:9d:f1:7e:93:9f:5c:30:
9b:e2:07:06:97:1b:14:49:87:a9:1e:1f:ec:ee:75:
b2:84:3a:e0:8d:2f:e9:31:20:ea:f3:a1:a2:f4:57:
66:da:ae:fa:0c:e1:a3:db:60:aa:84:5f:2a:6e:71:
c7:2c:52:93:fb:a8:8c:68:88:9f:d0:83:e7:ed:99:
45:77:4e:ed:aa:3b:d5:93:bb:c5:40:76:64:9d:9a:
b9:5c:92:34:85:06:12:34:44:75:a4:c5:20:ae:69:
dd:5c:e6:dd:77:a0:0d:97:4c:d0:f9:f1:2c:5d:6c:
2d:75:18:bf:c6:35:36:7e:21:84:5b:6d:3f:17:67:
be:a2:df:de:c6:91:e1:02:10:47:bb:74:52:8f:8f:
d6:5f:4d:fe:f1:57:f4:23:f4:4a:6b:8a:40:ba:6c:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:8E:0F:96:D6:A3:42:4E:9B:08:DB:77:16:83:22:0C:C8:06:7C
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a0:84:56:3d:e3:82:bb:26:ab:f9:07:49:bd:67:12:cf:29:
99:e5:2d:69:bc:d4:06:c3:f5:06:30:51:79:b6:57:67:3d:04:
5b:fb:ab:a2:66:89:6d:8f:f8:c7:7e:e0:f2:56:70:b4:cc:f2:
05:67:30:34:7f:3b:fb:ae:74:c7:0a:4c:b4:05:9f:e5:d1:29:
79:f5:ec:43:b8:ce:a1:fd:5d:5a:06:6e:0f:8b:17:1f:61:94:
83:e4:66:b1:5a:f3:07:c6:6a:1e:6c:13:50:43:3f:a5:b1:b7:
5d:4b:93:59:c3:81:37:23:94:32:4a:a6:7f:ac:a8:cf:82:ef:
01:17:f4:5f:b2:bd:ae:24:f1:82:76:40:41:44:cf:1c:4d:a6:
5f:1d:e4:d4:e7:fc:77:7b:b2:d8:6f:2d:3a:ca:38:7a:b9:1a:
1d:cf:7c:57:a7:e0:d2:2d:ee:54:dd:a6:8f:4f:16:da:f0:3f:
d7:40:8f:87:f2:67:24:7c:dc:d2:c9:ad:e4:82:fb:a7:ad:dd:
3d:e9:2e:f1:51:6e:05:52:3f:30:08:c7:c0:83:52:b0:15:a0:
38:de:42:bc:50:f0:d5:2b:9c:a4:e5:ef:13:c1:37:9e:9d:7b:
88:da:d4:47:6e:cf:78:43:32:5b:c2:f4:86:75:83:5a:b3:e6:
5a:f0:a4:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2
OTFEQzA2MTUwHhcNMjYwMjE5MDA0MDA0WhcNMjYwMjI2MDA0MDA0WjAYMRYwFAYD
VQQDDA02OTk2NWJlNC1mMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2vJIpv0NylycC/uqyult+MO1ieJBQBiPmwRFM16ZCpRJAD9DpYWFHsQchqu
duIWrsYmdCZ3QtK72Ix6/wnSCuB6T1o72j4v/t1iczD/ycxr2QXDicUHg4UdO5bX
0zDzwJ3xfpOfXDCb4gcGlxsUSYepHh/s7nWyhDrgjS/pMSDq86Gi9Fdm2q76DOGj
22CqhF8qbnHHLFKT+6iMaIif0IPn7ZlFd07tqjvVk7vFQHZknZq5XJI0hQYSNER1
pMUgrmndXObdd6ANl0zQ+fEsXWwtdRi/xjU2fiGEW20/F2e+ot/expHhAhBHu3RS
j4/WX03+8Vf0I/RKa4pAumyGDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcrjg+W
1qNCTpsI23cWgyIMyAZ8MB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz
OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC
aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP
Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4oIRWPeOCuyar+QdJvWcSzymZ5S1pvNQGw/UGMFF5tldnPQRb+6ui
Zoltj/jHfuDyVnC0zPIFZzA0fzv7rnTHCky0BZ/l0Sl59exDuM6h/V1aBm4Pixcf
YZSD5GaxWvMHxmoebBNQQz+lsbddS5NZw4E3I5QySqZ/rKjPgu8BF/Rfsr2uJPGC
dkBBRM8cTaZfHeTU5/x3e7LYby06yjh6uRodz3xXp+DSLe5U3aaPTxba8D/XQI+H
8mckfNzSya3kgvunrd096S7xUW4FUj8wCMfAg1KwFaA43kK8UPDVK5yk5e8TwTee
nXuI2tRHbs94QzJbwvSGdYNas+Za8KTi
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:07 2026 by rpki-client