
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json)
Hash identifier: tPlLWMO2/4tboVqQqfduMfO38783wdUpBH5Cu2i88mk=
Subject key identifier: 90:CD:15:33:91:C2:B4:2F:4C:14:33:05:BC:F3:13:D5:58:64:DB:D9
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
Manifest number: 0231
Signing time: Thu 19 Feb 2026 01:35:58 +0000
Manifest this update: Thu 19 Feb 2026 01:35:58 +0000
Manifest next update: Thu 26 Feb 2026 01:35:58 +0000
Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: 8J17OdlgtCDt8vbK0zKdFlYoEzOIlt+f4CAgwyg8OIE=)
2: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: mJLvR1p4ts88KkpVKKt2PVk1iLkTAtrbOa4ytntbS6o=)
3: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: Ah9DA9XDU6AgPBrVhyRA7IEj119ByF47rhFGR96tGKc=)
4: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: g8h4AuAjSU2htCTyorJM2XPUCNXDA6cYYOZOcIV/cZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Feb 19 01:35:58 2026 GMT
Not After : Feb 26 01:35:58 2026 GMT
Subject: CN=699668fe-75b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:c8:9a:cd:dd:cf:c2:cb:a8:44:aa:6a:fd:
ad:73:f7:1a:ef:a0:d1:ef:46:60:70:e8:72:cb:83:
54:95:a9:bb:bf:30:cb:19:ad:d6:bb:57:72:61:14:
c1:34:97:bf:67:97:fa:8e:fc:25:b7:5e:83:93:49:
68:7c:88:22:fb:aa:cc:6d:40:eb:a6:6b:9d:38:cb:
a0:66:41:30:4e:d6:ee:0d:fa:1e:ff:3d:cf:17:d4:
44:bb:42:0b:9a:06:63:cd:c1:85:20:cd:a3:c9:c2:
85:b6:a5:08:58:76:9f:29:b4:c6:eb:7d:ea:ac:50:
1c:59:da:73:60:ed:ac:6a:3a:a2:a2:8a:32:38:8f:
78:95:f5:2a:a8:0b:5e:b9:d9:eb:a8:f5:31:83:9a:
a0:4e:fd:cc:91:fb:aa:5b:78:65:6b:5d:ba:ec:0a:
84:e8:e1:29:82:06:dd:55:d2:c6:ea:97:c5:33:ce:
72:e7:56:f1:2d:4c:d9:fe:dc:cd:bf:f4:26:3d:a3:
cb:9c:43:7f:d8:05:9e:1e:79:5f:61:b2:96:89:a1:
aa:ae:d8:52:94:3c:9d:f7:67:4f:2e:5f:e5:97:b0:
d7:1a:3d:c8:5b:79:ed:c7:fd:a3:ab:63:33:02:ac:
c4:f2:d7:b4:79:52:84:56:5b:eb:54:cd:bc:b7:06:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:15:33:91:C2:B4:2F:4C:14:33:05:BC:F3:13:D5:58:64:DB:D9
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:da:31:e2:2c:7e:0e:f0:16:81:5d:dc:00:fd:87:2c:c9:6b:
e6:5b:22:c6:58:25:ac:a9:bc:11:96:4d:8a:0b:41:67:7a:16:
9b:49:9c:e9:09:79:19:79:f5:91:4f:d4:69:2b:99:3d:42:e5:
52:9f:82:6d:d5:3b:d7:6c:86:2c:3c:c8:da:49:3b:7d:74:1d:
51:90:d0:aa:12:33:99:fe:73:ad:83:cd:dc:0c:c2:69:b0:ba:
b7:27:d0:92:c8:40:d0:6d:e6:0a:5f:68:8d:cd:51:f8:47:4b:
66:e6:e2:54:d0:01:4e:b9:5c:84:61:b0:ba:a2:05:70:38:8d:
0b:6d:b9:7b:68:6f:e3:31:c9:a2:7e:bc:cd:03:0a:8d:2a:56:
fb:14:38:28:f6:f9:da:74:e8:b4:80:fc:b5:2a:79:f7:12:97:
f1:5c:cd:fa:a6:5b:d6:02:21:24:32:d4:fe:83:41:0b:1f:11:
75:09:59:07:2e:c3:7d:85:27:18:ec:ca:84:6b:5f:fb:ac:2c:
5e:90:84:4c:62:17:3f:3a:d0:0c:b9:dc:94:9d:3a:80:0e:16:
29:f4:3c:2c:d5:7f:7a:06:0b:c0:d8:e1:cb:7d:85:c5:18:6c:
0a:fd:0c:80:2a:90:d3:ba:95:dd:80:30:29:e3:a4:0c:e6:24:
d3:24:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:12 2026 by rpki-client