
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier: y9WoMvmhWLDI2bgJQ9PX+PVW8/VQsP3qGY0uRNJ6tds=
Subject key identifier: 09:37:B1:02:13:D2:43:5E:CF:D9:82:A1:BA:AB:32:28:E4:29:12:34
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial: 174C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number: 20D8
Signing time: Wed 18 Feb 2026 16:23:36 +0000
Manifest this update: Wed 18 Feb 2026 16:23:35 +0000
Manifest next update: Wed 25 Feb 2026 16:23:35 +0000
Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: Zv8B+nEVHNoQMur9zbyELRJ90WOKtb8z+fC0awMHJIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5964 (0x174c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Validity
Not Before: Feb 18 16:23:35 2026 GMT
Not After : Feb 25 16:23:35 2026 GMT
Subject: CN=6995e787-9a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:40:a8:ab:c6:19:e6:89:6d:27:30:52:37:
7d:9d:d1:96:11:a8:04:82:af:c2:46:61:78:f1:f2:
ef:38:c7:bd:c5:c0:f6:4c:81:14:4e:e7:2a:d7:fe:
81:12:9b:9a:56:a3:e9:dc:88:53:90:43:d2:e5:73:
0a:e9:9a:4b:7c:03:90:03:5c:e8:eb:51:fd:a2:c6:
34:b5:50:65:d5:5b:7c:87:68:c2:10:25:f0:24:1d:
3d:af:ca:e2:28:79:98:fa:7c:e8:64:25:b2:2f:bf:
11:5e:d9:c3:87:45:d3:8f:51:09:d9:de:3e:ec:10:
5f:df:f3:1a:1a:9e:ae:39:01:a2:9f:ce:b4:27:3c:
00:72:6d:28:f0:05:9d:0b:78:d5:7f:d0:90:7c:7c:
f3:84:30:ff:9a:c7:fe:1c:b9:b2:1a:d6:e1:5a:0c:
a4:97:7c:ef:3b:b1:bf:5e:15:86:3f:60:89:27:c3:
c5:c6:22:43:2a:56:d5:48:de:1b:e9:8a:7a:a3:61:
21:d5:9b:37:ec:49:21:26:04:92:d8:b7:d5:51:05:
6c:e6:29:0a:cf:61:01:01:c6:bb:7f:25:49:2c:b2:
50:87:e2:34:5f:7d:dd:77:ec:fa:df:4b:c9:11:85:
9e:eb:48:3b:b6:37:60:20:c3:67:15:01:6f:ea:7a:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:B1:02:13:D2:43:5E:CF:D9:82:A1:BA:AB:32:28:E4:29:12:34
X509v3 Authority Key Identifier:
keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b9:cd:5b:ec:30:46:16:41:68:f4:c4:17:18:93:1a:0f:fe:
89:d2:f3:54:36:b4:69:3d:05:43:43:20:50:fe:20:a7:2e:4a:
b9:9c:7d:90:a0:e9:b8:41:96:71:11:b5:d6:8f:96:a0:e4:27:
03:28:1b:36:e7:08:56:3a:8e:8d:a6:41:1e:11:b5:32:da:20:
c1:5d:2e:e0:92:e8:3b:d7:38:8a:08:ed:d6:0c:74:ad:20:db:
8c:c3:ee:e3:d2:4a:fb:c0:58:aa:a7:4f:77:93:b0:c4:6d:5d:
18:4f:53:6a:23:51:4e:9c:eb:b8:7e:f7:cc:e1:57:95:53:bf:
af:d3:f8:d6:64:e3:b9:48:f0:c0:ce:cb:24:24:9d:98:f6:2c:
e2:97:f5:60:ab:35:a3:1b:0d:f6:46:a7:49:ae:94:e4:77:98:
79:30:32:8d:bd:bf:e9:99:e4:1c:fb:b2:13:31:dc:09:be:7d:
29:ea:d9:3e:d5:af:df:31:81:67:9b:c5:e5:91:d9:11:b2:2c:
04:d7:28:32:af:de:86:93:b7:98:9d:65:46:d5:d8:67:a5:5f:
9b:ab:f3:d7:ad:62:8c:17:9b:1b:a8:dd:e7:a9:e8:7a:74:0b:
65:08:02:72:94:e0:85:9d:79:49:fe:ee:4f:42:2e:57:1c:b8:
17:1c:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:15 2026 by rpki-client