
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json)
Hash identifier: LHZahtWVfKm627c6cFzYEWQNjOEh7/DFtb44fVYotEk=
Subject key identifier: 3B:09:C5:14:64:F5:2A:52:70:10:DE:DB:07:2D:B3:95:AD:EF:E2:6F
Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Certificate serial: 0A2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
Manifest number: 0A23
Signing time: Wed 18 Feb 2026 19:19:30 +0000
Manifest this update: Wed 18 Feb 2026 19:19:29 +0000
Manifest next update: Wed 25 Feb 2026 19:19:29 +0000
Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: iCP1hor9naB0ZSP9mcCvZevUfKo7t5hOA+65GLgU7qU=)
2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: BtxRntrFd2gslQewNiqZhW9mWCF+vgLPC26me/9r2bU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Validity
Not Before: Feb 18 19:19:29 2026 GMT
Not After : Feb 25 19:19:29 2026 GMT
Subject: CN=699610c2-b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:1c:35:32:2c:9f:8f:9a:82:1a:b8:17:e8:
79:70:c7:e4:b5:56:14:02:c1:4a:7d:ed:9e:00:ed:
ab:dd:7c:91:cb:40:f6:60:82:ad:15:f4:fd:95:4f:
e8:5f:16:21:dd:21:04:5d:53:3f:d6:3e:39:1f:5c:
4e:57:78:28:da:0f:9a:c4:84:8a:b0:f8:84:fa:cc:
93:5d:ff:0d:d8:ba:c7:c9:c2:44:4d:22:f3:42:9a:
6e:cb:86:dc:32:cb:81:70:f6:6e:0c:ba:86:83:6d:
c7:cf:9a:2e:8a:c6:ac:11:2e:cc:76:7a:17:49:19:
e9:e1:f2:3b:83:d0:49:92:14:71:73:d3:ce:21:f5:
b9:82:89:9f:fb:81:76:63:e7:3b:b7:77:8d:c6:5f:
c2:10:3f:5a:84:0d:54:f7:06:79:d8:b8:96:c7:78:
28:3c:9a:f1:17:7c:7a:4e:87:5a:bc:5b:6b:7a:b9:
0b:d7:0c:23:15:1f:11:df:70:65:fd:29:ff:98:41:
da:be:0f:1f:78:0e:5b:c7:65:cd:9c:ce:1f:4c:12:
ec:7c:88:34:87:cc:b4:4b:23:bb:a0:89:fa:7f:bd:
ad:34:da:d3:78:a3:e2:2e:8f:93:8c:f0:11:6c:c2:
6f:fb:5f:a9:d2:8f:b1:de:1a:e4:0e:f5:e3:f5:b8:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:C5:14:64:F5:2A:52:70:10:DE:DB:07:2D:B3:95:AD:EF:E2:6F
X509v3 Authority Key Identifier:
keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:92:00:dc:27:b8:8e:0a:63:73:8e:03:7d:d0:68:de:00:
cb:b4:90:16:29:a8:ea:90:25:ea:0b:d9:ab:8a:bf:f2:ef:c4:
48:76:90:ca:a0:6c:ab:8a:10:ea:36:99:e9:06:ac:f9:6c:b1:
3a:fc:7c:01:4f:20:79:39:86:2e:d4:2a:d6:e9:e4:b1:38:46:
d0:27:a5:78:a2:59:a7:1f:25:f5:f2:ee:6e:46:db:bd:c4:9c:
fe:fc:c8:ed:f8:ab:aa:27:d3:02:1f:95:df:3b:4c:dc:83:f1:
60:a7:04:09:bc:d2:cc:c4:62:2a:6f:c2:3f:da:7f:67:36:da:
4f:59:e1:35:14:66:af:1d:e7:19:ae:bf:24:f5:58:7a:4d:ab:
aa:80:b9:3e:f6:69:ef:17:cd:dd:64:fe:b8:72:5f:1b:25:03:
58:c6:41:47:ed:a2:6e:5b:8e:39:c3:02:0e:8c:26:dc:b0:da:
cf:d6:90:8b:74:61:d6:99:16:77:29:4a:9a:ae:16:34:f9:ef:
25:51:0c:6f:99:6d:22:b2:3e:0b:76:44:e5:a2:77:8b:dd:41:
8d:66:2d:32:eb:c9:b9:fd:f1:48:1d:cb:0c:56:26:8e:07:4f:
8f:e9:cc:1a:2b:40:ef:f8:05:f2:07:71:c2:14:47:1d:c2:d1:
f1:ab:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:37 2026 by rpki-client