
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier: ZUb7kgj1RiSxp1yDF+tcBV2+fgBcTAdM7TCciX8OE54=
Subject key identifier: BF:ED:2D:8B:5A:FA:AB:8C:60:E7:2F:1A:2F:17:F5:B7:83:12:A4:D1
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0DC9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number: 0DC1
Signing time: Wed 18 Feb 2026 17:35:31 +0000
Manifest this update: Wed 18 Feb 2026 17:35:31 +0000
Manifest next update: Wed 25 Feb 2026 17:35:31 +0000
Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: vkZtQdFB4R+ALbyvljcHJf8h9Ei0ILTwffGBLa48Sps=)
2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: C8YUnzVpdG1ic9MCuW7celmXkhXkYeCvagfWnZShYbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: Feb 18 17:35:31 2026 GMT
Not After : Feb 25 17:35:31 2026 GMT
Subject: CN=6995f863-a25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:82:78:b7:d8:02:1b:35:18:05:81:ec:a7:
a7:44:ef:aa:19:a1:1c:e2:16:68:ca:fa:df:e1:58:
eb:1d:11:b0:87:84:17:b8:01:0e:e2:58:fb:fe:30:
9d:f0:18:4b:93:b6:74:33:9d:b5:85:e3:e2:8c:b8:
c4:17:b6:d5:f6:64:c4:1c:50:06:53:e2:c2:7b:26:
2e:ac:47:ed:2a:6e:cf:08:1a:1b:f6:50:32:3d:33:
2c:07:81:54:88:15:64:4a:b1:74:ba:8f:c5:b5:ec:
ca:7f:64:82:f3:e2:36:0e:f7:75:c7:75:e7:99:f6:
46:ac:54:a0:69:24:50:34:5f:58:5d:4e:31:b9:e7:
1e:15:50:59:f7:75:78:33:5b:22:62:e6:05:2a:b3:
08:c3:c8:5b:fb:20:1c:ba:b8:20:58:da:3d:8d:ce:
58:5c:c3:26:2a:f0:4e:7d:59:ab:c3:d2:21:82:7f:
b3:72:15:22:0e:22:18:12:e2:b7:6e:41:cc:98:93:
3c:46:f0:6b:35:77:dc:22:ba:3a:16:62:2e:df:23:
83:e4:22:d6:50:f7:fc:54:10:64:6c:22:e4:e4:d5:
4a:d8:a2:63:ad:78:29:0a:47:f5:33:2b:48:85:09:
8f:6d:78:1c:ea:b3:59:2c:a2:87:4b:b6:30:7a:7f:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:2D:8B:5A:FA:AB:8C:60:E7:2F:1A:2F:17:F5:B7:83:12:A4:D1
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:67:40:c1:af:eb:77:51:77:e4:2c:66:ec:9a:67:c0:ef:64:
3f:e9:58:9c:2b:b9:64:ee:7d:e9:73:36:c6:40:22:07:e7:04:
dd:dc:a3:e6:37:59:bd:7b:01:18:2b:af:94:cb:a2:07:e9:ec:
8e:57:f9:a7:b3:77:f6:e3:1b:80:e3:ce:d4:9a:31:d3:c4:5e:
c7:97:fe:a4:b6:dd:c7:bd:1d:e1:e8:57:8d:8a:0e:bd:4a:04:
5d:de:e9:01:9a:c6:cf:1b:bc:21:76:e0:f1:59:36:67:9a:13:
67:c4:99:d1:e1:6c:a7:9d:2d:5e:57:36:78:3f:27:8e:fa:3e:
1a:f3:69:3a:c0:20:49:25:88:68:e8:df:91:74:92:2a:9e:f9:
10:8e:d1:6a:3f:c7:07:3c:b2:db:1b:86:20:dd:d3:51:79:af:
f4:9a:17:3f:02:a7:bb:09:23:cd:f3:4a:8d:da:cb:a5:5f:9d:
83:5b:4d:37:d5:78:b2:13:d2:fb:96:86:d9:d6:dd:8d:6b:32:
15:c3:a8:0f:6d:2d:4b:ec:4f:cc:77:72:10:d8:f8:aa:db:2a:
4f:bc:a1:b8:83:03:a8:c4:46:83:b5:6d:a6:84:a9:ad:b1:5e:
89:36:90:b9:21:07:14:b2:5c:a9:6b:36:4c:27:c7:ec:0e:40:
7f:7f:f6:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0
NjIyRkQ2MjcwHhcNMjYwMjE4MTczNTMxWhcNMjYwMjI1MTczNTMxWjAYMRYwFAYD
VQQDDA02OTk1Zjg2My1hMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDOCeLfYAhs1GAWB7KenRO+qGaEc4hZoyvrf4VjrHRGwh4QXuAEO4lj7/jCd
8BhLk7Z0M521hePijLjEF7bV9mTEHFAGU+LCeyYurEftKm7PCBob9lAyPTMsB4FU
iBVkSrF0uo/FtezKf2SC8+I2Dvd1x3XnmfZGrFSgaSRQNF9YXU4xueceFVBZ93V4
M1siYuYFKrMIw8hb+yAcurggWNo9jc5YXMMmKvBOfVmrw9Ihgn+zchUiDiIYEuK3
bkHMmJM8RvBrNXfcIro6FmIu3yOD5CLWUPf8VBBkbCLk5NVK2KJjrXgpCkf1MytI
hQmPbXgc6rNZLKKHS7Ywen8iZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/tLYta
+quMYOcvGi8X9beDEqTRMB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1
MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0JDNC8yNjFEMjgzMEQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xi
OEZvTFVqQ3hOeDFHSXYxaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhZ0DBr+t3UXfkLGbsmmfA72Q/6VicK7lk7n3pczbGQCIH5wTd3KPm
N1m9ewEYK6+Uy6IH6eyOV/mns3f24xuA487UmjHTxF7Hl/6ktt3HvR3h6FeNig69
SgRd3ukBmsbPG7whduDxWTZnmhNnxJnR4WynnS1eVzZ4PyeO+j4a82k6wCBJJYho
6N+RdJIqnvkQjtFqP8cHPLLbG4Yg3dNRea/0mhc/Aqe7CSPN80qN2sulX52DW003
1XiyE9L7lobZ1t2NazIVw6gPbS1L7E/Md3IQ2Piq2ypPvKG4gwOoxEaDtW2mhKmt
sV6JNpC5IQcUslypazZMJ8fsDkB/f/ZF
-----END CERTIFICATE-----
Generated at Fri Feb 20 03:56:27 2026 by rpki-client