
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft
File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json)
Hash identifier: ilrnxmvz5BIXR9lzS4R94p9xgNhMXDnGFEJUU+hs9aE=
Subject key identifier: AD:B1:6A:B9:C0:04:5D:48:59:4D:BC:5E:98:83:17:A5:4B:26:D4:46
Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76
Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76
Certificate serial: 0E38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft
Manifest number: 0DFB
Signing time: Wed 18 Feb 2026 17:35:29 +0000
Manifest this update: Wed 18 Feb 2026 17:35:28 +0000
Manifest next update: Wed 25 Feb 2026 17:35:28 +0000
Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: loUPqvouh82JaL2gkzJdjMqm8CRj15Z8/arhJkxk4Gk=)
2: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: vmjmVmXjdkD0vxVvLQigcrFyWXDcETievw8r2QIVv8s=)
3: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (hash: Yzm2sxy6Wc8GSrCkWvHieh5N9DgpO5D+oRUtJYq3agI=)
4: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: x4jvJWhYxAH8Rb30vVEH6W/5A0BXB7kNOeLOjXcy3mo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76
Validity
Not Before: Feb 18 17:35:28 2026 GMT
Not After : Feb 25 17:35:28 2026 GMT
Subject: CN=6995f861-70c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:18:0d:a4:31:73:1d:f0:2d:b7:48:cc:d1:
2f:fb:e3:10:69:cc:a0:64:f0:ba:15:63:43:6b:df:
fd:4b:49:50:d5:4c:7e:35:e7:b4:ff:65:73:49:7c:
3e:d4:1c:8a:b0:80:30:79:2e:94:e5:32:db:d4:d2:
c0:76:71:36:35:a5:8c:12:eb:04:d2:97:b2:24:23:
ef:fd:22:d7:ee:5a:9b:0f:e7:e5:42:f1:83:23:b5:
61:27:d8:e5:8a:7d:7a:d9:78:50:55:39:fb:55:64:
19:11:36:21:24:61:33:b5:f1:1f:b9:38:0d:b9:4a:
d7:5d:80:8c:5d:56:b3:ef:dc:2f:7b:09:a1:78:9e:
88:51:4f:14:82:e7:f2:24:61:dd:8a:b3:be:dc:00:
1f:ed:96:fb:50:53:fb:78:7e:03:6f:4f:79:eb:c1:
ae:2a:ce:a1:88:e3:95:55:7a:3a:17:ce:33:23:7c:
65:c6:30:1c:9f:46:f4:77:3f:c1:1f:75:97:25:48:
b2:57:44:49:60:6f:39:42:35:c7:79:ae:96:fc:5a:
a4:ab:f3:6e:e1:91:41:d3:0c:08:b7:ba:89:18:8b:
27:28:c3:8a:90:1b:00:f7:79:3d:89:5c:a9:58:54:
25:da:04:6d:bd:f7:03:72:61:3d:ce:72:d2:9e:19:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:6A:B9:C0:04:5D:48:59:4D:BC:5E:98:83:17:A5:4B:26:D4:46
X509v3 Authority Key Identifier:
keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:b4:cc:4c:ce:39:65:89:b2:67:7d:0f:75:c8:c2:04:a9:
cc:cb:0a:84:09:5f:e7:1d:ee:fb:6c:22:4e:e2:01:25:63:d6:
6c:41:36:18:55:da:94:5a:cc:33:43:71:65:2c:bf:dc:ae:c7:
9b:fd:7f:a0:cf:b2:f2:60:16:ab:72:46:3c:35:5b:b0:41:2a:
95:71:a8:c6:75:e0:98:89:61:39:dc:12:9e:58:1a:84:43:9f:
2c:fe:87:1e:8e:a4:ae:ab:ff:13:99:0a:ca:6e:40:f0:7a:2e:
f3:1a:a0:90:38:b7:ca:55:9d:30:99:8a:fb:8c:05:a7:86:86:
bf:62:d0:b0:53:97:0b:7e:c2:4b:84:d9:1d:1a:40:16:38:f1:
e3:b9:74:4b:6c:19:02:90:bf:15:01:f5:2c:f8:24:d8:ba:86:
53:d5:91:ed:35:e7:6a:33:50:a6:ec:52:29:92:e5:b8:f4:e5:
bb:10:39:98:5c:35:3e:67:8d:8f:bd:f0:71:2f:c6:6a:0f:6e:
53:62:24:02:1f:ac:ff:9f:34:2c:c8:6a:c1:13:1e:70:5c:19:
36:4e:d7:00:5e:ce:02:97:9d:4d:62:da:d9:f8:e5:11:64:e8:
70:31:10:f9:dc:25:e4:db:66:31:89:fd:02:58:1c:78:d9:d6:
ea:f0:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:57 2026 by rpki-client