
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier: CrHEs5M7PVJXZ6l3DltLn5EkUuPYypGL9S0pWZC18BY=
Subject key identifier: CB:BC:67:F4:59:85:C0:6E:AA:51:A4:C9:DA:16:11:E8:F5:6E:66:3D
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial: 3553
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number: 3533
Signing time: Wed 18 Feb 2026 14:57:13 +0000
Manifest this update: Wed 18 Feb 2026 14:57:12 +0000
Manifest next update: Wed 25 Feb 2026 14:57:12 +0000
Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: lrD8LYgOGRoQbYoSiI+0Ngaz456k+rS2aNLtKbnfXW4=)
2: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: uAMH22czrWhCVXR1Yh4Gb924YIN0PWuUVG5CCQ0T0QI=)
3: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: LB+KlOsPvF4imD5dH4Y/7ETYXLpR1TopuFn08dtZ6UQ=)
4: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: kxrZR2YgejKdZw2KSRqTPBaBWQsbx9P5F4vQ2qVIgKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13651 (0x3553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Validity
Not Before: Feb 18 14:57:12 2026 GMT
Not After : Feb 25 14:57:12 2026 GMT
Subject: CN=6995d349-9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:d2:22:9c:51:80:47:0c:8c:d7:b0:24:9d:
1d:f4:a3:75:8c:13:f4:8c:8f:0c:53:c8:cb:9c:7a:
ca:19:9e:41:ad:6e:b8:2f:6e:e3:09:75:c0:0a:72:
3c:bd:46:95:b0:0c:c4:48:68:5d:bd:aa:20:9d:30:
6c:8a:d6:4e:de:46:eb:89:8a:ac:72:63:d1:86:fe:
82:34:66:ad:d8:fe:d3:ba:02:71:88:75:be:04:35:
17:fa:b7:93:bf:f0:11:67:a6:ef:75:51:97:2e:8d:
3a:06:93:72:37:4f:b1:21:86:e0:f7:04:ab:c4:26:
ba:c0:e8:e1:19:5f:5e:56:78:56:7b:f9:52:4c:b8:
2b:ad:97:12:8f:e4:d2:5c:d0:a9:05:e9:93:d3:9d:
02:f7:cd:a5:c6:41:0a:0a:a1:b5:95:1f:3f:4a:99:
d5:ec:c2:46:de:57:c8:ff:d6:e6:42:29:91:7a:7e:
73:6c:f5:ff:32:da:82:e7:b7:6f:da:8a:9e:09:02:
3d:f8:f6:ed:b7:20:21:cd:b0:74:1a:d7:90:0a:6c:
45:73:7f:93:f3:b5:6a:e0:27:ed:d1:3e:9f:01:d4:
a7:76:4e:79:8b:75:e2:d3:48:dd:9b:07:92:69:d6:
81:28:8c:55:80:31:af:c2:39:30:8b:d5:02:70:69:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:67:F4:59:85:C0:6E:AA:51:A4:C9:DA:16:11:E8:F5:6E:66:3D
X509v3 Authority Key Identifier:
keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9c:64:48:1f:c2:7f:28:25:d1:64:5d:d0:53:c0:da:4b:76:
a0:1e:ff:5c:ce:76:30:01:dc:97:ca:08:1d:da:88:89:4b:18:
d6:94:79:00:c7:03:c5:4f:9d:a7:69:eb:a0:d9:54:9b:86:3b:
e9:7f:ab:07:04:7d:7d:80:5a:d5:6e:f4:0c:65:ac:88:41:cb:
aa:a7:77:e8:65:f4:9a:18:53:08:ce:c1:d5:8e:5e:da:29:f3:
51:5c:67:f4:20:de:3a:54:7c:3a:49:e4:ff:06:39:68:0f:f6:
0c:30:0e:f6:f6:4c:5e:20:d0:d8:e9:2f:f1:76:01:08:46:99:
97:29:f2:34:e8:fc:cf:a2:bd:5d:27:90:66:70:c4:e7:86:4b:
a0:ec:30:3b:70:28:6a:75:a3:da:73:49:9b:19:3a:1c:4b:be:
61:a6:4d:59:ef:7a:5b:11:fe:1e:3c:63:1b:d3:30:16:ef:98:
c2:11:1b:e0:98:3f:57:21:bc:f7:ec:66:6a:d9:7f:05:4d:d4:
b6:88:e0:6f:a9:d0:a9:b6:aa:aa:f2:bd:01:08:28:10:19:95:
01:42:8d:ae:7a:8e:02:f5:f6:43:2a:50:58:ec:c8:34:5b:13:
73:a0:16:c0:1c:e4:66:6e:2f:9e:a0:5d:7b:0e:db:85:cd:16:
bc:b4:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:15 2026 by rpki-client