
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier: pXQklMVp+MFtK0Fb4ZW/KfhAPibuqJtQCuIyOnLmPG8=
Subject key identifier: 9D:BA:A8:60:5E:B6:48:1F:19:C4:48:08:79:5A:B5:D1:FE:3B:9C:F2
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial: 0B68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number: 0B5A
Signing time: Wed 18 Feb 2026 18:49:00 +0000
Manifest this update: Wed 18 Feb 2026 18:48:59 +0000
Manifest next update: Wed 25 Feb 2026 18:48:59 +0000
Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: MtICBtGofRRhkYbFH+kdW5dJz05r0qnBNFm6AnieswM=)
2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Validity
Not Before: Feb 18 18:48:59 2026 GMT
Not After : Feb 25 18:48:59 2026 GMT
Subject: CN=6996099c-e0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:f0:19:37:38:49:36:25:eb:03:98:1b:c1:
26:d4:29:ed:f8:91:9a:ec:b0:29:8e:57:fd:b4:9e:
46:a0:c0:69:c8:c5:fc:69:2b:cd:63:38:d2:b7:a4:
8d:be:f3:88:7a:2e:2f:56:0a:d6:4a:6d:a7:ba:e4:
5a:01:85:3a:84:0e:ce:12:ab:5b:40:52:dc:75:8d:
ff:57:54:79:67:a1:77:e2:2c:fa:67:0c:1b:36:c0:
0d:35:54:38:06:26:c3:c8:37:e0:67:7d:f2:b2:a4:
36:86:34:af:ff:78:5c:e2:c4:f2:05:e0:dd:63:64:
a0:38:27:57:47:d2:38:9d:31:46:b0:d0:6b:cd:9e:
2c:ad:2c:e1:d7:b0:bb:b6:1d:32:db:c5:da:ef:65:
9a:2a:b4:97:50:56:0e:1d:c0:9a:b6:ce:bd:30:54:
20:85:33:f6:d6:b6:56:18:f9:84:c0:23:b6:12:c6:
b8:15:ac:ac:ae:bd:68:4f:0d:8e:36:4e:54:e3:01:
ad:8c:99:b6:0d:95:13:de:42:7d:82:ce:ef:cc:35:
28:ab:56:b3:6b:3a:c7:14:d0:97:61:11:a9:08:9c:
6d:62:e1:bd:3f:93:ed:40:f0:55:3e:33:12:94:2b:
a7:d1:1d:c9:4f:22:03:e8:7d:59:43:5b:23:3c:a0:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BA:A8:60:5E:B6:48:1F:19:C4:48:08:79:5A:B5:D1:FE:3B:9C:F2
X509v3 Authority Key Identifier:
keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:49:de:80:02:54:e6:d9:0f:c5:a6:cb:a7:04:0e:ed:e7:99:
06:41:af:41:68:5e:bd:db:96:ce:ab:89:8e:fc:b3:c0:ab:cf:
7e:6b:d8:0a:c1:b5:65:e1:35:aa:f1:96:d4:43:45:2f:c8:01:
d5:3e:e4:f1:07:94:ba:a8:a9:3f:6c:c9:c7:41:01:18:b2:d5:
8d:b6:17:3a:06:25:91:67:17:92:6a:c4:ef:d6:65:95:f4:a3:
60:a9:37:a3:42:e4:ff:32:0d:cd:32:b0:48:7d:01:b7:85:82:
cd:a3:6f:d8:bf:6b:c8:61:18:48:94:0b:58:47:3e:ab:3e:28:
b7:4d:22:ff:a4:c6:69:69:c4:98:f7:70:82:11:db:bf:e8:8c:
09:5e:56:18:72:8a:eb:2e:1b:77:60:c8:4e:a6:52:de:a0:d4:
79:bd:03:94:33:d1:41:3c:55:2f:e3:d1:66:45:6d:ca:36:05:
da:0f:7b:38:57:68:d3:2d:06:d8:26:87:4c:ce:71:43:77:fa:
7e:f9:43:8b:f9:97:ed:9c:fa:37:14:0f:e7:db:37:9a:cf:35:
3f:5a:4f:e5:20:85:3b:06:22:2c:cd:69:0e:04:43:a0:a4:91:
6f:07:40:23:17:56:2c:38:ad:d7:56:e4:f7:03:21:f8:10:ea:
c8:7f:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:46 2026 by rpki-client