
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
File: oRR-hHvP7urdnompeo2fM2ecp-I.mft (raw, json)
Hash identifier: wTUq3lqj278DPYQYGzE0IwD26HqW0LMPC35nUPVtaUc=
Subject key identifier: D0:47:56:D3:FD:27:11:E7:43:ED:74:18:30:7C:17:6D:8E:C5:28:28
Authority key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Certificate issuer: /CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
Manifest number: F8
Signing time: Thu 19 Feb 2026 04:39:55 +0000
Manifest this update: Thu 19 Feb 2026 04:39:55 +0000
Manifest next update: Thu 26 Feb 2026 04:39:55 +0000
Files and hashes: 1: oRR-hHvP7urdnompeo2fM2ecp-I.crl (hash: qL6GqDDqU/Sry2E1si3LArAmPx2BHqXBzvhsKaBLkwM=)
2: 52DF0E62B2FA11EFA36E0387C4F9AE02.roa (hash: zOW380YmpQpMtSyWb7ghqrZ9YCinfgNDwAX0rgUwhPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAD80, serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Validity
Not Before: Feb 19 04:39:55 2026 GMT
Not After : Feb 26 04:39:55 2026 GMT
Subject: CN=6996941b-027c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:39:06:cf:1d:32:3a:05:78:48:1f:b2:d3:df:
6d:c1:ff:6c:b9:df:7b:21:1e:b2:c5:49:b8:a5:a2:
08:8d:cc:85:cd:83:7d:cd:0d:05:61:33:94:2b:63:
e7:69:30:8a:6b:da:2c:91:03:26:7e:92:5f:f8:54:
f1:0a:ee:c4:67:93:b7:87:44:1e:38:34:74:ef:5f:
3f:50:d2:ab:cf:6a:a2:f8:94:9b:04:ce:3a:75:07:
4c:97:5b:a3:8e:9e:08:f9:db:f3:e1:b1:59:e0:67:
61:61:f1:df:37:37:1a:de:4b:bb:12:d9:9c:cf:3b:
12:c5:f5:45:4f:71:ed:38:05:a7:03:b8:d3:af:2c:
f2:f0:82:80:ff:6a:19:e3:73:3a:d4:7f:5f:b9:93:
74:c2:1b:ed:c1:93:2a:5a:0b:81:73:f0:38:ec:eb:
39:ff:3a:ac:c3:bd:1f:02:ee:19:2d:4e:19:4b:f6:
2a:bd:70:90:42:6d:42:bd:d0:05:35:98:a3:79:3d:
0e:f3:2e:13:a1:2d:6d:15:aa:09:50:23:dc:82:47:
93:e5:ee:a9:3e:3d:c4:19:5f:16:29:da:ff:bd:e6:
52:60:44:50:16:98:19:88:8b:45:a6:6d:fa:12:8a:
90:73:5b:c4:c0:bf:2a:72:80:93:14:68:ac:38:32:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:56:D3:FD:27:11:E7:43:ED:74:18:30:7C:17:6D:8E:C5:28:28
X509v3 Authority Key Identifier:
keyid:A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:22:99:66:78:e2:34:d4:b0:0c:3b:07:d7:7b:8b:a1:bd:23:
53:c0:b4:e5:e0:ee:c6:1d:4a:3e:cd:f3:eb:df:05:f0:1e:2e:
6e:09:27:ae:f7:e8:a9:40:52:c5:4c:50:9a:f0:68:be:c6:31:
2e:86:ca:83:65:28:ab:ac:31:f0:aa:41:9d:09:1a:a9:5e:a7:
7f:41:a3:fe:3a:76:f5:e8:63:df:e7:08:ae:7f:9f:86:0e:c0:
1a:cc:5b:4b:3f:19:5d:a6:83:bc:4e:38:5b:b2:a2:87:4c:5a:
1f:05:a6:be:0a:29:26:6c:c2:89:2a:2d:04:8f:34:c6:74:c5:
9b:32:e5:e3:bc:da:54:64:ea:98:3b:ac:55:67:87:48:78:e1:
42:92:8b:1d:25:91:fc:7c:5f:2c:64:56:a7:23:ae:5a:d7:7b:
de:b8:6e:5f:8b:2d:a2:3a:b9:67:1c:57:ad:52:0b:c2:fb:bb:
98:69:c5:d0:38:4e:9a:9b:11:a4:af:0f:c5:f0:73:5c:78:4a:
50:d8:67:d2:c0:1f:de:59:e1:97:68:3c:d9:b0:26:b5:da:ee:
2d:0d:9a:47:14:d3:3d:af:0d:2d:99:85:d3:58:dc:82:a4:86:
32:7c:a6:99:99:5c:30:42:5f:90:1a:f6:6b:dc:c9:6b:e7:66:
85:b9:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:53 2026 by rpki-client