
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json)
Hash identifier: 6ZSts77nuOZph03bYwCv207dWYQdFF1j8/feSK6XN2s=
Subject key identifier: 11:41:FA:E8:BA:00:4F:93:56:51:30:72:61:3B:4D:EC:F1:BC:71:B9
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Certificate issuer: /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
Manifest number: 23
Signing time: Thu 19 Feb 2026 07:04:29 +0000
Manifest this update: Thu 19 Feb 2026 07:04:29 +0000
Manifest next update: Thu 26 Feb 2026 07:04:29 +0000
Files and hashes: 1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: Sa+L4Ocn2DCLjiyBWHXkD/4B3cvs5yMON4aO+CHdrlc=)
2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: N8C+RbGZ4TxSn2UCb5i7gkeLR+IHJ44RuRig3WO+cbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Validity
Not Before: Feb 19 07:04:29 2026 GMT
Not After : Feb 26 07:04:29 2026 GMT
Subject: CN=6996b5fd-5be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:84:5e:df:9e:f0:68:1f:50:6a:70:15:82:58:
ab:7f:8a:68:1a:be:57:07:fd:90:a1:74:94:28:39:
8c:25:c5:fc:b8:73:a1:bd:3d:42:0d:a5:80:6d:0b:
01:b9:5f:c0:d5:65:b1:16:92:8c:c4:32:3c:cd:4d:
e7:88:c3:c9:7d:3d:6d:22:80:68:05:27:76:9e:cd:
81:82:88:c1:0b:ba:7a:af:fc:87:1f:ed:57:6e:a5:
27:1c:59:2b:24:04:ea:d0:70:24:aa:f0:d2:ca:f1:
2a:cd:12:f1:49:de:e4:39:35:bc:4e:97:38:32:de:
08:4b:36:df:fe:f7:6a:39:ee:72:9d:76:f5:e0:86:
ee:84:ad:ba:1e:7f:a5:d7:13:73:d5:57:2d:54:4d:
64:cd:d8:8a:e4:e8:6c:99:16:6a:e6:49:34:1e:94:
6d:67:26:8d:a7:48:26:46:c1:50:74:37:02:7a:82:
24:ae:80:36:48:6b:56:2a:de:79:a9:53:93:69:22:
b2:54:2b:59:6d:c5:1c:bf:24:ad:54:02:3b:6b:b8:
26:95:f7:a3:89:d2:06:f6:1a:9e:c6:6c:15:df:a3:
43:64:32:c6:33:a7:7e:12:02:49:15:e8:b1:ea:cf:
59:6c:df:e3:f1:23:58:40:66:15:aa:a4:69:da:fc:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:FA:E8:BA:00:4F:93:56:51:30:72:61:3B:4D:EC:F1:BC:71:B9
X509v3 Authority Key Identifier:
keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fa:9a:80:d9:35:2f:df:7d:cb:0e:c4:78:8b:6e:01:ff:4c:
3f:7f:a6:0c:ee:e6:57:03:e3:bf:c4:3e:96:04:52:45:66:eb:
da:3f:13:1c:c1:f9:1b:cd:f0:99:d9:dd:c2:6f:2c:6f:5c:47:
f2:1e:f9:b0:d8:d6:c2:a9:92:86:55:ff:b3:85:c8:52:f8:49:
8e:32:33:d5:8d:4d:1e:78:9c:e4:48:5c:79:30:76:95:28:d9:
a9:be:ee:61:ce:6d:c0:3c:e6:2c:46:cd:e5:23:1e:65:25:2c:
39:62:62:91:79:41:c7:3c:fa:7e:c1:72:a0:83:e4:61:24:0c:
93:c3:6d:3a:87:10:25:3e:f3:de:15:3d:63:d8:3f:86:a7:d2:
39:fe:b6:d8:46:37:dd:23:ff:6a:4d:3f:43:ea:65:61:8a:3c:
4f:7a:d7:52:3b:11:96:20:db:aa:d0:62:07:bb:e2:f6:6b:ea:
0b:06:31:78:49:e9:d6:16:01:ca:2f:08:6c:03:59:26:3d:00:
6e:1d:88:4b:0f:88:54:ef:1d:ca:21:3a:ec:6e:2b:5a:cb:4d:
06:4a:45:50:40:86:54:9f:82:12:9c:ff:3d:aa:19:59:34:9f:
d9:9a:c7:c7:e2:b4:1b:ed:12:2d:6f:c9:37:f8:4f:b1:26:aa:
47:16:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:34 2026 by rpki-client