
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json)
Hash identifier: bJABm876dybbA3O59IO0ybXUwiI3DWwhgYYwmEL2stw=
Subject key identifier: 74:2D:32:71:CF:D2:65:F3:B7:3C:1B:86:7A:BD:31:3A:DF:E5:97:FE
Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Certificate serial: 04F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
Manifest number: 04EB
Signing time: Wed 18 Feb 2026 23:00:44 +0000
Manifest this update: Wed 18 Feb 2026 23:00:43 +0000
Manifest next update: Wed 25 Feb 2026 23:00:43 +0000
Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: 6o07NjqVcoQWHXHJ40dud+Nxg7a0o043TElfPbzJ2Hs=)
2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: h/s9RyXLHAI1sqd9uwegBKrHWXm8UIc8RPznkO0q/SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Validity
Not Before: Feb 18 23:00:43 2026 GMT
Not After : Feb 25 23:00:43 2026 GMT
Subject: CN=6996449b-a6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:ab:48:0a:e5:d8:59:f3:d5:08:d0:69:e3:
f3:a3:07:a1:da:c8:e8:56:78:ac:31:87:f2:e6:80:
05:d5:41:ee:a8:4c:04:0e:5a:1b:f9:25:4e:1a:3e:
62:51:41:84:96:2b:fc:26:32:b4:ba:38:41:02:3d:
b0:3d:99:61:f1:07:97:ca:cf:b7:bf:81:17:5f:45:
43:f0:84:83:27:41:10:4e:3a:cb:d1:91:02:0a:8b:
b4:80:a4:ea:21:ef:34:79:3f:5b:45:81:2e:59:a9:
d4:da:ca:ba:68:e3:29:8f:69:09:42:95:de:1d:a2:
fd:3d:ba:07:06:2e:bf:cb:7b:41:d6:4a:6c:ea:f3:
ee:4f:72:79:02:d2:d4:a0:aa:1a:ec:06:38:03:80:
d4:97:46:87:77:5e:f1:e0:6e:53:29:84:5e:03:37:
62:e9:b0:2d:84:02:fa:3b:8a:1e:1e:35:84:80:a1:
70:81:22:93:84:1b:39:8d:84:7a:1f:69:26:4c:9b:
d5:3b:e6:cd:09:38:40:11:1c:cd:44:12:50:36:8e:
01:0f:19:63:27:67:4a:96:e1:46:eb:f9:02:db:5c:
15:8c:16:7d:cd:93:af:ee:f1:6b:22:01:ff:04:6c:
91:ee:63:55:74:2f:9a:4e:5a:25:39:b7:c0:8e:75:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2D:32:71:CF:D2:65:F3:B7:3C:1B:86:7A:BD:31:3A:DF:E5:97:FE
X509v3 Authority Key Identifier:
keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:6a:9c:aa:88:b7:32:a1:d6:56:25:3a:eb:16:c9:c4:30:
41:4d:ca:c5:31:e8:4e:b3:10:3d:47:cd:59:a0:e2:7d:fc:ac:
c3:01:09:62:89:5a:f2:0e:47:59:33:79:47:28:4f:23:a3:ad:
d7:51:ca:bb:74:17:42:b5:1c:05:fc:6d:50:a2:34:ff:f8:52:
0b:e5:82:20:94:e0:83:44:c6:f0:fa:a9:b7:f1:72:f6:56:ab:
c0:da:e4:16:3f:49:e7:80:bd:b3:5a:06:6c:0c:1f:bf:bf:4e:
f4:60:0a:f1:05:05:d0:b1:a2:a3:02:a7:de:85:19:13:74:6c:
e6:d9:21:ae:a6:ac:88:c6:1a:c7:7f:35:24:2c:a2:f9:6c:12:
c1:5b:1f:70:5a:d7:e7:41:1c:7b:dc:da:2b:fa:dd:24:62:f9:
73:8d:63:5d:2f:ba:c6:9a:ab:9a:00:ee:a5:23:45:bd:0e:ff:
9f:5c:ef:b5:f0:79:02:9c:57:ed:4a:df:4a:67:72:c6:a9:9a:
37:bc:eb:b8:ea:a8:cc:6a:d0:35:53:b4:27:3c:26:2e:9e:14:
f9:8d:ae:4a:91:35:a3:7d:bd:96:3d:af:ca:02:fa:2a:ac:14:
e3:d1:09:fa:c5:25:b1:67:9c:d1:ff:23:25:6c:6b:d7:b8:6d:
a7:31:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:50 2026 by rpki-client