
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: 5xohniCRHPvWBHx+0aVfENJ9iI3YVbmnmiCTG0NsTo8=
Subject key identifier: 41:71:B1:A2:0A:45:3D:A7:4A:A5:3C:78:AD:58:11:9B:42:4B:A3:4F
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: 9C
Signing time: Thu 19 Feb 2026 05:44:50 +0000
Manifest this update: Thu 19 Feb 2026 05:44:49 +0000
Manifest next update: Thu 26 Feb 2026 05:44:49 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: Nj9D5Vtzz0KBGy5e1oc4Ra6xBtLIaQ1NhhRt6GO2d9s=)
2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=)
3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: Feb 19 05:44:49 2026 GMT
Not After : Feb 26 05:44:49 2026 GMT
Subject: CN=6996a352-6a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:a3:03:26:f3:6d:5a:1e:de:e6:3b:79:d9:
07:a2:43:ca:c0:a0:ce:78:ea:eb:26:b9:c2:f2:1f:
f3:df:0c:89:d1:73:43:05:e1:f6:31:f4:7f:67:0e:
e2:b2:7c:bd:c4:43:bb:58:be:52:41:0f:50:38:5a:
a1:15:5a:60:95:75:5e:19:d3:b5:d1:2e:5e:65:87:
1b:94:cd:58:6b:e2:fc:34:18:81:69:9e:ce:e0:c0:
64:13:fd:d2:35:ec:24:75:6a:b4:10:6a:90:d9:63:
53:d3:5b:36:97:1c:50:1f:2d:fb:d6:60:4a:c4:c6:
e5:f7:5e:9c:08:bd:27:ce:be:16:b9:eb:0c:4a:3b:
ba:0f:16:ac:47:4c:aa:33:ad:7b:34:13:e9:50:3b:
6f:86:a8:e9:f5:9f:92:32:7e:d5:b7:8f:df:29:5e:
7c:d5:24:d4:f0:16:01:44:0a:38:16:5e:5e:2f:59:
42:a4:65:fe:fe:cf:a3:55:e9:48:3c:1c:ce:33:14:
b9:3a:02:7d:0a:fb:1e:f0:91:78:96:23:dc:24:7f:
19:1f:3a:31:de:1d:31:d0:30:b2:cc:84:94:a6:1c:
e4:01:24:32:cb:93:bd:fc:75:0b:d6:cf:9b:a0:25:
76:e6:38:05:9d:e4:39:a3:75:d2:e3:c0:02:9e:55:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:71:B1:A2:0A:45:3D:A7:4A:A5:3C:78:AD:58:11:9B:42:4B:A3:4F
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ea:2b:ce:15:0d:b2:3d:52:ee:80:7f:73:b6:93:cc:2d:5e:
b6:0a:2d:f0:df:42:46:e9:b6:ec:7f:ef:4e:b1:ec:6d:1f:1e:
3d:07:9b:aa:1f:ed:a9:94:61:fa:a1:cb:67:3c:dd:47:88:62:
49:f7:44:31:59:0a:21:fd:29:a7:6a:db:ed:32:96:b4:d5:1e:
d5:c9:de:9e:85:34:57:43:26:93:98:e4:78:fe:8f:3c:24:6f:
79:0d:20:ef:84:6c:8b:bd:72:a4:fb:c9:71:42:99:c6:31:63:
76:45:e7:18:f9:6b:12:62:89:37:d2:e7:44:ab:a1:2e:92:22:
58:b2:32:3a:d2:87:28:55:e2:5a:ad:f3:9c:28:16:ac:4f:66:
e3:e1:c4:cc:d2:b3:16:8e:c8:8a:47:a7:eb:12:c7:3e:fc:c1:
fb:84:81:9b:2a:e2:2e:cf:46:9d:33:42:09:2f:64:39:26:83:
2d:ba:b5:86:4f:56:50:03:f6:e1:25:dc:bc:0d:ec:fe:ff:74:
7a:57:94:88:34:af:ac:dd:0f:a8:2c:c3:2f:06:92:ac:bf:96:
bb:f6:d6:d8:76:94:c0:20:48:f2:fe:a9:1a:e5:a4:a4:a3:4d:
e7:7f:88:73:f1:76:78:f8:c5:77:95:1a:9a:4f:35:01:3f:f7:
90:fd:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:02 2026 by rpki-client