
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json)
Hash identifier: QM6rrTXRVNVrz9twYHxq4DiY0p/baV0QO/OYPG5cxkc=
Subject key identifier: E6:5F:C3:68:DF:63:6B:FD:F2:52:FC:C1:C9:56:29:A5:AE:A4:BE:9B
Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Certificate serial: 3517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
Manifest number: 3512
Signing time: Wed 18 Feb 2026 14:58:27 +0000
Manifest this update: Wed 18 Feb 2026 14:58:27 +0000
Manifest next update: Wed 25 Feb 2026 14:58:27 +0000
Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: tTkZm9E9mor6V9TrnzTJJJ8DMyryBO1uHSPiLjEe4v4=)
2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: JdQUVUw03f+72nj/VMFdFXWPwrE8S++NWd90s/zu6jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13591 (0x3517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Validity
Not Before: Feb 18 14:58:27 2026 GMT
Not After : Feb 25 14:58:27 2026 GMT
Subject: CN=6995d393-7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:2d:7b:b1:cc:ce:ba:cc:12:cd:78:89:15:
e2:c6:1b:cf:bf:9c:0b:8e:3c:59:79:53:61:15:81:
4c:3f:98:d4:ea:ed:12:09:08:eb:ef:1a:6e:c6:4e:
2e:7e:69:74:7a:94:67:25:85:a2:49:db:ff:9e:cc:
ee:da:c9:de:50:69:20:e8:d7:be:29:0c:3f:a1:99:
93:2b:1f:b3:c4:6c:08:80:0e:a6:13:09:aa:f8:e3:
88:b5:58:a4:00:96:95:58:1d:7b:5d:17:9b:74:8e:
b5:41:32:55:a6:e9:3e:56:16:8d:8c:64:53:1f:17:
18:0f:d2:2f:c3:61:b9:46:87:87:6f:01:e0:1a:51:
e6:0d:9d:d4:ea:a2:92:9f:3e:ee:55:c6:16:0a:79:
d7:54:49:ab:e1:36:48:fc:57:f4:93:e1:ca:cb:da:
99:f2:d9:84:84:b0:fc:ef:1c:b6:ce:39:3b:a0:8e:
d0:21:04:cd:60:5e:9b:a2:bd:49:39:dc:35:93:b1:
28:6f:b3:bf:56:d3:04:21:4c:89:d5:5a:02:4a:c7:
cd:26:7c:3f:1c:6c:d5:f8:a9:68:01:56:9c:82:56:
93:31:86:e5:1c:62:49:28:90:0b:e0:d0:40:a8:85:
9d:29:04:23:cd:7f:4b:b8:b3:c3:72:91:ae:ec:b8:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5F:C3:68:DF:63:6B:FD:F2:52:FC:C1:C9:56:29:A5:AE:A4:BE:9B
X509v3 Authority Key Identifier:
keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:eb:ed:d2:d8:4e:59:3e:94:b3:57:7b:49:f7:c1:78:0f:63:
5e:96:42:15:d1:ac:f3:c6:75:f7:b9:59:9f:29:39:da:ef:6f:
ab:b9:5b:d0:6b:4b:b6:9e:33:f1:ae:a3:a8:aa:73:49:da:76:
81:da:cc:b8:08:c8:5a:7d:69:94:1b:87:d2:28:ae:85:7d:8c:
82:38:6f:59:e8:b2:f3:3c:b5:b1:7f:f0:df:20:95:1a:82:4b:
f3:fe:47:7d:9f:ce:08:40:01:93:69:96:ae:ae:d6:07:4a:5d:
b6:9d:dd:cf:8b:cb:39:84:3c:00:6a:57:60:f3:f0:5c:4a:6c:
12:fe:1a:11:6d:22:d7:43:ba:eb:67:8d:95:33:8e:0b:da:bc:
f1:1a:4b:89:a5:d7:c3:f5:6c:b9:fa:d3:5b:52:ac:e4:d1:84:
5d:76:4c:68:cf:a1:bd:04:88:cf:76:f5:ab:0d:a3:ef:fe:da:
8f:c7:a5:a0:e8:f0:3c:76:31:93:0d:cc:ac:f8:a5:d6:1c:8e:
7a:b7:14:8a:7d:9b:93:e2:82:f7:1b:cc:5b:60:46:75:28:c8:
9c:bd:7c:1d:db:91:71:ce:ad:6c:26:b5:93:de:ee:bc:a2:1d:
a8:2c:1f:35:16:8b:c5:09:97:75:c7:2f:c7:6d:65:75:a0:03:
55:57:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:17 2026 by rpki-client