
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json)
Hash identifier: dHYVVEWxoG6ZpFteXwqptZ7pGSfEY+lCvsmC0eBpw4o=
Subject key identifier: ED:72:E9:01:DB:E8:D2:98:D9:A6:A5:3B:15:4F:50:49:1A:99:61:F3
Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Certificate serial: 0EAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
Manifest number: 0EA5
Signing time: Wed 18 Feb 2026 17:24:53 +0000
Manifest this update: Wed 18 Feb 2026 17:24:52 +0000
Manifest next update: Wed 25 Feb 2026 17:24:52 +0000
Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: R8vXc0i0VYgryZlSxlDyf8BEh/5ZmBFh7GdQi1sF8ZU=)
2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3758 (0xeae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Validity
Not Before: Feb 18 17:24:52 2026 GMT
Not After : Feb 25 17:24:52 2026 GMT
Subject: CN=6995f5e4-fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:6c:a4:d9:79:85:9e:ad:07:23:56:2f:52:
98:f6:af:54:ab:b8:5a:90:57:e0:a7:5c:5a:7d:0a:
dc:5b:03:c6:18:9a:29:bc:ac:c1:5c:a2:48:cc:82:
82:6e:bf:c0:97:ff:12:79:3a:9b:fa:bf:b1:bf:95:
69:5d:66:4a:f0:80:bf:80:12:57:19:1c:43:9c:03:
15:7f:6b:93:17:47:a3:b6:eb:73:df:9b:64:0c:7d:
97:ca:1c:2f:d2:e9:c9:3f:53:83:83:2a:2d:7a:66:
6f:38:7e:a8:cb:c6:b6:2c:6f:bb:cb:34:7b:5d:61:
6e:96:28:ae:94:a6:be:3b:77:75:df:7e:cd:ac:7d:
e6:b7:67:11:70:95:31:c0:73:d9:9c:a0:60:1e:9c:
52:71:0e:2a:d0:a2:a9:83:bb:ea:20:5d:65:89:5b:
89:c4:bb:1f:e7:97:ee:b4:cf:60:66:8b:43:42:53:
1a:8b:7c:77:8b:70:7b:c9:fb:94:67:61:9e:90:6f:
3d:c0:80:01:6b:aa:53:c3:ff:55:af:a8:7a:c4:f7:
7d:98:86:8a:8c:0b:86:82:35:08:5e:76:46:97:b3:
6a:a6:31:91:19:f5:12:34:66:f3:4d:b9:95:6e:59:
e4:49:d1:49:a6:fd:1e:81:b2:e0:36:5c:08:6b:7b:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:E9:01:DB:E8:D2:98:D9:A6:A5:3B:15:4F:50:49:1A:99:61:F3
X509v3 Authority Key Identifier:
keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6e:65:58:da:3e:c6:10:d2:1e:88:e2:90:20:ec:f6:a2:d9:
18:fa:49:22:c6:8c:2c:63:92:f4:4f:f1:cc:5d:e8:07:b2:38:
0b:73:88:d6:87:69:cd:66:eb:98:fb:19:f3:73:14:ae:03:aa:
d6:3b:99:fe:a8:74:e9:b7:3b:70:2b:9b:4b:86:7d:81:ee:32:
92:20:1c:78:c5:fa:29:8c:8d:2e:a5:3a:4f:c8:f4:23:bc:49:
0d:6e:79:9e:40:b3:97:08:99:4d:25:cb:df:bd:e3:7f:64:ef:
c6:c7:dc:47:2c:94:d6:d2:b7:6b:7b:3f:0d:bf:f6:02:a0:02:
fc:33:aa:1c:c5:77:3f:23:c9:90:b8:8f:58:7e:50:0a:47:34:
15:6c:8e:f4:b6:1d:5d:01:5e:e5:96:98:d2:5c:6b:8c:c7:b5:
b3:18:cd:83:17:80:4d:d5:8e:e6:4a:56:2e:0b:c4:1b:3b:fd:
c3:09:6f:14:58:37:55:38:98:03:cc:1e:35:b4:4f:69:eb:62:
65:df:57:af:fe:3a:bc:b8:0b:36:65:af:d3:fd:89:88:f9:5b:
aa:9b:c2:33:46:97:07:5d:7b:67:1d:24:65:33:3c:4f:fb:ac:
13:1b:f5:bd:45:e4:8c:d8:f3:7c:9f:58:cc:1d:b8:11:d2:13:
7f:e6:3d:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC
QUQ4RTQ4N0MwHhcNMjYwMjE4MTcyNDUyWhcNMjYwMjI1MTcyNDUyWjAYMRYwFAYD
VQQDDA02OTk1ZjVlNC1mZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpZspNl5hZ6tByNWL1KY9q9Uq7hakFfgp1xafQrcWwPGGJopvKzBXKJIzIKC
br/Al/8SeTqb+r+xv5VpXWZK8IC/gBJXGRxDnAMVf2uTF0ejtutz35tkDH2Xyhwv
0unJP1ODgyotemZvOH6oy8a2LG+7yzR7XWFuliiulKa+O3d1337NrH3mt2cRcJUx
wHPZnKBgHpxScQ4q0KKpg7vqIF1liVuJxLsf55futM9gZotDQlMai3x3i3B7yfuU
Z2GekG89wIABa6pTw/9Vr6h6xPd9mIaKjAuGgjUIXnZGl7NqpjGRGfUSNGbzTbmV
blnkSdFJpv0egbLgNlwIa3uaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1y6QHb
6NKY2aalOxVPUEkamWHzMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4
NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh
QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtbmVY2j7GENIeiOKQIOz2otkY+kkixowsY5L0T/HMXegHsjgLc4jW
h2nNZuuY+xnzcxSuA6rWO5n+qHTptztwK5tLhn2B7jKSIBx4xfopjI0upTpPyPQj
vEkNbnmeQLOXCJlNJcvfveN/ZO/Gx9xHLJTW0rdrez8Nv/YCoAL8M6ocxXc/I8mQ
uI9YflAKRzQVbI70th1dAV7llpjSXGuMx7WzGM2DF4BN1Y7mSlYuC8QbO/3DCW8U
WDdVOJgDzB41tE9p62Jl31ev/jq8uAs2Za/T/YmI+Vuqm8IzRpcHXXtnHSRlMzxP
+6wTG/W9ReSM2PN8n1jMHbgR0hN/5j0z
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:40 2026 by rpki-client