
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier: kmszd8h/2PnNvdhlP3tAklNwLZDTh6tJS46m4QYFH1g=
Subject key identifier: E1:A4:B7:18:CF:57:63:BE:02:D0:54:E4:A2:1D:90:11:E1:16:94:DA
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number: 017F
Signing time: Thu 19 Feb 2026 03:07:59 +0000
Manifest this update: Thu 19 Feb 2026 03:07:58 +0000
Manifest next update: Thu 26 Feb 2026 03:07:58 +0000
Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: sNm+87h772ZqnaLcdgAr2n+dq41FqRQQIrvDCwqB3TE=)
2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Validity
Not Before: Feb 19 03:07:58 2026 GMT
Not After : Feb 26 03:07:58 2026 GMT
Subject: CN=69967e8e-432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:8c:9c:46:04:61:82:fd:85:d5:af:b1:3e:
97:aa:96:0e:70:84:8e:72:bf:3f:34:eb:a9:29:35:
11:6b:df:78:99:db:18:5b:90:f8:08:8c:d1:c1:f8:
00:44:27:9e:ab:da:09:32:d9:e4:01:5d:20:f4:23:
02:06:cb:80:1d:c1:f2:94:82:72:a2:3a:9b:ba:89:
1e:ae:c2:2d:e1:31:8a:a8:77:82:91:b3:03:7c:09:
49:0a:31:c4:e9:a8:56:d0:b3:c9:6f:5c:7c:49:eb:
5e:1e:64:be:20:7f:1c:e3:71:06:7e:b6:9d:01:49:
85:96:f3:f5:30:10:54:a4:bf:04:9b:c6:2a:3e:62:
aa:a7:93:64:a8:2f:07:bb:74:fc:3e:bd:fa:ee:2c:
3b:4e:ae:d2:70:50:6e:1a:d1:20:59:05:25:89:1f:
40:78:97:bf:e0:17:79:0c:87:48:e5:fd:62:59:2f:
31:bd:d5:15:48:e7:54:1e:b6:38:61:81:74:20:96:
80:b6:79:39:31:05:e8:02:ab:47:9e:99:90:57:14:
f1:87:09:be:2b:e3:05:95:5c:d3:df:d6:df:00:93:
65:fa:b2:5c:13:56:35:12:5a:12:b9:08:a0:73:dd:
5d:dc:71:2c:06:5c:91:e3:9c:ea:86:61:54:6c:52:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:B7:18:CF:57:63:BE:02:D0:54:E4:A2:1D:90:11:E1:16:94:DA
X509v3 Authority Key Identifier:
keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:87:f5:4d:26:2e:15:6f:06:35:54:82:28:c0:97:e5:78:
14:00:5e:5b:06:c2:76:7f:b6:e6:81:32:f7:87:99:72:80:7f:
d0:f1:4a:49:8b:b5:04:a3:7c:fa:07:6c:cb:38:c5:bf:79:67:
d8:70:4f:32:8d:21:a8:4c:df:c0:e1:a9:54:9b:66:b8:1b:b4:
0e:9f:e9:60:5f:95:0e:ca:4d:22:b8:17:9f:44:bd:42:b1:8c:
0b:bb:90:68:30:e5:38:da:ff:fb:45:b6:88:8a:5a:03:25:d7:
eb:73:7f:56:af:d7:15:71:35:b3:f6:05:38:9b:7b:bb:ad:d3:
4e:16:f6:e4:ce:6c:bf:f5:a5:d0:b8:53:76:e9:95:bc:a6:c3:
10:98:5b:18:c4:51:c4:08:88:d2:42:97:f4:31:38:2b:c7:9b:
53:a9:cf:c5:95:81:39:1a:4e:e8:be:ef:1a:99:58:7b:80:93:
57:f8:a4:7a:b1:55:5d:99:45:89:7e:92:5d:1f:67:02:2a:ad:
33:ab:65:d6:6a:23:9e:1d:5e:8d:ca:51:78:a0:b8:b0:5d:e6:
9e:61:73:c3:ce:72:3e:8e:03:bc:44:fe:35:e6:d5:a3:1f:f4:
ab:0c:02:d2:e4:cd:42:10:4f:17:56:d6:14:d2:70:a8:55:74:
1b:cf:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 06:16:52 2026 by rpki-client