
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json)
Hash identifier: I5VtEDSotBM5NwMy8pCLgW+0ZsigyLOEevbiEtYTS18=
Subject key identifier: DE:AD:02:69:4E:0E:2B:80:87:AB:3C:DB:20:28:C8:7F:8A:9D:B8:20
Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
Manifest number: CD
Signing time: Thu 19 Feb 2026 05:20:48 +0000
Manifest this update: Thu 19 Feb 2026 05:20:48 +0000
Manifest next update: Thu 26 Feb 2026 05:20:48 +0000
Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: NqhCe844AlizgQhb3hgyl5i5XjyHi7ietllsiBMDnlQ=)
2: 965254F8278811F09217002CC4F9AE02.roa (hash: cntS2QbrLMGVNDiSYKCKZNhPNOsjrLMnvFLUFK/CvnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Validity
Not Before: Feb 19 05:20:48 2026 GMT
Not After : Feb 26 05:20:48 2026 GMT
Subject: CN=69969db0-5f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:23:c7:09:65:13:fb:2b:94:02:91:63:9e:
9f:d0:a2:65:37:30:41:42:c0:46:2f:7d:d9:0a:57:
c8:99:a7:b7:c9:dd:50:1a:b1:8e:d9:52:da:91:0f:
e9:b2:7b:65:d2:70:46:f5:96:cb:25:7b:7e:e9:9c:
50:f3:a4:e5:06:4f:da:bb:9f:a4:0c:c9:34:7b:38:
93:14:57:d7:61:66:b6:99:3b:bc:be:64:46:e0:9d:
61:e1:17:24:3d:3c:f6:e5:52:2d:ec:3e:5f:4f:3d:
77:bf:81:c5:ad:57:31:bd:a0:4b:6a:ce:a3:f6:81:
38:69:e4:72:6f:60:72:7e:4c:06:6f:2c:e2:f1:ae:
0f:72:5a:6e:5a:90:29:ca:5b:84:c0:15:bf:a5:8d:
e0:4c:8a:1d:5a:81:d1:a2:94:b0:43:fa:69:12:28:
35:e0:e5:33:98:01:91:f5:2b:e0:25:9a:2f:93:30:
24:22:7f:fd:c2:d5:90:dd:4f:1e:93:21:75:8a:80:
e7:bd:b8:34:92:86:69:d4:d1:66:81:d7:75:bb:0e:
18:cc:a5:06:f1:5d:5c:0f:4b:b6:6f:75:90:60:05:
c1:26:aa:f8:5b:85:2c:70:8f:ad:81:2d:9f:87:fa:
a7:9a:8f:9e:89:e7:1e:57:90:78:51:00:1b:17:f3:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:02:69:4E:0E:2B:80:87:AB:3C:DB:20:28:C8:7F:8A:9D:B8:20
X509v3 Authority Key Identifier:
keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:40:88:7e:78:05:12:7d:a6:ce:9c:a2:ca:ef:8b:79:6f:
51:64:c3:84:14:66:4f:9a:1f:f2:ee:07:df:9d:fd:c9:07:08:
6a:45:bd:0a:01:6e:4f:1e:b9:e4:00:f0:25:f5:a8:71:0d:e0:
ab:85:d5:84:08:b0:40:50:b2:02:3d:c5:72:a6:48:99:06:4b:
ef:b6:7b:38:a9:5b:e6:bf:c1:d5:c9:e3:c0:b6:d8:a5:56:0f:
c5:4d:bf:eb:b9:3d:94:7d:fa:02:44:26:b5:ce:6f:84:3a:c1:
ef:b1:0e:a8:b4:71:58:ed:de:d2:35:aa:18:c8:88:aa:a9:7d:
05:12:b8:c8:30:0a:33:2c:fe:b7:85:a1:b4:96:ab:28:87:d8:
ca:5e:75:10:e6:30:0f:11:2d:00:e6:75:5a:26:a6:a0:cb:1e:
3a:80:d3:92:bb:2e:4f:91:43:a6:19:c1:f7:72:77:4a:63:c3:
34:18:39:46:77:a3:43:7c:17:d5:87:5d:d3:f9:2b:d1:cb:b4:
d8:55:9d:eb:a6:d6:ff:65:c7:ab:1c:d8:7f:60:2d:8b:88:a8:
44:ec:8b:44:94:94:0a:47:35:46:23:33:61:72:d6:70:70:08:
48:1e:6c:21:bc:b6:a5:af:62:03:ea:5c:9c:9c:46:ad:d3:43:
7b:0e:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:48 2026 by rpki-client