
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: Bnrcpk22jTgeTBJdcqJzffFOXf3PY0nVoNECua3/8L8=
Subject key identifier: 58:45:7B:2A:CA:98:D6:3C:01:09:DC:6F:2C:25:4C:45:A6:CF:50:C7
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 2332
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2323
Signing time: Wed 18 Feb 2026 15:41:26 +0000
Manifest this update: Wed 18 Feb 2026 15:41:25 +0000
Manifest next update: Wed 25 Feb 2026 15:41:25 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: jHwJ55dLN7k+cOwtqYvbVj0McSBbQg/GrwiJQBuia6s=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9010 (0x2332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: Feb 18 15:41:25 2026 GMT
Not After : Feb 25 15:41:25 2026 GMT
Subject: CN=6995dda6-9125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:90:1f:e2:1a:20:c1:66:dd:01:4a:97:00:
29:4d:92:ea:44:9f:21:c2:12:45:b3:4f:3b:95:ae:
41:1a:af:a3:10:69:e1:bd:fe:6f:1a:ff:36:97:16:
33:54:d5:ff:36:73:75:4c:ef:00:47:6e:94:68:b9:
2b:46:73:c3:db:b5:9b:88:14:3f:c4:9b:c0:f6:25:
5e:24:1c:9a:59:c3:9a:fb:e4:46:7c:e0:9a:72:58:
32:d2:e4:b6:89:4d:95:54:56:b0:63:13:ce:98:48:
07:14:97:d6:af:bc:9d:ef:b1:b5:6f:1b:77:db:2b:
54:63:97:bf:e9:b9:34:75:a4:c0:72:0c:ad:64:0b:
d8:60:13:d1:d6:db:a6:77:6b:f5:24:29:b3:d5:fd:
26:32:62:25:a1:a0:76:a9:51:36:88:bf:9a:f3:32:
97:d8:45:e6:44:d7:c5:cc:f5:c5:18:ff:54:2d:11:
80:77:6d:f1:dc:df:ff:bf:d9:af:d1:bf:85:02:2c:
2f:ea:02:f7:d7:b0:3a:89:ba:67:f0:b1:51:8a:09:
0c:6e:1c:b1:98:37:e8:43:33:52:86:de:3e:e8:23:
12:19:a6:28:67:1a:a5:c9:30:a1:ff:ed:22:04:81:
ff:67:78:b1:87:79:dc:bb:de:f4:8c:a9:c7:16:74:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:7B:2A:CA:98:D6:3C:01:09:DC:6F:2C:25:4C:45:A6:CF:50:C7
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ea:6a:9b:4f:8a:4b:f9:ce:86:12:d8:46:c5:34:26:56:79:
fa:10:66:58:58:eb:b3:c7:43:9e:b5:f8:06:ab:70:a5:17:8f:
9b:ec:cf:7a:3d:b5:08:25:98:02:30:ba:18:87:c6:26:34:c1:
3b:06:28:99:4f:9f:50:eb:92:77:2e:17:df:96:8a:17:94:44:
8a:20:47:4a:25:25:a0:44:e8:20:07:38:f7:8d:f4:90:70:aa:
50:ff:e7:7b:fa:ce:0c:96:f6:f5:28:14:cd:a0:2b:59:e1:87:
7f:b5:5c:65:72:b1:a9:c1:bf:a0:6c:c4:75:97:24:60:54:80:
58:35:c9:aa:57:63:c3:c9:72:7a:1b:25:ef:12:be:82:7d:45:
8a:3c:c9:8b:b4:cf:2c:22:67:cb:ce:7b:78:7e:ee:6b:01:f0:
73:eb:22:f9:d7:65:de:aa:bb:2d:ac:bc:1f:f2:12:99:98:74:
62:ed:40:f5:62:74:71:5a:1d:1b:12:c6:c3:b8:a5:7d:4d:ee:
8c:33:d3:7f:9f:80:36:79:1a:23:d4:74:3f:4d:fa:bd:eb:c1:
d5:f8:10:71:0e:92:05:03:6f:56:45:8f:ab:9a:97:72:77:66:
2c:26:5d:34:97:05:25:af:56:ae:85:2e:6d:c4:fa:a4:5b:fa:
7d:d6:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:43 2026 by rpki-client