
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: /EEkIHa7XeSmotDzF4IUEHsTIE4icDX8ABRbAuraOAs=
Subject key identifier: B9:CB:5F:6A:0E:7C:92:49:8A:98:CD:83:A3:8F:B8:2E:5C:9F:82:2C
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 01DE
Signing time: Thu 19 Feb 2026 02:08:48 +0000
Manifest this update: Thu 19 Feb 2026 02:08:48 +0000
Manifest next update: Thu 26 Feb 2026 02:08:48 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: gpufLdH468wxCBbmkCA25jeVhKi6UYaogc2QpIpNGA0=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Feb 19 02:08:48 2026 GMT
Not After : Feb 26 02:08:48 2026 GMT
Subject: CN=699670b0-b054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:8b:db:70:9b:6d:e0:af:f6:de:ba:f2:e0:
09:81:96:21:fa:a6:a5:2e:fd:b3:15:ed:91:9f:f1:
a3:80:03:94:86:e6:3b:db:0d:44:f8:ec:09:fc:db:
e8:86:ff:5f:7d:e1:7a:1e:d7:d2:0d:e0:22:2d:bd:
3b:ce:1c:4c:bb:67:32:a5:46:04:8b:d9:41:ac:ad:
b1:aa:0b:de:82:4e:4a:71:39:37:7f:f3:f5:b6:7e:
62:71:f6:53:aa:e3:f0:ba:78:9c:58:dd:41:27:76:
33:2e:f4:ca:ed:de:d6:d2:e6:49:11:b9:8b:f1:db:
7c:27:cc:e0:06:5b:49:4c:88:35:88:7b:21:12:90:
f4:e5:e6:fb:38:98:94:d6:ac:66:7b:52:20:d2:04:
5f:99:df:af:16:32:33:60:b7:28:0a:d7:a4:92:85:
1a:c3:dc:54:9a:04:04:3a:ba:82:60:cd:89:b3:12:
f3:75:c5:3f:e7:d5:65:a4:c7:b8:70:2d:4b:65:06:
c8:bf:8c:6b:87:1f:93:25:ab:ae:e8:f1:0a:4c:b0:
ee:27:2a:f1:da:7a:b0:77:19:24:12:b6:01:e0:57:
cd:e5:3d:f2:71:82:21:39:03:3d:62:5c:2d:d7:87:
80:91:df:5e:95:5c:5a:9e:e4:ba:95:6b:f2:69:6f:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:5F:6A:0E:7C:92:49:8A:98:CD:83:A3:8F:B8:2E:5C:9F:82:2C
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d1:5d:60:54:37:93:ba:dc:fe:3e:de:88:43:a2:ea:ad:fa:
d2:a7:66:08:50:3d:fc:a2:64:e0:53:6a:79:4e:4d:54:37:50:
06:85:7a:e3:f7:b2:8d:3c:67:96:15:8f:5c:c9:8a:86:01:5e:
66:35:5e:b8:5e:02:b5:e3:19:81:28:25:dc:b2:44:34:ed:10:
1e:5c:6c:f7:32:f8:3d:de:2b:c8:bd:1e:6e:dc:2c:3b:bc:6b:
ff:8c:e5:42:b5:ee:c0:ff:dd:bd:8f:a5:c0:49:f3:4c:1d:97:
11:22:f8:0d:6b:a4:a9:5f:af:0e:e5:a3:c6:d5:82:e7:d0:e3:
cb:e9:76:57:53:b7:cc:0a:ac:29:e5:00:d1:0a:27:43:d2:9c:
6a:aa:d3:72:ff:33:58:21:eb:13:c0:ff:f9:70:8c:55:3b:fa:
0c:7a:97:8b:81:31:3c:5f:d7:bd:c1:15:ff:95:9f:08:14:51:
06:10:aa:7e:eb:b1:aa:26:93:24:9c:d8:8c:6c:b1:c0:f6:05:
3d:a0:f5:ab:94:0c:c5:17:ac:0f:c7:7d:89:53:b0:48:4f:18:
85:e1:c0:cc:66:66:5e:b4:3b:69:a7:5a:a9:da:da:88:71:8e:
c1:84:68:9b:5c:fc:70:b5:2a:8a:96:45:18:72:30:22:90:09:
88:4f:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:59 2026 by rpki-client