
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier: 5PUcDbgGD8oteHnb6uvZOu3VD8Q45cN2KdOwBytkD3Y=
Subject key identifier: 7D:82:71:8B:56:F7:86:55:40:43:22:18:B1:75:FE:7B:FD:9D:91:8B
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial: 0C8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number: 0C7F
Signing time: Wed 18 Feb 2026 18:13:05 +0000
Manifest this update: Wed 18 Feb 2026 18:13:04 +0000
Manifest next update: Wed 25 Feb 2026 18:13:04 +0000
Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: qZPYH9K67vSmb3kAfjZPMx2CumBfEVAhKYmxq43AwwU=)
2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 37wRY/Cc6Mq3QSLFvHgV5f/52WNRD8oTGzaqCKYmvRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Validity
Not Before: Feb 18 18:13:04 2026 GMT
Not After : Feb 25 18:13:04 2026 GMT
Subject: CN=69960131-c860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:0a:e3:42:f3:ae:6e:72:f8:43:f2:da:ed:
86:89:a0:25:50:39:c2:25:41:be:df:b4:79:87:5e:
14:dc:5a:af:07:a2:19:e3:fe:fb:33:46:3c:4c:eb:
d9:d3:1d:a4:ef:0d:07:51:be:93:f9:5b:87:84:bd:
a7:f2:c2:31:16:4c:91:5e:a1:86:40:4f:12:d6:20:
84:91:d6:a5:77:ab:ed:01:71:83:22:98:15:8b:46:
a6:07:aa:bc:ed:21:b1:b0:47:56:2f:7a:fa:84:f0:
6a:2b:e2:7d:58:e4:7c:36:55:bd:61:ac:1c:64:41:
b5:4a:f3:9e:ff:4c:5a:21:66:ff:4d:05:cf:8f:5a:
b8:17:b5:26:69:4a:58:e6:5e:85:a1:b8:bf:e3:77:
30:7e:7d:2a:d4:ad:a4:d6:ba:55:2b:16:6d:fa:c3:
bc:0b:93:56:81:06:bb:c1:54:68:84:9b:80:a5:f0:
7c:7a:79:b4:a3:26:2e:69:e0:c3:b0:f4:37:a9:3a:
40:2a:ca:99:c3:60:77:f2:41:91:e1:2f:52:32:d9:
09:0a:f2:75:4d:62:61:c8:1a:2f:b1:fd:87:5e:5d:
5a:66:4c:7c:a7:37:18:32:09:ac:74:1a:68:64:51:
b0:60:d0:27:f4:23:84:2f:41:b1:3d:83:4d:20:45:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:82:71:8B:56:F7:86:55:40:43:22:18:B1:75:FE:7B:FD:9D:91:8B
X509v3 Authority Key Identifier:
keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:08:19:fe:e0:d2:4c:3c:25:d0:2d:07:be:61:e6:c0:ea:
53:b2:f5:52:0b:22:56:b6:28:ce:73:bb:29:79:5c:00:2d:a4:
14:7e:1a:66:1b:23:36:ea:4d:97:7f:7b:26:2f:7b:85:82:47:
18:1c:45:69:db:c2:95:62:f6:28:be:1f:46:47:ee:06:16:ad:
92:05:23:23:d0:0e:e9:1a:f9:51:22:b9:56:2a:c9:2b:e5:fe:
3a:62:54:6e:ef:37:61:03:ce:d8:4d:56:b0:6c:28:38:9c:28:
d7:85:6e:6a:8e:43:93:2c:ae:cd:a3:38:24:98:b0:97:e2:76:
ab:2f:67:b3:7d:01:3b:83:4e:a5:94:d3:95:ed:ab:96:91:58:
72:b2:d0:47:5d:42:15:11:4a:50:4c:c7:e2:de:0a:c0:64:fd:
06:b4:9b:93:84:dd:88:c4:23:79:28:a7:b1:33:a8:d1:35:11:
c2:5b:ac:dd:e7:74:b2:64:e5:4c:9c:b9:9a:72:06:fc:01:11:
c3:b3:de:73:52:37:ca:d4:05:d0:67:36:ac:89:b0:3f:d5:db:
72:3c:69:bd:06:51:23:92:dc:a7:2b:9a:8e:64:9c:4d:15:9f:
35:96:c9:5d:4e:8e:71:08:48:d7:98:4e:7c:51:62:b1:98:0c:
7f:38:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:56 2026 by rpki-client