
$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json)
Hash identifier: mv0q3gb+1kbl2h/C3A1kQduoKusUF7wCngv51CFBx3E=
Subject key identifier: A8:A2:22:FA:12:A7:B4:ED:3F:BF:A5:E0:A9:9C:C7:52:40:00:7E:28
Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72
Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
Manifest number: 01B5
Signing time: Thu 19 Feb 2026 02:31:59 +0000
Manifest this update: Thu 19 Feb 2026 02:31:58 +0000
Manifest next update: Thu 26 Feb 2026 02:31:58 +0000
Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: lOeTXBxjXrI8jAYLY0OTaQZ+qdTkwba0oKR7ADPtDGQ=)
2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: 75EuXED/Rvqy0Mw85Z/q36XD2zcpbxDlIxOgsx3A+Yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl
rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672
Validity
Not Before: Feb 19 02:31:58 2026 GMT
Not After : Feb 26 02:31:58 2026 GMT
Subject: CN=6996761f-055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:f0:d4:25:c1:f3:3d:47:dd:84:a1:95:74:
d5:dc:87:36:bc:ef:8f:9b:13:ff:d8:09:df:06:aa:
5e:89:88:69:4a:22:57:f4:fe:95:df:34:2d:15:29:
d0:eb:b9:a7:41:ec:b7:30:f8:94:e7:f7:df:1d:d0:
94:fa:b6:40:77:55:68:1c:92:19:a0:b0:19:ad:c6:
df:ad:8b:15:c9:4d:1e:22:f1:f9:e4:85:d1:07:1c:
14:24:2f:ac:80:ff:df:7b:1b:8b:03:b5:e0:51:73:
cf:2d:14:1a:f6:d9:a4:bb:12:b3:7c:67:80:41:9c:
f2:ad:f4:1a:84:2d:73:9c:fd:0b:64:4c:66:2a:f3:
cd:cc:d0:2f:10:23:88:ff:8b:3b:1e:1e:20:99:97:
f5:56:2a:cd:70:ab:ca:60:b9:eb:9c:c2:f3:34:a3:
50:16:52:3e:a5:7f:4c:c6:37:56:d3:c5:51:12:67:
f1:98:eb:9e:7b:d1:23:66:4f:a5:9c:3f:eb:19:d0:
99:12:68:dd:ef:4c:72:bd:53:01:25:47:03:14:e8:
49:14:8e:94:a5:31:f3:2a:a4:fe:79:92:80:a5:32:
8a:87:63:e5:4b:17:a8:fa:12:7b:36:29:d9:92:ec:
96:17:0c:9c:53:24:bd:c4:d7:d8:11:44:0d:62:17:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:22:FA:12:A7:B4:ED:3F:BF:A5:E0:A9:9C:C7:52:40:00:7E:28
X509v3 Authority Key Identifier:
keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:3a:6a:f6:8e:db:c6:50:ec:de:e5:66:c2:93:47:3c:d4:
c5:ca:ef:70:bb:8b:70:c4:73:f1:cb:2b:ea:7a:9f:a7:b9:ef:
02:3e:58:0e:63:a6:76:1a:8b:bd:b4:d7:2e:70:4d:4f:af:b5:
b4:d3:08:32:02:f4:2c:39:bc:bc:fe:fe:94:03:f4:b4:b1:f9:
be:6d:8a:cc:2c:f0:48:a6:b3:30:37:41:4e:85:d1:3c:55:1b:
8f:e5:ea:54:8f:f3:92:b6:51:fa:6e:9f:f0:c4:45:cd:04:17:
b6:3c:63:6e:61:dd:d8:77:ed:04:1d:9a:03:6d:05:31:17:1f:
ed:fa:14:e6:66:a1:fc:9d:b4:a9:69:42:76:bf:39:3f:c4:62:
c3:f1:bf:a1:8a:14:81:5f:2b:e7:2a:9c:63:a6:4b:11:f6:b7:
d3:8b:9d:30:88:3e:1c:1a:12:16:c7:a2:8a:f2:bb:45:b7:0d:
e8:1e:73:56:6f:e6:18:75:77:67:be:78:c9:40:bf:eb:d3:2e:
8b:98:07:24:23:05:e3:d8:33:7b:c2:4b:37:d9:b0:71:ca:e3:
65:de:d0:8c:75:9d:e6:37:5e:54:4d:78:af:16:f4:34:54:b4:
dc:b5:7c:c3:61:aa:df:a0:91:96:eb:a6:4e:61:dd:c2:7f:f8:
a6:43:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:32 2026 by rpki-client