
$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
File: 2kcnine73_Ktn5igEaKnoufNYNg.mft (raw, json)
Hash identifier: 2zSM3Rww3KcJB2/UkatwONe6wXHoqQzLGkXLQmLe7sc=
Subject key identifier: 71:B8:9A:09:52:CB:50:F9:56:85:E6:56:59:D4:27:30:DB:71:97:69
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Certificate issuer: /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
Manifest number: 0122
Signing time: Thu 19 Feb 2026 04:04:55 +0000
Manifest this update: Thu 19 Feb 2026 04:04:54 +0000
Manifest next update: Thu 26 Feb 2026 04:04:54 +0000
Files and hashes: 1: 2kcnine73_Ktn5igEaKnoufNYNg.crl (hash: 6VxidjXW6lrg38puW25OD9N1vUdTSYsQblnLpPPBVrE=)
2: 05A966C652DB11EF990CB840C4F9AE02.roa (hash: uXZnZkbG2vzbvvdgakCXJGAe3jQgXul+4/g2eod9UgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91393BE, serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Validity
Not Before: Feb 19 04:04:54 2026 GMT
Not After : Feb 26 04:04:54 2026 GMT
Subject: CN=69968be6-82a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:93:fa:05:41:18:54:82:ff:a3:85:8f:e1:
63:85:ef:79:33:f1:aa:8e:bf:32:ae:8d:05:f7:d3:
e4:7e:08:91:9d:a1:d9:13:0d:69:a9:ed:88:d1:5d:
d0:b9:57:82:5f:76:af:74:df:19:b0:f7:cb:fc:de:
13:80:84:eb:b6:3d:a7:a8:f9:e7:bb:9f:75:d8:91:
94:9f:6c:72:f9:66:94:fc:8b:0c:b4:5f:40:11:d0:
f9:2f:2e:26:fa:b8:98:7d:8c:88:03:73:f4:36:e0:
19:1c:9d:fe:e5:28:d4:82:65:f5:2f:92:24:80:b7:
ce:fe:83:6a:ce:5f:b2:7a:63:ef:b6:3a:da:cc:01:
a1:4e:60:03:c8:7c:93:c6:f7:fb:cf:90:5e:bf:e0:
e1:f4:a8:9e:22:ee:ec:9e:22:86:e2:a3:e8:13:fe:
f0:78:2a:81:38:28:95:45:d1:a5:ee:b4:6d:69:91:
25:f5:59:1c:79:05:ae:93:c2:f7:72:bc:14:fe:8b:
2b:33:ab:85:a1:c4:fb:26:e5:b3:1a:2f:8f:ec:f7:
de:60:00:5c:1c:36:c3:a8:03:55:26:d9:dd:9e:56:
30:9f:e7:2e:d1:93:34:f4:6d:f1:04:22:a4:d2:61:
5c:34:9a:31:07:85:01:e0:a8:6c:48:78:bc:2a:f4:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:9A:09:52:CB:50:F9:56:85:E6:56:59:D4:27:30:DB:71:97:69
X509v3 Authority Key Identifier:
keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:02:ce:4d:65:3c:82:bc:d5:91:27:85:80:49:ab:c5:a5:
88:7c:8f:2b:e2:26:88:a0:b2:89:99:59:d8:a0:de:83:e0:a5:
b7:f7:7e:e6:ce:c2:a7:18:f2:16:50:17:bc:7f:b7:70:3e:e5:
78:82:27:cd:8e:e5:97:60:d6:3a:41:0f:6a:67:d5:1b:cc:b1:
64:28:8b:85:3a:24:e2:9b:24:01:66:97:02:b8:f4:71:ed:dc:
25:ca:00:c8:ec:17:67:a3:e6:90:c1:4d:0c:07:cd:98:5a:6d:
70:d0:c2:db:a2:4b:61:ea:32:26:97:17:07:91:cc:de:22:4c:
c2:aa:b3:d6:0c:c3:26:d6:5c:4c:bc:05:f9:5e:a0:50:93:56:
6a:43:d3:6d:d1:5a:bb:91:d4:38:7a:62:6b:4f:b9:77:82:b3:
03:69:d0:d1:32:1e:3d:04:06:cb:0c:09:dc:3b:13:b3:1c:22:
1b:95:c1:07:01:7d:83:46:ee:33:92:ad:29:96:4b:10:78:e2:
d9:05:1c:28:39:c6:ae:b0:7f:7b:0d:f8:e2:09:c0:1b:18:5e:
be:ad:7e:2f:5d:35:da:a6:ed:50:17:7c:ac:37:86:55:e5:df:
15:a6:7a:a7:c0:e0:27:2d:d4:0e:2e:be:b0:ad:91:c6:d5:18:
62:02:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:00:48 2026 by rpki-client