
$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json)
Hash identifier: lbxhdHbpgmbCsoDxNFesca/WQQ7xBMcNHP+P091Yiao=
Subject key identifier: 1D:4F:00:DF:DB:3B:70:3D:2F:2D:6B:73:1A:A1:E9:08:08:EE:18:8D
Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Certificate serial: 0701
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
Manifest number: 06FA
Signing time: Wed 18 Feb 2026 21:22:06 +0000
Manifest this update: Wed 18 Feb 2026 21:22:05 +0000
Manifest next update: Wed 25 Feb 2026 21:22:05 +0000
Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: v3Ib4BU3cNMuXSU9GkW7b0NwjNtjmt64fWfP5//Zs6M=)
2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: 3PWLAjjquPEfth1t4lnnO5BhhDmCREh5EWELlkQT0go=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Validity
Not Before: Feb 18 21:22:05 2026 GMT
Not After : Feb 25 21:22:05 2026 GMT
Subject: CN=69962d7d-7c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:66:98:07:e3:f3:ba:43:ba:d6:55:81:53:
61:53:9e:69:e8:b8:eb:35:dc:1b:22:11:46:2d:a8:
e8:2e:eb:f5:59:c1:15:97:a6:03:4a:6e:ec:af:90:
c1:b3:14:db:9c:92:a9:ce:d1:8e:21:ef:20:8a:5f:
19:32:d6:cb:41:4f:db:38:be:ed:4f:7f:98:c2:cb:
33:b3:88:26:9e:28:77:09:bf:bd:15:b3:51:6d:c0:
45:ef:78:af:5f:66:03:ba:6f:bf:06:b0:f8:7f:bf:
34:46:34:b2:e5:31:b2:2b:e4:f8:bc:45:8d:2b:92:
dc:b1:c6:a8:66:2d:82:47:70:5c:d9:85:99:de:16:
5f:9f:7c:a9:40:a3:ba:43:61:35:ba:18:31:a8:e1:
38:2d:5e:5d:8c:a1:d4:26:9a:a8:e8:93:93:bc:23:
69:61:c6:06:74:d1:7c:5b:8d:e2:00:79:99:df:a4:
69:88:4a:65:c2:d0:be:3e:33:4f:81:86:ff:ee:90:
38:d8:b8:28:0a:ce:a3:9d:7a:93:ac:07:88:3e:f1:
93:9e:06:41:d2:1d:27:58:5f:c2:34:a3:e2:20:99:
0c:4a:35:2a:be:a2:e2:f6:e2:70:2c:99:6a:64:b5:
38:a8:cf:ab:ed:b7:57:61:dc:97:80:a3:f7:2d:f5:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:00:DF:DB:3B:70:3D:2F:2D:6B:73:1A:A1:E9:08:08:EE:18:8D
X509v3 Authority Key Identifier:
keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:27:ec:89:7e:1b:06:4e:96:b8:d2:ed:66:f5:ea:4a:83:ac:
c1:bd:d3:bb:bb:07:4f:40:bf:7d:58:e6:e9:da:28:5f:62:17:
29:3e:63:21:58:6c:22:96:f0:2f:32:5d:82:a9:e3:34:0b:8f:
5a:8f:7c:f1:cf:a8:15:32:cf:f6:1a:ab:0f:d9:3d:69:cd:24:
be:d4:a6:97:29:c8:e1:11:fc:24:6e:42:09:01:e4:15:5c:8d:
68:48:22:e7:c0:44:3d:56:5f:7b:36:0f:4b:6b:38:dd:6c:e1:
d8:53:f8:1c:85:ab:20:d6:78:fe:94:b9:dd:30:0c:43:ed:0d:
ac:9d:b5:30:bb:20:3c:17:91:f7:b1:c9:a1:36:cf:4b:d7:6d:
a4:0e:b3:01:ba:40:dd:ab:88:f8:22:de:bc:eb:a4:4d:f9:a0:
49:67:fb:c8:2b:3d:3b:c3:2d:a2:cb:d1:b9:be:09:16:4e:80:
f7:1c:e6:12:52:8f:49:74:ae:2b:80:3e:72:74:38:6f:1b:b3:
8b:db:95:13:60:a7:e1:52:4e:89:ce:b0:70:dd:70:04:40:62:
42:b0:f6:23:05:4d:bd:c0:5e:90:14:12:6b:49:c0:11:39:25:
ac:61:38:0a:03:e7:4a:ab:2a:e1:4e:28:ce:30:85:34:e0:17:
4f:c8:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:45 2026 by rpki-client