
$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json)
Hash identifier: UX9cp2VJVwuwuwSR2wNiWvVfV7YFo0dS2y90zZ83l2w=
Subject key identifier: 49:B7:61:17:B5:8D:61:F7:54:02:B6:65:7C:AE:22:A4:E8:DA:19:25
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
Manifest number: 82
Signing time: Thu 19 Feb 2026 06:00:48 +0000
Manifest this update: Thu 19 Feb 2026 06:00:48 +0000
Manifest next update: Thu 26 Feb 2026 06:00:48 +0000
Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: mnKWUhdUDn+ZFR0N7paz5wdlPDa8zgEZI1UFK7mbKjE=)
2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: JRzGJdFSse2irDcL+W7kuHv+w+d8AeO+g8YTYnBtHyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Validity
Not Before: Feb 19 06:00:48 2026 GMT
Not After : Feb 26 06:00:48 2026 GMT
Subject: CN=6996a710-57d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:73:49:8e:40:f6:db:d8:31:a6:47:7f:1c:
28:f5:0e:e5:80:c7:57:71:62:d4:8a:77:73:04:9f:
de:f9:d0:41:df:e3:02:11:16:f2:4f:b4:b4:f1:0b:
91:6b:96:4f:32:45:e9:a7:ce:21:71:11:be:42:e8:
19:39:43:11:4b:c6:8b:37:43:81:02:97:cd:fe:8f:
f5:07:94:56:76:97:43:a9:a0:3e:f3:da:0c:fd:d2:
06:a4:11:b9:46:1a:a3:f2:06:cc:60:4d:47:c0:df:
d6:41:3f:ca:61:9a:3f:1e:65:19:6c:31:ad:25:f0:
0c:47:91:93:6e:59:6c:58:9b:e4:ad:bf:8d:b4:d9:
38:9b:7d:60:87:b7:0a:a9:96:6d:d7:49:48:0e:b7:
e7:4a:b3:64:6a:c8:56:c3:35:8f:db:12:6b:2c:ac:
73:7e:62:79:ce:52:1c:17:58:e0:f2:87:d8:7d:81:
97:cf:b0:64:9d:46:f4:ea:15:58:51:b7:05:ec:aa:
26:43:07:99:7d:85:16:2d:51:04:17:c1:d9:7e:03:
54:d0:11:69:62:d5:32:ca:5d:17:1c:97:5e:a4:09:
7e:4b:2c:63:d2:e0:5e:3c:74:9d:83:c2:7a:d0:62:
5f:08:01:af:30:cf:2e:ab:7f:3c:9f:8b:e9:49:03:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:61:17:B5:8D:61:F7:54:02:B6:65:7C:AE:22:A4:E8:DA:19:25
X509v3 Authority Key Identifier:
keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cb:76:a6:c6:ff:ee:f0:72:c0:a9:44:f7:48:bd:b3:31:8f:
a5:c1:3f:93:3a:47:62:c0:e5:00:c9:0b:9c:33:41:fa:cf:da:
a1:49:5b:c8:54:17:51:34:9c:ff:fb:5e:1f:44:12:50:74:a6:
46:29:b7:a1:3d:28:76:4e:18:38:85:bd:c1:ff:de:6c:19:42:
b6:45:51:44:f7:ec:de:dd:dd:9b:46:37:3b:e1:46:bd:10:4b:
e8:06:c1:92:ff:c6:a6:61:7f:d5:90:7d:54:28:45:82:d6:6e:
43:de:8f:7b:70:28:29:0b:b8:e0:95:fa:96:be:be:9a:e2:38:
a8:d9:71:a4:a2:46:7f:bf:0c:5b:6f:56:fb:b0:28:72:c8:30:
4a:9b:8f:df:df:83:c0:ab:be:5d:d7:86:07:8a:f9:bc:a0:71:
5f:26:a9:c9:57:e0:3d:94:bb:13:66:13:51:3b:ea:08:60:74:
c8:08:69:55:c4:dd:f7:c9:14:16:0a:aa:7c:94:b3:7a:da:b2:
1b:cd:da:90:20:33:5c:19:ed:ac:2b:9e:6d:09:1f:20:03:56:
a0:58:a7:ab:51:52:81:c5:6f:98:8b:f9:68:c1:e9:91:2b:57:
e4:08:2f:6f:e5:43:d4:3b:c5:f3:0c:ad:71:03:13:c4:fc:ae:
d5:2e:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:36 2026 by rpki-client