
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json)
Hash identifier: q9ElRUBr2EMBwM3hrUijeOIFYWyD+jSyqKC/aoFmKWY=
Subject key identifier: 4A:AF:CF:1C:2A:E1:D7:0D:BE:89:4A:11:F8:97:C9:89:24:C1:5F:08
Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07
Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
Manifest number: 0264
Signing time: Thu 19 Feb 2026 00:54:34 +0000
Manifest this update: Thu 19 Feb 2026 00:54:33 +0000
Manifest next update: Thu 26 Feb 2026 00:54:33 +0000
Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: IfubP0t5sjfGmn82K0a2gGzAxPOM4SCeJYsw4zEJgqc=)
2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: tRzDK1lpJPb8snKHWE5J6PryQiVB6dEqDWNN+haxi1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl
rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507
Validity
Not Before: Feb 19 00:54:33 2026 GMT
Not After : Feb 26 00:54:33 2026 GMT
Subject: CN=69965f4a-50c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:9d:ac:6f:93:ee:c0:67:29:9a:bd:62:eb:
7a:2d:37:0e:48:9f:7f:e0:9d:4d:24:fb:11:9d:92:
29:75:78:ff:f9:94:ce:a5:35:27:30:2f:c1:2e:fc:
87:c2:89:a8:0f:6c:61:77:c3:da:ec:b2:24:53:b1:
b2:de:26:3d:5e:61:e0:e5:0e:42:e0:5b:54:30:7d:
49:88:c9:57:5c:ba:61:95:42:b2:71:53:48:f8:c6:
85:db:22:dd:e0:ff:53:15:e2:e0:ef:e1:7b:8d:ed:
2c:c7:80:b8:e9:3d:40:cc:ed:2d:3b:2d:80:ad:ae:
da:da:9a:16:37:f5:86:75:84:1d:58:b9:36:6d:d1:
60:cc:37:f0:1c:29:83:95:92:da:9c:34:01:63:6d:
5d:22:78:4b:cb:82:44:19:4d:46:21:6b:3e:76:77:
f5:ac:34:9a:9c:b5:1d:b8:71:fc:b1:8d:56:20:47:
91:b8:27:fb:04:49:90:1b:0d:f2:8f:e1:fa:64:b8:
f5:16:8c:fa:24:0f:ca:6e:ab:f9:4a:8e:a5:2f:6a:
cb:38:2c:d4:d9:cf:bf:4e:f1:4a:3a:4f:73:85:f4:
d1:9a:30:70:cc:69:33:de:87:5e:61:5c:79:be:71:
8c:9c:ed:9e:4d:85:56:a5:dc:d5:8e:1c:92:60:a0:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:CF:1C:2A:E1:D7:0D:BE:89:4A:11:F8:97:C9:89:24:C1:5F:08
X509v3 Authority Key Identifier:
keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:8f:46:16:84:95:d2:1e:0a:16:51:43:72:6d:49:eb:9f:
b9:69:c4:8f:15:c0:da:06:bc:83:c8:cc:d1:b7:55:42:f3:6d:
7c:e2:6a:74:ce:7b:ef:55:8d:e0:7b:3d:44:f4:80:65:4e:97:
c6:3d:bc:ea:7f:b6:a0:c9:9f:e3:f5:ae:c5:9e:bb:70:ad:6e:
ed:e1:74:ed:c1:fa:f6:39:ef:00:7f:56:3e:41:5e:10:c3:ce:
17:53:4e:91:e2:86:95:ba:5e:56:26:2e:0b:27:77:15:18:80:
d3:df:20:54:0e:d4:91:97:bb:93:45:da:32:31:da:66:2f:4e:
44:df:bc:93:8d:64:83:bf:35:0a:57:b4:1d:3b:48:8d:d9:f6:
51:8a:a2:47:7c:37:65:e8:37:e7:a2:7e:1d:76:0c:76:2a:05:
74:d1:fc:1d:e6:86:b4:b9:4c:8f:56:9c:59:3c:75:9d:98:af:
42:05:02:14:2a:01:cb:0d:20:9d:8a:a5:34:f5:6d:72:87:5b:
33:5e:b1:aa:36:23:a9:47:1f:10:37:bd:39:e4:10:95:ee:2b:
9c:e1:c1:97:43:ba:52:e0:58:0b:6a:24:cc:c9:e2:3d:2e:e4:
8b:36:cf:2a:76:e9:aa:cb:81:d9:43:3d:e0:39:97:8f:8d:16:
de:62:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:19 2026 by rpki-client