
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json)
Hash identifier: gy9eYkd2mijvqSnFKys6mu+tgMsbOiLMickbDHebYrk=
Subject key identifier: E8:B9:D5:CB:87:23:5C:09:70:DC:B5:7A:BF:B6:97:3A:7C:5D:8F:FE
Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
Manifest number: 0193
Signing time: Thu 19 Feb 2026 02:56:31 +0000
Manifest this update: Thu 19 Feb 2026 02:56:30 +0000
Manifest next update: Thu 26 Feb 2026 02:56:30 +0000
Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: 3jmWP/Z6ApDjBoTIWBQE3Um5Ap5IyDvoNrsulleKgFU=)
2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: da2ZawdG5alxBTyeAyi7NwDwyDeUsxgI6h/wI95o9Ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Validity
Not Before: Feb 19 02:56:30 2026 GMT
Not After : Feb 26 02:56:30 2026 GMT
Subject: CN=69967bdf-3c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:e0:c6:36:36:0a:cc:bb:69:3a:5c:02:dc:
86:17:78:06:52:ee:2a:ce:fd:02:a3:24:18:de:ab:
e7:55:1b:97:c4:cb:c1:e1:5b:c5:91:ab:37:30:0b:
5b:07:e8:20:75:7f:ef:f4:70:91:1a:b0:07:0c:b5:
63:9f:fb:32:cc:46:33:7e:0a:9d:1e:92:31:35:eb:
7e:37:73:1f:06:6b:82:d9:d7:75:5b:59:20:c2:06:
f1:fa:d0:2a:e3:ca:54:81:d2:6f:1d:46:76:ec:9d:
96:2b:89:dd:79:f8:72:bc:25:1d:55:00:0b:14:26:
4b:65:83:96:67:3b:00:a1:c2:77:a1:2e:ad:91:08:
dd:a4:1b:c0:92:15:83:08:09:49:8f:53:6c:26:0c:
e3:93:fa:cb:f8:fa:61:cc:eb:a4:94:6c:eb:6a:77:
72:cd:da:fb:71:b1:05:aa:9f:45:ab:f1:b2:a0:99:
61:8e:66:63:d6:4a:1a:3a:3f:cb:69:4f:fe:84:6b:
20:14:60:e3:a1:13:69:08:aa:cc:fa:9c:a5:0c:ba:
a4:75:c2:d4:d9:9b:10:2a:37:c8:e4:30:72:93:fa:
0e:d7:13:f0:9a:19:16:73:9a:82:2f:50:8c:03:8f:
38:20:76:85:ee:92:2b:ff:60:a4:07:00:43:ed:6f:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:D5:CB:87:23:5C:09:70:DC:B5:7A:BF:B6:97:3A:7C:5D:8F:FE
X509v3 Authority Key Identifier:
keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:e3:cb:81:32:2a:92:65:1e:27:7c:58:8e:1a:6b:0b:39:58:
f0:4c:d3:45:f1:d4:e3:b5:64:8b:fb:dd:5f:f8:71:e5:f0:6a:
f5:41:54:60:86:32:ff:8c:fb:aa:45:87:03:f1:91:98:a0:94:
13:10:c9:12:67:c7:dc:ce:78:b9:df:a6:45:c6:da:f2:fa:0b:
7c:8c:c8:fb:61:b1:bb:a9:a7:af:2b:05:e5:10:94:91:e2:5f:
68:c3:aa:a6:c1:fe:82:c3:b1:03:89:24:f6:f3:68:e6:30:c9:
ea:e7:e1:52:64:ca:8e:1d:40:be:c8:58:a3:ad:f4:61:82:a9:
67:5b:b3:e8:5f:e1:3e:84:2b:b1:50:c2:14:2c:fe:57:1c:3f:
20:06:d4:d3:81:f5:cb:23:1b:32:46:02:28:fc:bc:ec:8f:08:
44:76:64:d7:cb:be:c9:74:7a:c4:33:4e:71:02:09:80:3d:b0:
8b:b9:b6:17:7b:bd:e1:1f:01:85:6d:85:ad:c0:d5:8a:13:75:
49:b7:21:12:ec:68:a7:37:5e:f5:bd:60:2c:c3:99:00:62:62:
5f:85:49:e2:3c:f0:95:13:aa:56:1e:4a:76:37:12:07:c3:e3:
1f:ed:d2:42:71:bf:7f:31:c6:08:d8:78:21:45:6e:95:ff:25:
06:8c:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:47:54 2026 by rpki-client