
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json)
Hash identifier: h36U2nZH9CTtIm4ZMWDpuYIl8cjtcxd2t/uvL6tSAzE=
Subject key identifier: 38:0B:72:47:2C:54:4F:89:42:FA:D4:AD:0C:58:AB:DC:9D:B2:3F:0E
Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05
Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
Manifest number: FF
Signing time: Thu 19 Feb 2026 04:32:31 +0000
Manifest this update: Thu 19 Feb 2026 04:32:30 +0000
Manifest next update: Thu 26 Feb 2026 04:32:30 +0000
Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: eChcr9mDAThblyaTsrFNFI4VCtX0esYuY6G2rEee3TA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl
rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705
Validity
Not Before: Feb 19 04:32:30 2026 GMT
Not After : Feb 26 04:32:30 2026 GMT
Subject: CN=6996925f-b6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:53:7a:79:42:80:83:7d:c5:24:64:1c:65:
da:48:13:f0:71:57:c0:c9:0d:86:dc:55:c6:71:73:
e0:ad:d1:1b:ab:3b:91:8a:56:f2:b4:44:37:30:22:
40:df:17:a7:94:67:a0:5a:7e:6c:b1:c6:11:94:bf:
59:7b:2f:ed:06:44:6c:35:a7:19:33:0b:14:d9:ab:
3d:c3:0f:a3:3a:b1:43:d0:7f:ae:46:ce:8c:4b:3b:
65:1a:57:20:d4:e0:ec:8e:cc:d4:f9:b3:88:37:20:
9d:46:d1:69:b2:2b:7f:45:44:88:d3:6e:e7:99:88:
ab:7e:6c:2d:36:a7:d2:7d:41:02:ef:b4:b4:f3:75:
c1:85:68:64:4b:58:90:31:3f:eb:9d:fd:e6:21:b7:
9d:b0:76:bf:e8:54:47:97:7e:15:00:cb:66:10:d3:
d8:28:08:e6:1f:0d:b4:2a:ff:ea:d3:7d:e6:85:67:
a9:76:4e:a1:16:48:5b:3a:b5:45:9b:ab:be:dc:51:
cd:9a:1d:2e:d5:27:e4:ce:07:3c:e5:05:d9:4f:b1:
23:57:72:2b:16:86:01:e3:c8:84:b1:de:a5:fd:f2:
bf:bb:72:78:dd:4d:0e:0f:6a:64:3f:b8:a5:18:16:
0e:ad:9a:83:9f:d7:eb:e7:4c:33:af:c9:37:80:77:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:72:47:2C:54:4F:89:42:FA:D4:AD:0C:58:AB:DC:9D:B2:3F:0E
X509v3 Authority Key Identifier:
keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:72:66:27:39:98:f8:e9:44:a3:02:db:23:6f:d3:6a:64:ea:
53:65:99:52:72:5f:8e:71:4d:5e:22:a4:38:fb:eb:93:e9:b2:
90:64:6a:67:b2:65:4d:3a:29:c3:c7:5b:d7:33:65:90:fa:85:
9b:ea:a0:a8:b5:f9:61:aa:2e:1a:a1:6a:4e:0e:fd:df:dc:f9:
f1:14:ca:56:10:4a:c5:34:d5:1b:d4:ad:0c:78:62:0e:a3:b2:
f9:0c:02:3a:23:5d:a8:b0:40:bb:32:a0:c9:72:cf:71:2d:a3:
9a:0a:35:b8:51:ad:52:73:fc:18:68:e1:14:83:13:ad:82:2c:
01:0d:74:ab:cd:17:fb:6c:5f:63:c6:2e:2b:9f:44:5e:c4:61:
e5:93:ad:4c:78:b3:52:17:5d:21:22:64:9b:95:d6:0c:25:a7:
a5:1c:6d:71:42:ea:2f:92:fb:af:66:3e:95:e2:90:78:1d:63:
7f:f2:0a:1e:70:df:df:29:fe:49:9a:dc:04:ed:60:9b:0f:c0:
5c:30:6a:a4:a2:08:7d:8e:5c:c6:fa:55:70:cd:45:41:d8:1d:
3c:0f:69:fb:6a:3a:a8:c7:1b:de:20:1d:58:ba:da:eb:32:67:
a4:20:f9:7c:01:f9:63:9a:4c:98:25:32:b1:40:14:f0:72:b3:
5c:e7:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:29 2026 by rpki-client