
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier: TcK2LMhDs0835DiBW1SsXH6x0r3AoNKSIueG/DLj8Lk=
Subject key identifier: 7F:B1:70:CC:9E:F2:59:4C:FA:D5:09:3D:F0:C5:07:63:2E:E1:0E:BE
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number: 01E9
Signing time: Thu 19 Feb 2026 02:06:14 +0000
Manifest this update: Thu 19 Feb 2026 02:06:13 +0000
Manifest next update: Thu 26 Feb 2026 02:06:13 +0000
Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: WBcXB+KLIKAHi2WrDIv79XsEnjVaBPxg9VoaZa7BJjI=)
2: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc=)
3: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: XO+ul7lF7sjvsPZ/wUsLZ1kf4agxiZYpp0ew7HMRh6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Validity
Not Before: Feb 19 02:06:13 2026 GMT
Not After : Feb 26 02:06:13 2026 GMT
Subject: CN=69967016-09d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:06:93:ce:7c:6d:1e:5a:4d:8b:eb:1b:94:
86:e5:78:b3:31:cd:ef:96:cc:09:75:cb:f8:96:74:
99:67:5f:26:5b:15:67:fb:ba:11:7e:de:60:26:1d:
0c:5e:0d:12:db:4d:8c:a8:d3:29:b7:73:f8:20:7c:
70:98:b4:15:98:30:d7:28:e8:82:87:1d:a6:6f:90:
dc:e0:06:9e:7e:94:0a:3b:8c:9c:ef:59:f9:fd:95:
58:1a:6c:7c:7c:f6:f6:e2:4c:ba:5d:de:7a:6e:98:
3d:ce:b0:19:16:f1:f8:eb:4d:29:d8:72:fd:38:4a:
bb:42:20:f6:dc:3f:31:34:f8:70:2d:c4:54:a0:9c:
07:74:d9:ea:e0:7d:36:42:58:9b:54:e8:cf:7e:fa:
83:35:58:a1:62:1d:f0:81:ef:19:c3:63:59:a2:58:
60:11:70:9b:4b:40:b9:87:ae:21:40:89:f2:a8:02:
a1:f4:d1:01:bf:90:d1:95:b1:3a:a4:9d:65:04:22:
a6:ca:9d:27:99:f8:fe:5a:1e:d2:01:42:df:d8:4f:
60:aa:a7:7a:21:ae:87:76:a4:b2:51:48:33:02:f2:
8b:01:cb:2a:3f:f7:11:f3:04:9c:cd:e4:25:cd:3c:
c6:f8:a7:05:6e:ce:9a:95:57:6c:ba:67:bd:2b:84:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:70:CC:9E:F2:59:4C:FA:D5:09:3D:F0:C5:07:63:2E:E1:0E:BE
X509v3 Authority Key Identifier:
keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:40:de:2e:e3:df:0c:74:1a:c9:d6:2f:7d:73:15:4f:d9:bc:
ad:0a:d3:e1:3d:58:c1:3d:46:fb:97:ca:77:f0:0d:c4:16:8d:
39:5b:a9:ca:80:7d:53:9c:21:cc:23:f2:6d:8d:cc:a6:9c:fe:
06:bc:05:c9:df:41:e3:37:7f:f5:bb:41:56:ba:3c:cd:24:24:
70:a0:63:ba:2d:ce:a2:a3:fb:f8:c8:f5:03:b2:14:82:a3:f4:
fd:4c:6e:b4:48:ed:2c:32:7b:be:ef:98:84:6b:82:50:94:1f:
d6:a1:e6:27:b0:36:14:b1:8a:b0:c7:0a:2d:ad:4f:ea:0b:8a:
c1:d9:b2:f4:35:c8:e9:88:cf:3d:66:e0:f3:46:fc:f6:ed:e4:
d2:4d:35:39:34:97:60:7d:da:b0:2e:6f:61:03:37:95:86:18:
cd:fe:c1:ce:0a:8d:d5:34:e7:8a:65:4c:1e:6a:5b:66:82:eb:
d4:2c:74:87:7e:37:e8:7f:b0:cc:d3:0e:56:17:4e:09:26:5c:
d1:26:cc:c9:31:4b:c5:db:46:7e:87:ff:23:e0:b2:11:49:52:
7e:cc:5a:b0:8f:cf:a0:31:7e:8b:1c:ee:6b:45:4f:54:d7:40:
5d:b1:1e:fd:3b:12:1d:c0:d0:45:b2:a1:29:03:d9:e5:f0:b9:
18:d5:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:12 2026 by rpki-client