
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json)
Hash identifier: U16FhWen+sTo/hVtyFAljU7UqSEbOnZHS5I+Xn+C/A4=
Subject key identifier: D8:7B:97:11:72:02:46:03:DA:28:DC:B6:E6:A8:36:3B:57:D4:7F:6D
Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
Manifest number: 56
Signing time: Thu 19 Feb 2026 06:25:43 +0000
Manifest this update: Thu 19 Feb 2026 06:25:43 +0000
Manifest next update: Thu 26 Feb 2026 06:25:43 +0000
Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: mRg2qgeZkrv3Z2lpHMioTv1WPhHx5uRvMrM2MQ4YtzU=)
2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Validity
Not Before: Feb 19 06:25:43 2026 GMT
Not After : Feb 26 06:25:43 2026 GMT
Subject: CN=6996ace7-36fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:a7:21:54:ff:6e:b0:b2:d0:ad:88:93:09:
d7:e2:6c:92:72:eb:8f:a2:52:e3:f0:eb:18:01:f1:
56:6b:8e:57:63:45:cf:d8:41:2a:81:56:84:1f:a4:
26:58:e2:7b:76:05:6b:f8:40:c4:59:fd:03:ff:70:
bc:ea:91:b4:1a:71:9d:38:61:d7:fe:08:fc:26:62:
89:a0:0d:b5:7c:a4:f1:55:a5:ed:db:b7:10:3d:84:
49:7a:ce:d7:dc:07:01:58:cd:3a:6d:27:19:b6:24:
8c:78:fa:fb:29:87:3c:f9:d2:cc:67:fb:ed:74:17:
74:79:b8:c9:9b:b2:01:fd:29:4c:0f:9d:bf:74:d2:
ef:64:e6:55:39:34:d2:df:aa:f9:cf:44:42:31:f4:
05:04:cc:28:68:6b:a2:42:df:68:6e:a2:23:1d:65:
b8:23:0c:39:ce:03:9b:bb:4e:74:cc:21:85:b0:a6:
85:5f:3e:01:1e:34:49:a0:db:9a:32:a6:96:62:c8:
98:46:e0:05:ca:31:a6:48:eb:68:be:f3:9c:42:45:
79:55:94:a0:01:76:a8:15:8f:13:11:22:fb:1d:ba:
37:47:92:30:cf:a0:f7:f7:a1:82:aa:9b:0b:01:7a:
a8:23:2c:ed:3a:bd:8e:62:62:03:ae:86:2a:85:59:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:97:11:72:02:46:03:DA:28:DC:B6:E6:A8:36:3B:57:D4:7F:6D
X509v3 Authority Key Identifier:
keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:01:47:9c:53:a1:59:2e:10:01:d2:e4:82:ab:f4:81:87:cf:
cc:d0:74:85:54:b6:de:bd:54:ed:84:58:3c:ea:23:fd:40:7e:
ee:a7:dc:03:21:b0:59:cf:04:97:1e:55:e4:f2:ba:fc:2b:a2:
88:0c:88:b6:81:98:31:ff:28:f1:94:40:2b:8f:92:d8:60:ef:
eb:b9:fb:71:45:07:10:59:b3:a8:3b:01:a1:78:16:81:12:16:
8a:ad:7f:fb:30:43:be:78:2f:bd:ae:b0:09:e2:c6:dc:39:a0:
55:b3:2d:fc:56:bb:90:ef:13:50:77:b6:ba:aa:b8:82:31:83:
c1:88:15:74:77:9e:14:72:19:2f:55:17:eb:77:3f:31:89:c8:
0f:32:58:ea:a1:5b:42:cc:dc:ec:c6:45:c9:bf:4e:0d:24:67:
7b:74:ef:0f:31:76:1d:dc:62:36:02:3f:af:cf:a9:56:62:ab:
8e:9e:79:cf:b6:76:13:b3:ff:ad:37:91:e4:cc:f5:b2:7b:f2:
a8:58:c3:ca:f5:73:50:20:f8:d1:b2:f9:51:bb:f9:5d:bd:a1:
c0:09:bf:0f:6e:2f:78:6d:85:08:f5:6e:02:0f:50:9d:19:24:
a9:7e:a8:57:c9:6c:e0:ca:fe:22:3d:7c:23:a5:57:d6:44:be:
89:48:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:53 2026 by rpki-client