
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json)
Hash identifier: UzJm9IRLV+HnUZ1WJE086q61f55hSBiqUXFPSLRICdw=
Subject key identifier: 1F:C8:4F:FB:F8:12:7C:6C:43:41:2E:C9:4C:70:5C:1E:26:84:2F:DA
Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
Manifest number: 024E
Signing time: Thu 19 Feb 2026 01:07:48 +0000
Manifest this update: Thu 19 Feb 2026 01:07:47 +0000
Manifest next update: Thu 26 Feb 2026 01:07:47 +0000
Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: PYRVDaEIRJfsXSvacTMp/WTXWv0mb1loyTvoX/ZUHXE=)
2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: FG8mZ0xSMI661bwpz8jXY8dYE+DuRrKVmBGsSUwXpCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Validity
Not Before: Feb 19 01:07:47 2026 GMT
Not After : Feb 26 01:07:47 2026 GMT
Subject: CN=69966264-c1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:74:3d:b5:24:59:bc:5c:ed:ef:67:2a:bb:
39:dc:0e:d8:ae:d5:ec:ae:6b:7f:7f:b0:0a:47:d7:
d9:49:47:a1:af:c1:4d:65:6d:4c:9f:0d:9a:64:d1:
48:34:c2:c9:92:ad:c9:21:ec:7d:d3:22:4b:98:ea:
7b:07:54:7a:75:7f:f1:ba:ea:b2:97:e4:4f:d7:17:
9e:d8:a2:0b:2b:e5:69:86:9b:ba:4a:49:5d:b5:81:
79:07:d6:70:b7:3d:2c:4d:58:d7:0d:9e:f7:9e:3c:
2e:db:a8:c6:5b:0f:c5:35:49:a9:7d:6b:ec:a9:eb:
c0:6b:1d:28:78:2a:7c:8b:28:47:d5:bc:e8:c5:c5:
a3:58:9f:63:3f:c0:ed:79:6a:bc:af:2a:86:11:8d:
bf:9f:af:0b:79:c2:a5:83:0b:bb:8a:5e:a6:97:31:
47:4e:cd:cd:58:2e:38:c0:f4:21:a6:18:c6:fc:d4:
0c:6a:88:39:64:6b:81:b3:05:e5:dd:a5:0c:73:d9:
7d:d6:f5:8e:d5:1c:27:6d:ee:c3:51:4d:5d:2a:31:
41:92:2b:cf:37:b1:56:05:35:d7:02:6c:7d:68:50:
91:a9:ba:62:50:db:96:9f:8b:e8:15:22:d6:0e:90:
a0:41:44:e3:d4:ad:06:1e:1a:4e:0f:b3:0e:b2:f7:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:4F:FB:F8:12:7C:6C:43:41:2E:C9:4C:70:5C:1E:26:84:2F:DA
X509v3 Authority Key Identifier:
keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:fc:d5:f8:c2:8d:7f:5c:29:4b:bf:d9:db:63:d1:32:1f:19:
96:64:2a:b3:4a:a0:31:74:b5:35:e7:00:0d:cf:2f:33:1e:66:
8c:03:2e:69:3a:2a:64:27:15:1a:13:eb:09:4b:4e:ff:13:fd:
b4:19:6d:fa:06:11:0b:a8:c0:03:0d:81:f9:9a:f2:26:06:b7:
f2:33:04:42:f2:6b:40:69:39:f6:cc:bb:dd:46:e9:aa:f2:ac:
49:99:05:2a:75:49:7c:cd:49:8e:8e:1e:a9:e2:26:05:77:61:
5e:a6:a1:c8:9a:8f:65:6b:0d:c3:fe:ab:85:37:7e:19:fe:29:
77:5c:7d:d2:ca:99:af:da:d3:3a:c5:bd:db:76:84:bf:19:af:
99:b9:68:44:3f:93:84:c1:5d:34:99:d0:a3:bd:fd:31:08:ce:
86:30:42:1b:c0:a1:5c:1d:30:04:b1:2e:33:bd:26:a9:ff:c4:
ca:40:f5:4c:5d:1f:70:8d:84:05:e5:0e:f5:6e:6c:dc:78:bd:
6d:a4:d3:40:a2:8e:3a:78:e9:cd:48:bb:12:d9:91:ce:1c:7b:
f5:11:10:a9:82:82:f5:45:6c:60:bc:8c:39:56:88:9d:fd:4a:
3e:07:3b:13:2b:f8:83:99:4c:4b:20:63:c3:10:a8:e5:3a:15:
8a:ef:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:34:03 2026 by rpki-client