
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json)
Hash identifier: EI8Lbd5v2y6IoAjR4pmJ4dIDAw22iMy3QDt9qTzJmO8=
Subject key identifier: FC:78:C9:21:62:7A:6F:08:8C:FE:92:A1:20:9E:47:F1:D8:80:1C:E4
Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Certificate serial: 1EB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
Manifest number: 1E7C
Signing time: Wed 18 Feb 2026 15:54:28 +0000
Manifest this update: Wed 18 Feb 2026 15:54:27 +0000
Manifest next update: Wed 25 Feb 2026 15:54:27 +0000
Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: rE3AGlIrt4x15AJKDdWodX8tPCzowhcU9UZPLkH90vs=)
2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: zuUsKZCcjPOj5pM09o9z0mAoFhewcmu+fcIGUoGJ1jw=)
3: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: G/Ubv3z+VEdcNFiGQpNHf2mTf7Lsh6KdDEju5wCmKbw=)
4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: lSszTQ1c+gMLFVw7Gk7VDvJy/TEZ74hKfBC2kdiByE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7865 (0x1eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Validity
Not Before: Feb 18 15:54:27 2026 GMT
Not After : Feb 25 15:54:27 2026 GMT
Subject: CN=6995e0b4-851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:26:00:da:ff:13:ce:e3:94:fc:59:13:e9:
be:dc:6f:8e:f3:fc:49:19:74:95:e4:da:30:5f:18:
d6:2f:dc:ab:9c:b8:41:22:dc:1d:87:0d:e5:81:3f:
c2:d6:71:0f:b2:9b:2f:d9:9a:25:c5:fc:f2:df:62:
de:76:38:42:23:3c:9c:3a:18:76:bf:68:19:71:a6:
9a:ae:24:a3:7c:59:d2:b3:72:27:0b:99:d0:bc:8a:
72:0d:d2:bf:7e:15:01:f5:82:8b:1e:fa:af:1d:99:
53:f8:82:a8:1e:f0:0c:82:db:7b:1c:21:2b:91:e8:
c0:fb:a8:d9:13:6d:23:bc:db:80:3b:51:6f:a0:e7:
37:a3:9e:cd:ee:6b:33:57:24:f6:0b:9b:89:45:4a:
a7:1e:1e:cb:d3:da:da:3c:85:a4:ae:6d:5a:c2:83:
d5:92:29:4e:98:5b:c8:f2:10:4c:f1:12:b3:86:25:
2f:f3:b1:f6:b6:02:95:8b:85:21:27:cc:7b:84:1b:
2d:10:8b:cf:98:af:23:73:1c:de:5c:cf:20:69:ae:
93:24:3d:52:c8:8e:c5:29:4b:bb:6f:74:4e:4c:8e:
a9:fd:71:bf:f7:e5:ec:c3:16:96:07:0d:95:c2:a5:
17:37:7d:09:4e:71:dd:39:25:ab:06:7a:b3:15:d5:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:C9:21:62:7A:6F:08:8C:FE:92:A1:20:9E:47:F1:D8:80:1C:E4
X509v3 Authority Key Identifier:
keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c0:f9:d6:11:b3:ba:12:13:7a:a7:36:36:1a:30:7a:ce:43:
56:a8:76:9a:14:aa:a7:6f:38:72:21:3d:49:a9:ea:08:98:bf:
4f:1d:d0:46:a4:87:4f:e3:95:e3:4b:ae:d6:0a:39:7a:5f:60:
4b:b0:ed:df:a5:15:b2:d1:8a:47:ea:e8:10:d0:64:9e:12:5b:
44:12:8d:75:66:2b:91:40:63:64:42:16:39:e0:1e:d9:2b:5e:
52:70:52:4a:7d:91:47:9d:76:c1:2d:65:6e:fb:82:05:09:24:
7d:a1:13:cc:c5:27:5d:d3:0e:09:cc:53:fe:1d:73:2d:f0:84:
c4:73:34:81:53:8f:34:53:31:cd:57:67:fd:f1:46:f4:f4:38:
aa:b1:1d:72:97:1c:ee:00:4a:0f:a9:26:66:45:a0:05:9c:b5:
ed:bb:0d:10:30:3f:8a:95:10:3d:d7:88:75:9f:ea:9b:4f:47:
0d:bc:2d:56:11:8d:92:83:08:22:cf:f2:98:4a:f8:0e:ae:ee:
74:c3:f5:02:03:d4:21:36:7e:9a:ed:7b:ca:99:73:ff:fa:e0:
0d:f9:ba:d6:3f:a6:f6:37:6e:01:e2:92:07:2d:5b:0e:f6:b9:
7e:96:c5:78:4c:73:d1:13:41:02:c1:02:dc:60:5e:d2:3a:93:
58:86:f8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:23 2026 by rpki-client