
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json)
Hash identifier: VO0+YIDLWp/8fP847lasOzKW1IGMZRZFTJE3EnxRGwg=
Subject key identifier: 7A:3D:78:BC:50:17:53:11:DA:BE:92:B4:63:85:BC:78:69:76:77:65
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial: 0B3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
Manifest number: 0AE9
Signing time: Wed 18 Feb 2026 19:04:59 +0000
Manifest this update: Wed 18 Feb 2026 19:04:58 +0000
Manifest next update: Wed 25 Feb 2026 19:04:58 +0000
Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: Vw/fJUka5tifxFrD4yDAAoluTSAr/JGpZgSKstYZKA4=)
2: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: GD8TE1iM2Ym7f93p/1VYDkqCG50V4KFtJCkioUpH7AI=)
3: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: 5hsatirdoTAMt8sVP/32NV6rGnCIOasP2d6dKTsMLr4=)
4: B379B0346F4711EA81200366C4F9AE02.roa (hash: 34aVw5Rt72hNPVd0d/UxB/shSl9fnFPWjJTO5/uz5ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Validity
Not Before: Feb 18 19:04:58 2026 GMT
Not After : Feb 25 19:04:58 2026 GMT
Subject: CN=69960d5b-6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:56:4b:90:42:a2:74:ea:41:de:55:c1:ee:
3a:d4:e5:d3:de:e0:0f:10:4c:05:37:6d:1d:a9:08:
3a:d5:29:f0:d1:1e:b7:9a:bf:dd:4f:4b:00:9b:a1:
69:4f:f0:6f:2d:99:20:1b:b1:5a:d1:d0:0f:e2:93:
45:71:1a:47:f4:c7:2d:2f:d3:4f:95:e6:f3:56:f3:
d2:0c:4a:bd:82:3d:a2:a9:d8:ee:21:64:1e:2a:84:
b3:f6:7d:cf:d5:7d:2a:fe:d8:2a:b2:52:d4:b5:5e:
6b:50:79:53:ff:0a:59:e3:0c:f8:e8:66:7c:16:2a:
4a:c4:75:ae:11:77:27:96:89:b8:df:60:fb:f5:75:
ae:05:3e:01:91:0e:51:e3:c7:c0:5d:f7:6c:4f:1d:
86:fd:b4:6f:4c:ce:3f:cc:fd:5d:43:08:58:47:f3:
c9:ea:3e:9a:6c:03:05:63:94:05:20:36:09:62:1a:
83:95:8e:78:7e:86:fa:66:2f:9b:c3:e2:dd:a9:fc:
68:ca:07:ea:1b:71:24:31:12:4f:6d:17:8b:23:b2:
f5:dc:3d:0a:6f:3a:d2:18:9a:32:ae:99:06:2c:01:
4e:68:83:c3:8b:4d:ad:f6:43:1a:ba:21:be:f0:ae:
74:3a:3f:cf:f3:5b:18:66:d4:92:f6:5f:dd:89:99:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:78:BC:50:17:53:11:DA:BE:92:B4:63:85:BC:78:69:76:77:65
X509v3 Authority Key Identifier:
keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9f:5a:ab:45:b6:2f:06:8e:29:ed:5e:f1:e5:56:9c:a2:eb:
b0:e6:de:10:73:a0:cb:70:a6:26:c6:fd:08:be:cb:17:27:0e:
18:e7:53:61:7d:0e:3c:f7:db:03:26:90:75:34:6a:ad:08:ea:
9b:24:9f:0c:b1:68:a6:a0:a1:65:f1:aa:3b:e6:2f:b0:f9:51:
5b:8b:b3:a6:75:69:7e:12:13:a9:69:85:91:41:b3:36:10:02:
ca:7d:f2:89:24:72:15:d5:75:85:e3:40:45:9e:20:9e:20:49:
bd:70:f3:29:4f:87:41:67:44:f3:ff:e3:c6:72:a7:b7:2d:da:
be:c0:1c:c0:38:9a:78:3a:8c:a2:4b:82:ed:b7:b3:c1:6d:5f:
e3:3f:03:5b:9d:48:72:9a:e0:ef:45:61:28:ef:e8:30:4e:5a:
e5:6b:76:6b:d0:22:62:32:25:1e:31:1b:60:b9:16:d0:92:50:
20:5e:e8:21:90:42:eb:61:43:2c:34:57:c9:31:7c:1e:ae:8d:
f2:68:d9:ec:94:cf:b0:33:22:89:f8:f5:a5:04:25:e0:76:44:
28:5d:ca:5f:28:48:12:ff:c3:20:1f:f1:8a:06:7a:e4:2b:e7:
9b:77:e6:8b:7d:2c:65:21:b6:2f:65:de:f5:0c:3b:1d:df:29:
33:78:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:19 2026 by rpki-client