
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier: NZBEnQcBlnezcOKOsN/bm9gNGsgRA9gm+qHuePLz8m0=
Subject key identifier: 8A:E9:7D:45:C5:CF:BC:E0:FD:80:A9:96:5E:17:CE:71:87:1C:97:59
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial: 0389
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number: 0389
Signing time: Thu 19 Feb 2026 00:00:20 +0000
Manifest this update: Thu 19 Feb 2026 00:00:20 +0000
Manifest next update: Thu 26 Feb 2026 00:00:20 +0000
Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: jKp5jwqZYDEDYcd8zqCWzj90pfQ/9Ns7WLLq/Di1Dws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Validity
Not Before: Feb 19 00:00:20 2026 GMT
Not After : Feb 26 00:00:20 2026 GMT
Subject: CN=69965294-8980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:52:24:47:70:dd:e6:b9:a1:0a:bf:eb:d7:
c5:b1:dc:bc:f6:b1:aa:7b:cc:c5:9e:09:87:2c:bc:
15:68:d7:73:ff:96:29:ce:10:93:6a:80:ed:4b:32:
73:23:30:4a:b5:c0:1a:03:84:a1:0d:12:c1:43:37:
25:84:d5:ba:c4:17:71:f0:7a:c0:a9:65:73:0c:97:
2f:31:4b:c7:7f:b0:39:28:79:67:89:e9:7f:30:87:
35:47:1c:4a:8c:fd:af:06:65:ff:6a:50:94:cb:1d:
ad:4b:26:76:82:92:45:1c:7f:9a:b0:3c:b2:be:65:
13:0e:42:45:5d:1b:b7:56:f5:b1:e0:38:23:3b:4d:
e4:4d:7e:36:3e:0e:80:5e:f3:17:ae:4f:5b:1e:04:
e6:98:87:6b:32:68:09:cb:be:b6:9b:32:a7:e7:84:
83:32:45:d1:cb:f6:28:ba:de:c1:50:52:e4:c9:81:
e4:15:91:51:2b:47:4b:f0:7f:27:7b:df:64:77:23:
0c:e6:cd:23:42:97:99:17:04:de:2d:5a:56:6d:0f:
21:83:91:e3:4a:7a:47:f3:65:a1:f8:6c:1a:c3:71:
cf:cb:b4:3e:14:0c:be:86:40:27:dc:9a:cc:79:48:
ac:12:47:46:92:24:b7:b4:4b:76:c7:3e:9d:a1:34:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:7D:45:C5:CF:BC:E0:FD:80:A9:96:5E:17:CE:71:87:1C:97:59
X509v3 Authority Key Identifier:
keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:10:2e:42:b3:1f:d4:e7:1b:e5:20:9f:c3:0c:4b:62:93:35:
76:35:76:e9:22:c4:d9:50:c2:54:b8:be:3f:37:50:84:10:78:
39:2e:4e:e9:b8:36:7d:fe:2c:26:b5:d8:94:01:83:b3:b3:48:
eb:df:05:44:04:86:3f:c2:a9:0f:78:89:53:ef:f4:74:e3:48:
68:54:25:02:18:e5:d2:31:cd:2c:3e:d7:97:8b:4e:f0:3e:69:
16:68:ce:e6:8c:66:8a:01:73:56:69:4a:44:dc:81:2a:c6:29:
f5:f9:02:16:0b:ff:95:6c:ed:0c:09:1a:ec:f5:d1:c9:a9:13:
36:db:89:4f:12:b6:65:fa:64:b5:a1:9d:ab:e0:bc:e0:df:01:
36:71:72:4a:f1:df:d5:6e:fb:df:cb:82:9e:c7:f8:1c:c2:17:
f8:96:38:c5:91:b0:65:0e:b3:78:61:40:72:14:95:a0:3e:7f:
c4:3d:e4:ab:46:f0:15:16:01:1a:81:0a:92:6a:8f:52:81:ce:
fb:18:c3:44:e6:b6:f2:bb:46:7e:31:23:f0:10:74:73:c1:f7:
4e:f3:78:a8:81:64:be:a1:ae:78:78:04:c8:ab:a3:ed:fa:84:
74:4f:83:c7:fc:2b:8d:72:9e:23:09:c6:07:33:85:63:0b:ba:
78:72:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:00:38 2026 by rpki-client