
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json)
Hash identifier: KAi7UruwIGm4YKcY3itcBRhLKwNA8tB45GWJkMZ1Zsw=
Subject key identifier: F4:D4:4D:16:34:22:AE:87:31:D7:5F:D7:16:77:6C:A4:2E:48:01:F8
Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Certificate serial: 1654
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
Manifest number: 1646
Signing time: Wed 18 Feb 2026 16:30:07 +0000
Manifest this update: Wed 18 Feb 2026 16:30:06 +0000
Manifest next update: Wed 25 Feb 2026 16:30:06 +0000
Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: qAgy4GSDYK5NSdcIrw2+S7C2vaF/u7SG7MkvkWj0wrc=)
2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5716 (0x1654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Validity
Not Before: Feb 18 16:30:06 2026 GMT
Not After : Feb 25 16:30:06 2026 GMT
Subject: CN=6995e90f-826c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:4f:56:0d:b0:b6:48:80:aa:be:ac:c4:81:
d0:75:34:31:13:9b:65:eb:83:90:81:18:bd:8f:43:
7b:53:1c:98:7e:26:0c:c3:52:49:40:6b:77:55:26:
77:17:a2:41:66:cb:06:df:54:5a:c9:43:b7:22:92:
18:bf:7d:82:c3:d5:04:94:df:3c:b3:4e:84:f5:7a:
c0:8d:e2:aa:e2:b4:de:f3:15:74:6a:46:71:39:1d:
8a:d8:6c:88:ac:a2:57:88:ae:e0:33:09:92:97:4c:
bc:7a:5a:71:f5:62:c5:ff:68:99:22:72:d1:87:23:
e5:b1:22:93:d2:24:57:5c:d1:a9:62:9a:34:d9:56:
65:76:00:c7:c2:fe:2b:83:99:b2:d2:72:8d:2d:a1:
22:6f:06:df:71:d7:fb:3a:5a:35:0b:7b:9d:5d:87:
55:dd:c9:86:2f:39:14:72:63:f1:aa:b9:e8:c9:a5:
7e:a1:cb:e3:1a:c7:12:a5:03:3e:1e:03:57:e4:86:
6f:e8:20:b7:b2:e1:0f:a9:4c:6b:2d:ac:75:bc:c2:
d2:3b:ce:36:1f:c8:2f:cd:12:13:ec:6f:76:f9:f3:
a8:55:73:24:f8:0c:4a:66:e5:c9:40:6f:d6:69:4c:
b5:a1:98:4c:87:33:38:df:d2:00:6f:1a:ff:db:24:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:4D:16:34:22:AE:87:31:D7:5F:D7:16:77:6C:A4:2E:48:01:F8
X509v3 Authority Key Identifier:
keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:ec:43:41:17:77:86:d6:26:b8:64:83:15:28:c7:21:cf:04:
34:1d:55:d9:0f:2d:1f:e6:d6:7f:24:7e:01:5d:4e:53:36:bc:
68:cc:2b:78:18:f2:b0:15:36:49:84:fc:55:b5:a6:dc:a0:a4:
61:a4:94:e5:cf:a6:30:e2:3f:ef:04:7e:42:cd:36:c4:70:e5:
08:35:67:a1:2d:67:00:e9:a0:df:f5:e8:33:55:71:19:e4:ec:
b4:e1:d1:9f:f3:0a:ea:4d:99:af:e2:fa:ff:1a:d6:99:3c:a0:
9c:88:c9:d4:e7:2e:3c:5a:6b:c5:a5:e6:0f:7e:a9:a3:ef:22:
0a:9a:11:4e:c0:fb:14:c1:e0:55:14:fd:00:25:59:75:bf:2e:
3a:90:4a:59:f4:49:62:df:6b:ab:cf:35:f1:15:f3:be:42:13:
d1:33:ee:4b:b9:78:95:d8:90:14:b1:31:0a:f5:b6:90:23:f0:
10:20:bc:dc:73:a6:55:38:1b:6d:5b:77:90:49:00:76:ef:82:
92:43:1c:52:4d:2d:73:32:2e:ac:1f:2f:58:ac:69:61:19:ba:
e6:9a:c3:fb:79:09:ae:db:49:69:04:fe:81:7f:34:d2:a8:2d:
31:6c:59:00:39:75:8b:d9:5e:70:55:20:d7:84:ba:61:9a:57:
d2:e0:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:23:46 2026 by rpki-client