
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json)
Hash identifier: yH1NOG2LKgO9ecqrXQ9ZqqQzZ3c2ch6WBdT4kYuFuIw=
Subject key identifier: 75:28:70:C7:C0:FD:13:57:18:D4:46:37:E7:75:C6:4E:A1:47:42:78
Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E
Certificate serial: 068B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
Manifest number: 067F
Signing time: Wed 18 Feb 2026 15:50:50 +0000
Manifest this update: Wed 18 Feb 2026 15:50:50 +0000
Manifest next update: Wed 25 Feb 2026 15:50:50 +0000
Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: AoktIhPxArhgZ+H2DxPRmH0SstetNuT4ysyH+IdT5Ns=)
2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: JYcdT8gc4SSOPp9mZ4cChcf87lzFLOtfwrJ4fYMBet4=)
3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: eSlTAoQ5k0fFKiHMdeu9X90T/rFtlTnA6Fx/5ofc1sU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl
rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E
Validity
Not Before: Feb 18 15:50:50 2026 GMT
Not After : Feb 25 15:50:50 2026 GMT
Subject: CN=6995dfda-1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:9e:9c:a9:c2:6b:f4:20:4e:b2:96:45:2f:
87:74:24:64:c5:45:45:c5:20:20:97:bb:c6:6f:6f:
a2:f0:a9:43:be:45:e0:20:b2:5a:da:7b:d8:13:9f:
d5:e9:be:4b:43:e2:67:4d:3c:b3:3c:2f:d6:14:4e:
12:14:58:2f:e9:ae:3d:47:dd:6d:e5:bc:0d:12:61:
9b:44:45:cc:70:19:04:95:37:4e:86:ae:6f:ab:69:
5e:59:b1:3d:d5:68:b1:90:a3:7d:41:f6:cc:90:98:
47:79:e2:03:30:39:7e:d8:c6:e6:4a:05:95:9e:e4:
79:8e:97:6f:f0:b4:b6:62:28:f9:a5:39:c5:e8:a1:
aa:34:2b:07:78:8c:ad:7a:78:ea:a1:9f:f2:a7:38:
59:cd:b2:f8:b7:03:9e:7b:4c:3a:0d:f9:5c:f6:24:
0b:e2:f9:e7:e3:64:6a:eb:75:ef:22:95:3e:70:b7:
32:0b:4c:b2:5e:08:49:91:c6:45:6d:75:aa:00:c7:
b6:7d:db:d6:4f:c8:f5:23:4e:e5:37:86:0d:c7:75:
5c:e5:b9:cd:04:8e:b4:be:54:f1:ec:ea:78:5f:46:
36:fb:8e:1d:17:f4:09:09:41:63:5f:d3:1a:34:46:
7c:28:98:68:a9:09:00:17:1e:7c:20:70:6e:1e:75:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:70:C7:C0:FD:13:57:18:D4:46:37:E7:75:C6:4E:A1:47:42:78
X509v3 Authority Key Identifier:
keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:28:4e:44:5b:3e:53:47:58:92:b4:be:32:bc:b8:cc:1e:9a:
93:37:a9:aa:7e:c0:ea:0a:d8:20:37:50:57:9a:29:46:eb:de:
cd:ce:c1:cc:f5:bd:9f:02:7f:1d:10:c6:b1:38:7c:f2:b1:42:
7e:1f:cb:fc:2e:87:77:c4:b7:3e:ad:cc:e8:6b:32:1f:d3:16:
40:5b:be:16:a3:e7:31:b0:2e:c8:e1:47:af:33:50:e9:51:cd:
2d:95:6d:21:d3:f4:8a:4b:f1:a5:75:7b:e8:8d:94:24:be:57:
79:67:04:eb:46:e1:ba:b4:be:a3:1c:f5:cd:5e:a8:4b:8a:6c:
9a:20:f1:04:ed:ba:7b:e0:d2:fe:52:d9:d8:14:cd:a3:c2:e6:
59:82:46:13:44:b1:d5:c6:b1:9a:f0:bb:78:05:8d:0a:15:3b:
b8:9a:99:cf:e9:f1:22:f9:9e:25:3e:91:3d:92:d1:f1:0b:af:
e3:53:b1:54:9b:57:4a:d7:97:8f:ae:57:d8:3a:58:3d:a3:45:
24:e7:ed:37:fc:f3:28:a4:f7:bb:c1:e7:fa:a2:fc:c6:50:59:
89:6c:50:70:cc:8d:22:4d:97:af:a8:ca:e0:8a:a4:96:05:e2:
6d:32:66:e5:af:fd:3f:b0:1d:68:ee:48:f2:b8:53:2b:09:54:
3a:fa:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:08:44 2026 by rpki-client