
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier: 28Bmftf1fIzxkNuKdgUr1rX8ZTzo2kEF2BPb3bPUfMA=
Subject key identifier: B6:FD:C2:8F:AD:7D:94:85:E0:A3:78:4F:71:E5:10:25:92:90:E1:82
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial: 1769
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number: 175C
Signing time: Wed 18 Feb 2026 16:23:21 +0000
Manifest this update: Wed 18 Feb 2026 16:23:20 +0000
Manifest next update: Wed 25 Feb 2026 16:23:20 +0000
Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: eBs5qtVUgSdRjWFfMBelwlm7DqR5RiGLUsmlstWmEQg=)
2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5993 (0x1769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Validity
Not Before: Feb 18 16:23:20 2026 GMT
Not After : Feb 25 16:23:20 2026 GMT
Subject: CN=6995e779-fc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:9a:61:80:52:5b:79:f9:04:1c:98:a7:18:
e9:43:62:b6:0d:db:59:4b:aa:07:18:7e:68:e0:be:
09:05:31:6b:4b:2b:5a:25:7f:af:a6:18:17:13:1e:
4b:5f:28:d8:cf:1e:ed:69:60:a1:d3:37:c1:60:d6:
1f:2a:55:35:38:c8:e2:18:b8:b7:e0:ca:10:20:1c:
49:0e:c4:70:80:77:10:0f:82:67:9c:c3:fe:18:b3:
89:2e:36:e1:52:b7:c6:19:0f:9e:6a:86:08:5a:cd:
66:d1:aa:55:62:49:d1:de:24:5f:f5:dd:30:b7:e4:
7e:c4:25:3b:16:40:8c:41:8a:a5:5e:33:5a:4d:73:
a2:44:b2:9a:1d:90:37:0f:d3:c5:f9:61:3c:5b:c2:
d4:9d:b2:3b:54:7c:e9:44:aa:aa:dc:1e:3b:79:9b:
94:14:23:e5:fa:de:40:7b:72:52:6f:1b:cd:8b:20:
a8:05:8e:6f:15:b7:d6:f6:10:1e:26:9a:72:3a:88:
4b:f1:88:1e:ff:0a:de:3c:06:aa:53:9c:05:b3:2f:
c9:15:ac:a9:f2:c2:6c:0f:7c:10:8a:71:ea:53:54:
69:8f:91:83:73:5e:b7:d5:ef:9e:62:2f:83:58:b9:
77:0d:bb:de:5a:ed:9e:d4:7a:22:19:c7:9e:e3:82:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:C2:8F:AD:7D:94:85:E0:A3:78:4F:71:E5:10:25:92:90:E1:82
X509v3 Authority Key Identifier:
keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:25:58:91:56:d2:f6:8f:40:5f:8b:dc:47:5e:81:18:57:87:
22:dd:05:94:05:9d:20:d4:ab:d4:07:c4:6a:0d:2e:e3:de:e8:
18:c7:2a:bd:cb:91:6f:ff:3e:f9:3f:c5:92:06:97:de:81:a3:
89:1e:b7:b7:5f:41:76:9b:2f:5d:8f:d8:f3:18:72:73:84:41:
f6:58:78:49:a1:d9:66:77:3a:62:00:04:7a:cc:05:6d:84:44:
23:04:15:74:23:f8:b9:09:a3:b5:66:a2:8b:00:32:34:0f:98:
b5:e5:92:8a:c7:04:59:42:d5:42:7b:d4:df:d8:51:ea:15:6a:
7e:a5:ba:9f:7c:6d:29:f4:ab:7d:d2:ac:0a:f9:6a:d7:1b:56:
a6:d5:97:01:ac:ae:cf:af:20:28:73:2c:2a:98:bf:5e:a0:b8:
ac:84:01:80:94:ca:4e:1c:7a:08:7d:80:01:7d:c1:bd:37:38:
4e:40:36:14:bb:c2:87:69:16:fe:6f:84:df:af:29:fe:d5:0c:
b4:ab:9d:91:ab:18:6f:03:dd:f5:f9:1a:24:35:5c:3a:17:40:
5b:61:20:ca:2d:37:41:68:71:50:c1:98:6e:91:d0:4b:38:16:
2f:96:86:44:c6:97:8f:20:48:ea:29:fd:0c:59:e7:fe:7f:bd:
0c:99:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:37 2026 by rpki-client