
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json)
Hash identifier: y+XJwdSGXeO+erBYp8WG79pm5h/NWaQGWLGI7UGQS94=
Subject key identifier: 01:E3:32:59:8B:40:B1:63:AA:5F:7E:66:BC:80:EA:14:EA:B7:00:27
Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA
Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
Manifest number: 47
Signing time: Thu 19 Feb 2026 06:35:35 +0000
Manifest this update: Thu 19 Feb 2026 06:35:35 +0000
Manifest next update: Thu 26 Feb 2026 06:35:35 +0000
Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: 3GjrdX3AbF9yAoBsVmNrQDiEAsUWhMkg/NbseL+ECCg=)
2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl
rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA
Validity
Not Before: Feb 19 06:35:35 2026 GMT
Not After : Feb 26 06:35:35 2026 GMT
Subject: CN=6996af37-0600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:bf:54:7c:1d:20:1e:83:b7:9a:9c:45:66:
cb:bb:f0:7c:5b:0e:8d:2e:a4:47:6d:d1:e2:08:25:
7d:a5:1f:e4:ec:1b:6b:a8:91:19:f8:62:d3:e1:99:
a8:da:01:1f:45:2c:a4:42:a1:89:4b:c6:eb:6e:89:
02:a4:b9:13:7e:69:ea:3d:d6:e9:16:d7:84:d7:22:
c3:61:5e:28:e6:58:a5:0e:72:90:4d:0b:9c:6f:d1:
d5:aa:5e:3d:67:e6:f4:2a:d2:91:0c:25:36:8e:52:
e1:33:22:06:98:5d:d8:82:c8:02:2d:06:96:1d:2b:
20:34:e3:b2:0e:3c:80:74:ab:8b:4e:23:3b:19:71:
2e:95:11:93:3f:1e:6b:ec:f7:00:57:55:e3:b3:37:
30:60:aa:a8:b9:6c:d0:1d:54:49:06:11:8c:28:90:
6d:47:e9:cd:02:f3:d7:d9:b9:be:e6:0a:b3:af:11:
a3:e5:5b:d6:89:ca:b7:ab:b4:f1:17:06:e7:28:37:
9f:2b:a7:c8:4f:a5:8b:99:f4:46:2e:a1:4c:b0:90:
a3:15:0d:3a:dc:1d:2b:70:ba:af:b7:a6:86:39:72:
22:4f:c0:04:1d:f0:fb:39:cc:6a:65:8d:aa:ed:76:
f5:39:82:5c:e1:13:85:c6:a7:4a:a6:5a:f4:33:ed:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:32:59:8B:40:B1:63:AA:5F:7E:66:BC:80:EA:14:EA:B7:00:27
X509v3 Authority Key Identifier:
keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d4:8f:dc:a9:6e:94:44:ad:2f:79:6c:0f:95:cc:15:4a:e8:
ea:eb:84:8d:17:22:c0:58:d3:03:41:a0:ab:9c:be:71:1c:22:
2b:2e:f6:2c:60:03:e1:ea:3e:f3:33:c8:d0:7a:2d:f9:a6:30:
61:cf:d4:65:34:2f:bc:c7:66:f7:78:ab:cc:5e:66:e2:42:0a:
8a:a6:fb:e9:9a:1d:4a:ce:3c:07:7f:c5:b5:ad:9f:cc:36:02:
8d:97:c6:2d:74:5b:90:ae:1b:14:2c:a1:a3:05:1d:42:6c:36:
e0:ef:a4:a6:29:d9:b3:b1:77:75:a8:67:b5:3d:6c:84:a2:d1:
ff:29:9e:48:2c:73:06:87:4f:a6:2e:5b:26:62:4f:d9:61:ee:
ff:23:ac:a5:83:31:6f:3f:24:cf:5c:2e:33:be:06:8f:4b:4d:
fe:b4:ff:5b:8d:02:36:4f:bb:03:23:52:41:54:46:ec:20:4c:
26:60:9e:d5:c0:eb:28:36:c3:94:e6:a9:13:8d:31:fe:96:07:
a7:c3:23:7e:56:c8:4c:58:6f:14:99:76:4d:83:f8:91:42:16:
1f:ca:f0:37:79:5a:21:f6:e9:28:58:6f:16:94:61:f2:ed:8c:
41:7f:3e:57:76:f6:8d:f1:f8:0d:4d:2a:2f:08:0b:99:5f:f3:
83:75:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:02 2026 by rpki-client