
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier: tiDNn40OMTtK0eRW0r0IcJ4Mk38bGNbyh0D7JeKUjD8=
Subject key identifier: B9:9A:EF:87:70:F5:32:99:25:CA:59:98:E5:17:95:8F:E6:C1:90:50
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial: 060D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number: 0608
Signing time: Wed 18 Feb 2026 22:12:47 +0000
Manifest this update: Wed 18 Feb 2026 22:12:46 +0000
Manifest next update: Wed 25 Feb 2026 22:12:46 +0000
Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: lq1vb5XVhv6mns/3Ic/FUcTxBySJJurMHlaCU5f5bpA=)
2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Validity
Not Before: Feb 18 22:12:46 2026 GMT
Not After : Feb 25 22:12:46 2026 GMT
Subject: CN=6996395f-1464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:2e:a2:e2:67:90:c8:0a:f8:a7:4d:b0:90:
c1:43:d0:36:9a:97:70:b1:f1:8c:a9:18:b7:1e:f3:
8d:3d:b2:9f:bb:e5:f0:e5:00:31:04:cb:28:8b:b7:
a3:af:d2:64:d2:c1:60:35:0d:c2:35:0c:04:46:73:
91:4d:93:08:cb:69:d7:30:2e:7d:a9:fc:82:9e:be:
1f:17:9a:ca:3b:45:7d:8e:42:8d:35:6d:6a:bf:33:
c3:5a:5f:d3:17:b3:4a:98:e7:95:b6:4b:7c:f8:c1:
69:55:21:c9:7d:3b:5a:6c:27:fc:34:80:4b:b0:31:
61:8b:20:6a:20:93:48:8a:5d:e8:9b:fa:c5:19:a8:
bf:fc:cb:1a:00:a8:ae:35:71:56:27:b0:1e:03:9c:
b7:1c:49:e9:ce:d3:18:db:f8:83:75:27:b7:1b:43:
f3:57:6b:9a:5d:16:57:7a:0b:fe:35:10:a6:97:4f:
4c:d0:d0:99:e6:c7:3d:67:bd:0a:0f:64:77:40:fb:
bf:d4:07:12:a7:79:d5:c3:29:79:0e:ad:9e:fc:e4:
ac:1a:df:d6:42:ca:47:e8:85:66:f4:d5:a8:95:87:
39:3d:2e:e2:79:63:6b:11:09:aa:98:9e:80:26:3c:
23:8a:e6:5d:15:bc:4a:00:d2:bb:7d:59:c1:b2:79:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:EF:87:70:F5:32:99:25:CA:59:98:E5:17:95:8F:E6:C1:90:50
X509v3 Authority Key Identifier:
keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:9f:28:5a:08:56:12:c7:08:9e:4c:f6:d1:d4:b8:2c:5f:
48:49:37:24:11:5c:ad:fb:de:4a:ce:6b:81:e6:4a:46:43:f7:
9c:2e:7b:10:47:97:76:5d:72:2a:ec:77:8e:48:ea:23:ff:a8:
ee:19:c2:90:1a:55:35:e7:2c:ed:68:03:92:f5:81:74:53:60:
aa:1f:51:0b:f8:d4:f7:6c:56:c5:0d:31:e5:33:c9:09:d6:31:
a1:d0:b6:f5:e6:9c:bf:9f:1d:14:8c:ab:02:7e:29:9b:4d:15:
f7:4d:2c:4b:1c:3c:60:e5:56:00:2a:4a:28:8d:42:94:a0:7d:
36:00:6f:7a:55:63:75:a4:de:cc:8b:e3:84:9e:5d:42:e7:4c:
01:cd:97:73:63:84:2e:e4:3c:24:40:65:fe:f0:e8:bf:ad:6a:
c7:be:ee:79:17:c3:02:22:85:07:ca:db:1d:7f:20:13:a4:a8:
f7:34:b0:96:1a:58:eb:10:02:e2:56:6f:6d:d8:9b:6c:4e:ba:
a7:13:72:01:3d:ad:3a:29:b5:0b:f7:c5:42:75:90:7a:2f:4f:
2f:d9:54:34:ab:2b:94:37:7f:51:2a:9b:6f:9a:74:f3:b1:c5:
33:a8:61:ef:e6:07:c4:58:d2:22:d8:19:b4:cf:ba:4f:7f:44:
8e:7c:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:22 2026 by rpki-client