
$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier: 6sc9vZMcItIxZcIN+miTI/1fv/H0kEtAnA1Axa7Znt8=
Subject key identifier: A1:25:32:50:E0:71:D3:E4:DD:0B:99:AC:E2:7C:BD:9F:CE:A5:0B:2F
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number: 0137
Signing time: Thu 19 Feb 2026 03:49:32 +0000
Manifest this update: Thu 19 Feb 2026 03:49:31 +0000
Manifest next update: Thu 26 Feb 2026 03:49:31 +0000
Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: X0E2NYHke1OqprjolpWQ+VCW2YWs3ADCFlHnY3pydVM=)
2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Validity
Not Before: Feb 19 03:49:31 2026 GMT
Not After : Feb 26 03:49:31 2026 GMT
Subject: CN=6996884b-0ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:ce:19:e1:89:92:87:c6:41:14:3f:87:c7:
fb:9f:2a:3e:6b:91:58:c3:7b:ba:cb:eb:8c:57:13:
46:09:ae:f3:4d:d5:54:bb:fe:ff:52:27:1e:38:93:
64:84:c4:51:15:43:1c:41:9a:21:7a:bf:22:ea:a6:
77:42:b2:b9:4d:c8:8e:2a:30:0c:d4:fe:05:a1:ff:
cb:83:fb:ee:00:4f:9c:d6:b1:94:f9:97:c9:9f:1c:
26:36:62:70:86:21:4c:b2:83:a8:e9:8b:21:ed:59:
49:68:06:77:37:d7:b9:85:b6:69:99:47:41:42:a2:
5e:d4:19:c6:1f:83:b8:65:29:d1:5a:93:9f:e4:57:
46:44:06:51:a7:63:67:53:4e:36:50:1a:a8:6c:29:
7c:ee:c1:c1:5d:16:67:76:44:19:84:07:ad:f2:c7:
de:88:a6:87:ae:9f:25:b0:5d:1f:ca:7a:4c:71:7f:
68:f4:ae:b1:4d:a5:d4:64:07:18:48:a5:42:e8:a3:
2a:0b:4c:e5:f6:5b:19:87:bf:4f:83:5a:80:2f:11:
70:01:fb:c6:9e:c7:2a:66:e8:32:ab:84:c9:9f:d6:
93:bc:c4:1d:4e:12:b2:96:e2:07:a9:95:b4:64:56:
7c:61:51:ba:62:02:09:e8:ad:01:50:c7:7b:5d:51:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:32:50:E0:71:D3:E4:DD:0B:99:AC:E2:7C:BD:9F:CE:A5:0B:2F
X509v3 Authority Key Identifier:
keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:ca:4a:9c:6a:8c:0b:a6:78:36:c1:4b:55:36:62:65:35:
ab:95:0b:09:54:0b:bd:4b:b4:aa:c4:2d:62:74:ea:d8:0b:8a:
c6:e9:68:23:34:e3:0c:74:f4:44:ca:8a:37:e6:8b:4c:2c:00:
00:ea:82:38:34:1f:fa:95:36:6c:0f:40:3c:c6:4f:68:42:c2:
fc:da:4f:54:ab:b2:d4:48:00:a9:9a:8f:b2:09:1d:53:2e:3b:
e5:93:a9:1d:ea:7d:0f:5e:69:82:96:71:cc:d2:68:93:75:0d:
2f:ea:11:5a:90:84:bf:55:68:36:52:f2:90:08:e0:8c:13:35:
95:79:b2:66:58:28:06:cb:23:7a:5d:07:a1:d5:21:1a:e6:75:
b8:32:b4:90:4f:1a:4d:85:ad:a5:e6:f0:c7:8e:40:0c:8e:4e:
94:cf:ec:22:d9:7a:d8:83:ea:e4:6e:7c:ac:ef:28:6c:38:04:
89:b4:97:bc:e6:4a:47:33:12:dd:5f:3d:ff:8b:c7:6f:6e:6d:
e2:02:b7:f7:73:90:36:0a:32:51:13:b9:85:8e:de:79:2e:32:
be:08:6c:a8:e4:8d:6b:51:24:4f:3a:33:9a:03:53:be:d2:54:
b0:ea:95:b2:61:e6:a4:84:d5:dc:5e:73:88:4d:b2:21:0c:bc:
b1:62:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:51 2026 by rpki-client