
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json)
Hash identifier: odSICmVYqWU3+9lZ6HEPPW4+N3XkReqmvu5wegn7JEU=
Subject key identifier: 10:BF:6B:91:CC:46:90:43:E9:CF:0B:C4:B5:79:18:9B:CD:70:E0:A3
Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Certificate serial: 035A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
Manifest number: 034E
Signing time: Thu 19 Feb 2026 00:10:14 +0000
Manifest this update: Thu 19 Feb 2026 00:10:13 +0000
Manifest next update: Thu 26 Feb 2026 00:10:13 +0000
Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: AJl4z9eePNUUPvZmeh5z0NywqWfCyg0AYH/h3Irlots=)
2: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=)
3: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: q/TcJaaAitP3rzneDoOcxqjjnobWifgs1ChVJEG3jdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Validity
Not Before: Feb 19 00:10:13 2026 GMT
Not After : Feb 26 00:10:13 2026 GMT
Subject: CN=699654e6-dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:af:f6:c3:65:8c:d8:ae:0a:2c:90:03:53:
1c:5a:19:0e:b6:f3:43:44:a7:14:6e:4b:cb:38:3a:
f1:16:23:02:15:75:26:56:1a:88:08:5e:de:54:ac:
4d:b5:a5:e5:ae:33:fb:46:9a:23:3c:c0:e4:c9:5a:
32:c2:50:65:e1:11:14:93:4f:2d:01:64:99:17:bd:
93:77:25:f7:6b:51:47:5b:ce:22:4e:ff:4d:e8:73:
7f:05:de:f5:84:e4:92:0f:f0:ad:04:c0:52:d6:fc:
ca:07:57:ea:81:78:61:19:35:34:38:da:67:65:5f:
07:9c:ea:98:f4:0d:a0:cb:63:ad:74:b0:05:5e:f0:
50:75:fc:2a:64:11:08:6e:f5:fd:77:97:a2:89:53:
82:86:47:5c:44:ff:3d:a4:60:ff:fe:db:cc:63:91:
9d:a9:85:0e:2f:29:76:f1:d3:19:33:80:f9:4b:b1:
e2:a9:b9:42:45:cf:38:15:e7:4a:35:a3:85:91:8a:
64:33:43:47:74:d6:ed:91:2f:3e:04:80:70:53:55:
91:81:85:50:ef:7d:75:af:17:9b:d4:b4:72:29:25:
93:6d:54:3f:74:22:f1:e8:2a:e8:12:59:1b:4c:d0:
d7:3c:1f:44:34:78:f2:5e:6f:e4:96:63:74:3d:55:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:6B:91:CC:46:90:43:E9:CF:0B:C4:B5:79:18:9B:CD:70:E0:A3
X509v3 Authority Key Identifier:
keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:3d:2b:28:63:77:26:1e:df:3e:be:28:a7:99:35:a5:24:49:
a4:9d:20:ca:ad:72:40:f0:c0:ca:74:e3:f7:e7:4c:25:ac:a0:
85:94:ae:e7:97:d7:e6:1f:b8:10:4d:a2:79:5b:a2:47:00:b1:
ba:e7:23:aa:df:7c:0d:9b:9a:a0:81:59:a9:a7:1e:bb:41:b9:
de:36:17:e5:c3:2b:3f:05:c6:2f:ae:fa:7b:16:4a:a3:58:52:
d1:ba:6e:57:25:53:3d:c3:2e:7f:23:ef:7d:f0:4d:41:58:ec:
44:62:17:2d:b6:b0:2b:1f:4a:87:68:0b:d7:93:70:38:4a:dc:
81:a8:e0:15:5e:6d:55:1a:d8:58:d0:0d:67:dc:e6:c6:e8:93:
d4:03:3b:14:8d:11:55:1b:e6:e6:f0:76:c4:75:2e:d1:3c:01:
ee:42:8a:cc:a8:86:6d:d6:4b:cf:0e:c2:1b:19:eb:99:8b:94:
5b:c1:d4:97:d7:94:00:8e:11:3b:4d:14:23:ff:44:a9:cd:c0:
03:24:94:92:a7:bd:a4:d8:cc:bf:08:85:60:b3:7f:4c:12:37:
5d:2c:f8:12:62:9c:b2:94:37:73:6b:0a:ca:1c:d8:3c:bc:e3:
57:3c:6b:78:89:bc:4e:14:32:df:d5:f7:72:4b:c6:06:c4:86:
b2:ce:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:17 2026 by rpki-client