
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json)
Hash identifier: jaxCiBkRoane49Y/6zVRM3tSqFbau15ySEacw4kEA78=
Subject key identifier: DF:4F:CE:2D:F4:64:27:B7:53:C8:BF:FC:C8:76:5D:8A:88:EC:35:70
Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
Manifest number: 205A
Signing time: Wed 18 Feb 2026 15:52:57 +0000
Manifest this update: Wed 18 Feb 2026 15:52:56 +0000
Manifest next update: Wed 25 Feb 2026 15:52:56 +0000
Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: NUSI5CFd8MguHZjqUGiVBfAE06LxSeRJFNslj+oelLs=)
2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: aFxmstcvEMQ/qqQO/m7uR2Alk5KmIeuyGi0FUw+S+g0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl
rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Validity
Not Before: Feb 18 15:52:56 2026 GMT
Not After : Feb 25 15:52:56 2026 GMT
Subject: CN=6995e058-482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:5c:86:e2:36:9d:66:78:f3:24:85:7d:94:
fd:e2:ac:2e:c4:73:c1:9c:17:d7:83:83:c4:df:42:
f0:bd:51:c8:bc:74:01:de:37:6b:a3:de:41:bc:aa:
8e:4e:59:0f:f3:e6:74:9d:0d:eb:b8:6f:38:e6:0d:
0b:cb:ed:d2:ea:93:9e:14:52:70:eb:c7:ce:6c:85:
45:3a:8d:7b:5e:30:40:b6:eb:b0:00:9c:79:f4:5c:
69:6d:12:c7:d7:f8:06:26:13:69:51:72:1d:2f:d0:
07:6b:28:c2:3b:1e:cb:12:52:f4:68:cd:74:c9:60:
ba:cf:96:80:1c:68:71:15:c9:9c:bc:bb:79:75:f9:
48:cd:cb:92:b8:dc:40:35:6a:d7:77:da:8d:69:12:
e0:75:81:0d:a9:7e:93:15:c4:56:74:73:f4:a8:ca:
61:02:79:b8:ee:7c:b7:90:bc:a4:00:f3:66:ab:22:
ca:55:c7:d1:2f:f9:9a:db:65:83:b3:13:e9:43:be:
1a:3e:3e:4a:ad:6c:0c:05:cc:37:a8:d7:d0:28:b5:
87:a7:dd:f0:0a:33:0b:78:5d:55:e3:10:38:89:30:
2e:47:d0:2b:d6:30:96:e3:53:f7:5f:b4:a8:d3:92:
3f:78:df:b0:73:54:f6:1e:9f:95:e8:de:29:cc:4f:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:CE:2D:F4:64:27:B7:53:C8:BF:FC:C8:76:5D:8A:88:EC:35:70
X509v3 Authority Key Identifier:
keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:2d:63:c8:8f:2f:34:cc:4a:79:7c:a5:0d:70:22:46:e7:
4c:e1:51:64:30:97:05:f1:cf:ad:c3:a4:3e:6f:b9:42:cf:f3:
3d:e6:11:e0:32:b2:ef:86:e1:37:e9:9c:69:10:a5:b6:c5:6e:
a7:01:59:f7:0c:13:0e:56:bf:c4:e7:ed:34:dc:19:84:0c:82:
47:71:43:d7:05:90:44:67:b7:96:22:07:b5:26:f0:b4:fc:9c:
1e:1c:c4:15:d9:60:80:64:0f:f0:1b:6d:92:05:05:31:c6:ac:
25:77:77:09:9a:1f:7d:b4:61:8a:fc:26:1f:97:b2:d2:f3:3a:
33:c3:fb:67:1b:ba:81:2d:40:9f:9a:7d:e3:ab:49:2a:4c:21:
0a:a0:0b:65:89:bb:91:3b:e7:6b:72:c5:2e:fb:c1:cc:af:27:
1c:27:fc:08:33:28:b0:65:e5:26:e3:de:8b:3d:91:a8:0d:64:
33:10:05:f6:ee:65:a9:23:f7:01:30:cc:b9:a6:5a:80:b5:74:
07:03:93:bd:3c:4a:bc:f3:1b:31:49:81:4d:05:f5:f5:47:8a:
5a:6b:32:6e:67:db:e5:44:95:8a:9f:0f:f7:bf:df:85:d2:d7:
04:77:a9:e3:da:f0:b1:0e:19:8c:01:fc:22:5a:c7:21:c8:1b:
cd:f3:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:35 2026 by rpki-client