
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json)
Hash identifier: HYYUcinUA4hZt6WxrKjs88u5LHgu/PRG1MXR12dxEYI=
Subject key identifier: 28:D9:E1:45:D3:7E:DC:6F:84:C9:EE:23:B4:E2:5B:D8:C5:83:52:D3
Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Certificate serial: 05DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
Manifest number: 05CF
Signing time: Wed 18 Feb 2026 22:21:27 +0000
Manifest this update: Wed 18 Feb 2026 22:21:27 +0000
Manifest next update: Wed 25 Feb 2026 22:21:27 +0000
Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: TMGDgfoXQVUZ8TpeFEDzSueEW0gquEQIKNAFai7anXU=)
2: C41538940B4711EC99840631C4F9AE02.roa (hash: jmBBk9G7I6kWRNtiv9uf3HqTLrY1UbUUMPlSvnBT+V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Validity
Not Before: Feb 18 22:21:27 2026 GMT
Not After : Feb 25 22:21:27 2026 GMT
Subject: CN=69963b67-1cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:4d:a2:7c:8d:b0:3f:fa:b9:f1:57:a1:59:
4d:3c:57:38:45:5c:c0:66:ad:4b:30:3b:54:a3:9f:
c6:c6:31:ac:a9:42:ee:12:05:44:ac:41:b4:db:0e:
ae:81:82:fd:4d:81:55:22:44:e6:66:a2:04:19:8f:
68:bb:78:30:de:5b:38:7f:cb:c8:66:60:d3:50:32:
38:05:c6:37:4f:0c:a2:f4:63:7d:c5:e4:a5:ff:50:
77:a9:0c:bc:fa:b9:9e:a6:6b:6d:f2:66:b8:74:dd:
b6:48:23:d7:8d:4c:8f:86:89:c9:ad:8e:fb:9a:54:
83:6f:c7:15:6c:01:90:b8:0e:32:36:01:aa:73:18:
51:9f:fd:16:7e:c0:9e:69:27:30:1c:98:9a:83:62:
d8:6e:7c:5e:00:a2:9b:00:50:ce:7f:cb:47:44:16:
90:ad:0d:49:9e:06:f4:16:74:4d:81:13:06:f9:4a:
a2:69:c9:c6:2a:8f:36:92:62:f4:42:95:8a:d0:b9:
6b:8f:c4:52:ad:cb:64:5d:70:8d:c4:f9:66:1f:0e:
55:c3:a1:30:55:88:0d:d8:9f:57:46:a6:6a:13:79:
10:5e:01:d9:31:9d:35:42:e9:5c:93:97:a4:08:fd:
d2:30:e2:94:bb:be:53:5b:92:37:e4:6c:00:45:1d:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:E1:45:D3:7E:DC:6F:84:C9:EE:23:B4:E2:5B:D8:C5:83:52:D3
X509v3 Authority Key Identifier:
keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:53:d2:bd:6c:66:f5:92:23:94:6f:22:c2:53:60:0d:a0:
3b:81:55:10:98:f1:5d:b9:b4:6f:35:5f:50:13:89:b3:ae:2c:
a8:78:ab:ad:c6:b0:d4:bd:a4:87:d9:1f:55:7e:8a:e2:c6:75:
3a:10:e4:89:6a:b2:62:a4:bb:02:c8:58:d2:1e:d7:a8:d8:40:
a4:6d:e7:ba:b2:46:21:58:fb:91:bc:ea:b5:d3:bf:b6:63:f8:
ac:cf:ad:5a:4b:37:15:4d:29:5a:03:88:13:bc:32:e2:5c:8c:
b1:79:4f:61:25:b1:4d:81:3f:76:04:35:16:76:83:90:2f:b6:
37:d2:e2:ef:34:95:f4:91:35:7d:88:2e:28:9c:33:62:9a:fe:
62:df:2c:01:c8:c1:19:e5:4b:b8:22:06:f6:5c:52:4e:d9:60:
fc:4e:38:d0:b2:17:53:fe:06:b1:df:1b:38:65:8a:63:fc:72:
57:65:18:7c:2c:ce:19:e8:bf:ab:00:ff:75:75:ea:de:d3:f7:
29:0c:28:6f:74:d7:33:53:0a:49:be:d0:ce:28:b2:46:45:81:
09:db:b3:09:70:c1:64:1b:53:7e:17:f2:d6:bc:1c:ad:94:dc:
22:23:69:1a:7e:1f:2d:b8:2f:1e:fe:dd:9e:f9:f8:c0:cf:8b:
15:0f:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:15:44 2026 by rpki-client