
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier: xwsJztToNYizv6yBgzruuJB6yIbcZwUCZ2GpgR9bLcM=
Subject key identifier: 47:1B:C4:EA:00:C0:99:C5:33:7F:D6:98:88:11:DC:25:E5:09:7B:FF
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number: 13
Signing time: Thu 19 Feb 2026 07:15:51 +0000
Manifest this update: Thu 19 Feb 2026 07:15:51 +0000
Manifest next update: Thu 26 Feb 2026 07:15:51 +0000
Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: 0R263WSsCMhWeeurkza6BBQPrrNuZE6IVnEHCtuk1ss=)
2: A6977620FC6911F0B9F21353506F56BC.roa (hash: rjV5ROCkzeAr17+t82AmJ5VJ6O4NuC0TbPCiOzLcILA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Validity
Not Before: Feb 19 07:15:51 2026 GMT
Not After : Feb 26 07:15:51 2026 GMT
Subject: CN=6996b8a7-2230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:d8:d4:15:40:8c:27:87:78:93:c5:1b:9c:
1e:1b:51:c7:78:d8:b7:d6:ef:c1:ed:84:0e:2d:4f:
e9:60:92:9c:af:65:10:48:50:06:d6:df:0b:ca:b0:
2f:dd:54:20:fd:47:b1:93:97:01:c9:65:d2:73:9f:
3e:cf:f6:2b:6f:9c:74:0b:2d:0f:78:cc:d9:64:8f:
0b:12:a2:7f:5b:ca:11:b6:a8:8a:7d:14:c0:12:13:
3d:95:e9:a2:5a:8f:d8:c8:f4:da:96:68:9c:ed:6a:
73:24:0a:6b:d7:70:b2:e6:e7:8b:d9:cf:cb:57:38:
2e:d4:e0:cf:b2:7a:72:0d:b1:13:ff:5b:3a:30:45:
d6:c5:b8:f6:d4:94:bc:50:ec:8b:ac:0c:26:cf:3d:
f3:5e:d9:84:dd:f7:5e:35:bb:4d:c8:a8:ce:3d:36:
fe:40:bc:ad:3e:69:fe:cf:a6:19:e3:a0:eb:d6:ae:
6b:40:ac:5c:fb:0a:a7:76:19:c0:de:60:f0:28:d3:
54:7d:9e:ed:25:c5:c7:a6:a0:09:79:2e:d6:1f:9a:
8c:c8:73:40:dc:36:28:65:b5:23:25:71:1c:a9:ea:
ed:ef:fd:3e:7f:dd:ce:46:b4:a4:62:d3:52:31:e1:
59:a8:01:b1:fc:fa:e8:41:d1:39:91:35:a2:13:da:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:C4:EA:00:C0:99:C5:33:7F:D6:98:88:11:DC:25:E5:09:7B:FF
X509v3 Authority Key Identifier:
keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a3:67:43:b2:f0:cb:8d:0b:13:39:67:bd:c9:39:01:c2:c9:
be:ef:bb:1a:4c:7c:b3:4d:f9:fb:a3:3c:7e:a3:21:86:a8:46:
dd:32:0d:a9:62:d0:d4:86:d1:c2:dd:a6:41:8c:bf:17:8a:67:
02:fd:9d:af:d4:b4:92:b8:97:02:ab:54:fd:38:be:63:f5:ce:
65:af:56:b4:b3:62:6b:fc:2d:c4:49:ce:47:c3:db:07:1b:d2:
d8:aa:46:bf:56:b4:88:07:31:f5:7f:15:07:d5:8b:c0:86:df:
c4:52:ad:e7:03:3c:9b:27:0a:2e:08:05:a6:1e:c4:a3:d5:8f:
5f:ef:5f:8a:5f:24:d4:56:33:5a:e7:55:9d:38:97:74:f7:02:
69:ba:ee:23:73:16:57:45:45:08:e8:65:e0:a2:4e:81:fe:5c:
f6:20:49:6c:92:86:6c:24:12:5e:16:2c:50:40:2f:8e:c8:11:
86:43:cb:8a:5a:82:57:92:4c:fe:c4:2f:98:81:64:14:62:1d:
00:6b:85:cc:8b:c9:b8:4a:e5:19:e0:8f:a8:fa:31:ef:26:35:
94:ad:39:58:62:d7:3c:16:1d:d5:56:49:3f:33:d5:cb:98:49:
74:55:42:66:81:a4:f3:ef:f6:86:9d:0f:60:42:35:ce:b5:bc:
7d:51:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:12 2026 by rpki-client