
$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json)
Hash identifier: xALlTtYwDOHggVzRWYHbQel1B73ZNNaxpIsZAf7G+DE=
Subject key identifier: FD:4E:F2:BC:D9:2F:AB:B6:CE:16:01:9D:7C:F5:B1:52:73:82:09:19
Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC
Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC
Certificate serial: 1353
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
Manifest number: 133E
Signing time: Wed 18 Feb 2026 16:45:53 +0000
Manifest this update: Wed 18 Feb 2026 16:45:53 +0000
Manifest next update: Wed 25 Feb 2026 16:45:53 +0000
Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: QdUddJT21xkiXkq6ILobaisqKNmlLYeNqfGxivSnnOc=)
2: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: V0JrvauXWXNDpsL43DjdmMpgmoTrusHbq711Y8hqbp8=)
3: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: F64rTtQK62WkoJ4T7LBeaKOnYlMCrnrGJqKnlzvZNxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl
rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4947 (0x1353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC
Validity
Not Before: Feb 18 16:45:53 2026 GMT
Not After : Feb 25 16:45:53 2026 GMT
Subject: CN=6995ecc1-b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:45:d5:58:de:c7:69:a7:0e:91:d6:d3:e7:
d2:3a:98:71:58:0f:fa:d5:17:d2:d9:e9:29:fd:ea:
fa:8f:98:c9:aa:25:c7:ff:54:3c:60:ea:1a:92:4a:
20:1c:0d:e6:9b:d8:94:90:1e:43:6b:48:a0:55:24:
1b:3f:8f:29:0d:dd:c2:41:1e:91:03:21:16:59:0b:
eb:a6:14:70:c7:44:d3:e1:62:63:bf:fb:1c:c2:4e:
07:21:fe:bd:05:db:38:2d:54:85:08:1b:62:9e:a5:
48:84:3e:3f:71:8f:9f:1a:3e:88:fa:27:8d:ed:e2:
76:a1:3b:12:86:0a:f2:be:47:84:1b:4d:56:f2:9b:
a2:8a:0d:8c:61:56:06:f7:31:98:40:7f:d0:e2:48:
c9:fa:df:4f:53:0a:0e:00:6a:7b:0f:0f:a1:aa:ca:
23:50:c6:4f:80:27:9e:93:72:b1:26:7a:0e:17:89:
b4:74:ef:92:e2:d2:76:ef:e7:fe:1b:3c:c6:78:77:
0e:38:da:8e:a2:0f:fd:41:54:76:2b:5e:62:48:cf:
50:dc:89:13:2d:32:b8:d3:bf:e0:a0:db:b1:a0:90:
20:bb:e2:4d:88:0a:d6:81:e0:17:dd:ca:03:e0:29:
3b:1f:6d:6c:0d:95:66:fc:b1:fd:bc:f3:2f:4a:4b:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:F2:BC:D9:2F:AB:B6:CE:16:01:9D:7C:F5:B1:52:73:82:09:19
X509v3 Authority Key Identifier:
keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:10:25:77:bd:88:9e:3f:66:20:2e:3d:39:c9:8e:ce:51:
9d:99:3e:8f:cb:8b:c3:f0:c3:c9:c9:cb:b7:7e:97:67:3b:20:
6f:0f:45:a7:43:c5:c3:d1:9d:d7:13:0b:89:a1:fb:a1:94:0b:
bd:a8:3b:f2:a8:87:7e:b6:a7:70:f3:68:53:29:7f:b5:ad:69:
6f:c7:20:17:83:70:1a:0c:78:17:49:07:83:ad:eb:32:ec:ed:
96:b8:c2:d8:4e:98:62:45:72:ad:60:ee:40:29:90:b1:75:fc:
c6:52:b2:f0:62:a7:08:46:0a:21:6b:96:8c:c3:34:40:ec:20:
b5:01:17:a7:88:15:a5:83:55:27:88:17:04:97:a4:d2:99:03:
e7:37:4d:fd:27:7a:fd:d3:e5:73:c0:ba:d9:92:ef:a4:57:df:
3a:6b:9a:e4:54:99:a1:50:b2:4b:e7:20:ba:91:57:13:03:25:
6d:5d:ac:a6:a7:c4:13:4a:93:7f:11:a7:68:d6:af:ee:16:eb:
15:9d:56:e8:22:04:8d:af:72:2a:e6:85:88:9e:78:f2:8c:ae:
95:00:a4:fe:51:19:06:9e:1d:ca:a8:f2:82:ec:ef:5c:55:bd:
66:cb:dc:a0:f4:97:da:71:4d:b6:7d:e2:b2:8d:91:0d:67:37:
d3:c6:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:33 2026 by rpki-client