
$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier: 9CQBDlgDz9s4vtr9H0HgLiCe/jfSVJrnLOcO0mmIOHk=
Subject key identifier: 3B:A3:2E:F7:CA:94:75:35:2F:64:65:5A:97:AC:1B:58:62:75:48:A9
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number: 32
Signing time: Thu 19 Feb 2026 06:56:19 +0000
Manifest this update: Thu 19 Feb 2026 06:56:19 +0000
Manifest next update: Thu 26 Feb 2026 06:56:19 +0000
Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: wzfKdYXnJ3UVYGvNVZw+bn20GSTN45lKa7ICGjoqhYY=)
2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: ekpamxD7hzwb1PEjW+tSW6XvcWqgsSy+CPAuO9Zq2Cw=)
3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: 0Zi7a8zsLY38+Kw5x0ohUceb8AdyaS+jD2hPBxt1gYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Feb 19 06:56:19 2026 GMT
Not After : Feb 26 06:56:19 2026 GMT
Subject: CN=6996b413-9562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:66:85:cb:45:bd:1b:40:93:41:f8:ff:a1:
97:5f:b2:4b:fe:6f:bb:b7:13:43:29:19:f1:0d:58:
2c:f9:58:23:aa:bb:d6:49:d6:23:b6:a5:16:c9:39:
e5:87:e0:bd:c6:d5:ac:f4:b8:81:17:ce:7a:f3:5b:
c2:c9:7a:85:ba:d4:18:1b:7f:5d:ec:49:e3:ac:54:
83:0e:36:32:7f:a4:69:80:7f:73:b6:d6:23:b3:cb:
71:63:4b:e3:9b:9c:66:03:55:34:25:24:58:c8:5f:
bc:18:c2:0f:83:38:d3:3d:44:f0:a3:0e:01:5d:1e:
30:cb:ee:0c:95:f7:2d:6f:d4:c7:b0:e0:86:06:b9:
ca:58:12:7b:d1:11:42:ee:eb:f9:18:9c:46:a2:9f:
99:6b:ca:72:a2:4f:87:5e:af:5c:3f:3f:28:12:58:
18:c9:ce:9e:a5:b9:07:3a:fb:56:9e:eb:1d:61:f8:
ce:6e:38:fd:08:23:74:34:fe:c9:89:82:76:e9:05:
e8:6c:7b:a8:56:61:b4:a0:e8:23:f7:41:37:03:1c:
f7:0a:27:68:b7:bf:0c:e6:34:fa:e9:ff:b2:f8:da:
c7:dd:8d:83:8b:c2:f2:6d:e0:81:d0:e2:24:12:f8:
0a:29:fc:37:1a:8a:42:4c:bb:20:90:b9:59:8e:81:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:2E:F7:CA:94:75:35:2F:64:65:5A:97:AC:1B:58:62:75:48:A9
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:ee:4f:bd:89:67:87:db:31:03:38:28:40:b6:2e:ab:65:74:
9c:ad:e8:03:36:c9:fc:b0:54:c7:65:3c:f7:00:b3:50:82:82:
bc:c1:53:98:f0:7c:ec:09:b1:61:e5:93:46:25:84:34:e0:2e:
ff:88:21:91:0c:fd:2d:8b:8b:20:bb:ef:15:5a:1b:74:9e:bc:
89:d1:b6:66:15:3e:85:e2:2f:fd:18:d8:ce:81:9b:73:87:50:
d2:52:76:c9:59:0f:66:91:b8:cb:25:c2:8b:25:0f:d4:c2:2f:
58:20:c2:4b:1f:63:da:d5:27:c6:9e:44:5f:76:d6:b3:00:47:
90:58:ca:a1:ef:f1:98:ad:97:5b:8e:cf:3a:60:27:72:a4:8c:
9b:ba:36:7b:37:91:86:ac:d9:3b:a1:80:18:69:b4:d7:9b:34:
87:b0:62:f5:3e:25:6b:b7:f7:06:7c:22:d5:95:f5:3a:16:b9:
a7:3b:cb:48:2d:f8:7b:a7:22:db:0c:b7:cd:fd:94:53:e3:1d:
15:d1:87:a1:18:42:4e:90:43:0e:ba:32:84:67:4a:8a:80:85:
ce:2d:1f:9f:60:ba:00:97:32:06:d3:41:b2:cc:d5:32:e3:52:
1e:5c:3c:c6:c0:4a:5e:de:38:3b:85:2c:84:f6:20:57:51:d4:
3e:2c:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:53 2026 by rpki-client