
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json)
Hash identifier: 17BxXLa+WD/pis8DeqxhPSwzh1W6vuNV4Wuj47vyDxY=
Subject key identifier: CA:18:7C:4B:F1:AA:4B:FF:43:08:97:B1:20:B0:8C:2D:BE:E5:14:3E
Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
Manifest number: 11
Signing time: Thu 19 Feb 2026 07:16:26 +0000
Manifest this update: Thu 19 Feb 2026 07:16:26 +0000
Manifest next update: Thu 26 Feb 2026 07:16:26 +0000
Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: Hnqlf678H4KL7q+ff1q6IRmmcPZZB76c7zirESCW430=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Validity
Not Before: Feb 19 07:16:26 2026 GMT
Not After : Feb 26 07:16:26 2026 GMT
Subject: CN=6996b8ca-7a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:00:ed:b0:b2:27:dc:43:23:a6:c0:43:00:
ff:b4:99:26:bc:52:ae:cb:21:3d:6b:bf:5e:72:22:
20:63:75:46:b5:58:f2:96:59:ee:cf:aa:9e:2c:0e:
f0:38:e3:58:f6:f4:98:fe:cf:51:1a:e9:8f:26:9c:
eb:b4:be:a5:89:9e:6e:f9:82:a0:89:e5:4b:14:f5:
60:73:5d:d7:a4:67:9c:df:39:2d:1b:36:f6:cd:f1:
1a:28:e9:97:21:f2:c1:e4:e6:88:45:89:1d:81:db:
0b:9f:bf:c9:21:7f:00:a4:f0:7f:a5:59:07:65:cf:
89:29:1f:28:a8:9c:5e:30:56:75:c5:4c:f8:db:1a:
bd:b3:32:0f:49:8b:b5:15:1f:6d:e1:5b:e3:92:b3:
f0:7c:53:e2:55:35:18:95:c7:84:a8:32:9d:05:54:
45:d5:be:34:29:4d:c6:c5:e3:ec:8e:c0:41:f4:35:
6c:91:5d:ef:f5:11:2d:c0:02:77:04:3e:00:dd:bd:
1d:0a:32:ca:61:93:c1:e7:84:97:83:20:be:73:5e:
1d:d8:5c:31:e9:47:df:0c:f8:c1:97:7c:e2:cf:a6:
8c:a6:34:0c:db:5c:d7:42:49:7e:78:b5:17:c9:51:
d3:90:eb:7c:41:e8:41:59:6f:7c:9e:ed:7b:25:d4:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:7C:4B:F1:AA:4B:FF:43:08:97:B1:20:B0:8C:2D:BE:E5:14:3E
X509v3 Authority Key Identifier:
keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:1e:1c:24:f3:bc:58:86:1c:9b:87:14:cd:cb:50:74:39:
fe:91:96:b3:75:23:96:d5:f7:30:c0:a3:f9:a6:4a:de:28:7a:
33:52:91:57:eb:37:7d:46:c4:40:e8:cd:66:2a:c1:25:f6:e5:
7a:6f:a0:bb:5c:ab:28:85:55:74:95:2c:2c:d3:1a:bc:1b:26:
d3:0f:96:f7:b3:5f:73:3b:d7:55:89:ec:a3:a1:17:7d:52:1e:
b3:84:e9:2e:f5:80:70:29:fa:1d:62:81:94:57:62:7b:8c:0d:
9b:ce:13:9e:4a:80:47:cd:09:6b:28:6a:d0:80:55:55:17:d3:
13:fe:4b:59:2f:88:0b:d7:da:40:1e:4a:f5:39:e5:b1:d1:d6:
15:b6:9c:da:f1:e0:6c:c9:e7:58:44:60:d5:ba:72:6a:4e:94:
bf:1a:95:94:26:6d:1d:06:d0:4f:43:ab:f9:3c:8d:1a:ef:29:
24:9a:93:94:96:bc:c7:a9:33:0b:31:0c:b7:dc:52:98:c1:8a:
6b:98:d1:2c:05:1f:fc:dd:89:73:b0:20:7b:99:35:f3:1a:14:
5f:27:ea:ec:85:27:7d:3c:a8:02:9d:40:ac:b5:c6:23:27:55:
19:48:a8:b6:e6:d2:2d:1a:40:6a:6f:af:05:79:99:7c:53:de:
9e:78:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:14 2026 by rpki-client