
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier: /OGmrSeUCKe8Zr+rWjNS/pYHs5QQqBZqhv4tHSjP6yM=
Subject key identifier: 99:BD:A9:E9:24:B7:65:FB:8E:A5:B3:A3:33:16:00:5E:22:A1:04:CB
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number: 57
Signing time: Thu 19 Feb 2026 06:25:36 +0000
Manifest this update: Thu 19 Feb 2026 06:25:36 +0000
Manifest next update: Thu 26 Feb 2026 06:25:36 +0000
Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: tGs81s++/LoJfToHlh9+z5udzZm6l0kKD+Un9/fWahM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Validity
Not Before: Feb 19 06:25:36 2026 GMT
Not After : Feb 26 06:25:36 2026 GMT
Subject: CN=6996ace0-e89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:02:99:22:ce:46:7c:10:d4:12:70:c4:30:
36:68:af:69:6c:20:f3:72:a8:a8:b7:29:9e:53:e9:
19:5d:40:92:82:2c:c7:00:6a:0e:a6:42:74:1d:a1:
3b:aa:1f:5f:fa:40:95:37:77:3c:5e:43:ac:4a:4c:
ce:a8:1d:f9:19:5e:ea:b8:ed:6e:00:70:2f:bd:d9:
31:9d:38:90:0e:5d:50:4d:59:2f:b1:a3:9d:5c:14:
87:c2:92:e4:d1:7c:00:ea:33:ef:dd:f6:2b:7c:cc:
97:f4:24:55:11:7d:5e:00:0a:e9:cf:64:0a:51:c8:
c1:87:8d:bd:3d:8d:63:6d:fe:63:17:ea:51:55:28:
90:db:4c:b8:19:a0:aa:eb:91:cb:9d:ab:45:16:10:
a1:b9:a9:fd:5f:54:cf:1f:4a:4c:d7:29:3a:b4:dc:
10:90:ef:2e:1d:28:c5:d0:57:fe:a5:dd:51:99:83:
9a:fc:37:24:0a:02:63:73:c3:1d:c6:13:f9:3d:50:
60:15:d5:2e:8f:ad:1d:83:2a:c7:ec:3e:c9:66:99:
38:35:3f:42:ab:87:c8:75:5b:4a:78:67:6e:23:67:
8d:5c:64:9b:ed:3f:6b:c4:e8:6e:f3:93:80:a8:4b:
66:b9:83:0f:72:85:56:c0:86:91:cc:50:c7:e0:af:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:A9:E9:24:B7:65:FB:8E:A5:B3:A3:33:16:00:5E:22:A1:04:CB
X509v3 Authority Key Identifier:
keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:b7:f1:54:94:e3:41:48:ad:7a:ab:86:45:f9:0f:f3:3b:
6c:b6:b3:4f:61:ee:62:e5:41:84:6a:6a:2b:af:ac:20:1d:81:
1d:2f:74:6f:00:8d:d7:0e:b6:0c:cc:6e:21:e2:24:03:90:20:
1a:b9:67:49:d5:26:c9:04:b5:97:1c:0f:dc:2a:9e:53:cf:20:
9e:dd:2c:66:e7:8c:7d:bf:07:b9:42:12:fd:73:fb:d8:21:55:
de:15:15:7f:72:40:20:f4:83:3a:fd:af:29:64:81:3e:06:59:
d2:e4:24:2c:eb:9a:f4:7c:cd:3a:e7:e5:a9:6a:1c:8c:2f:fb:
57:ec:45:66:1b:31:0e:4c:1f:c9:6d:52:d2:7a:fa:9c:12:db:
7c:e0:2f:ef:eb:a3:ba:49:dc:88:64:59:b6:d7:71:3c:f3:c4:
e7:d9:74:4c:2f:88:47:32:2f:90:2f:2a:ba:c6:88:ed:ff:2a:
cb:b5:cd:07:a0:7a:b0:6c:53:3e:c0:11:31:2c:d8:4f:09:9a:
dc:00:32:3c:27:a4:d7:14:24:b8:da:68:88:73:c2:0d:25:01:
12:1b:51:ea:44:4c:92:cc:8d:86:f3:57:f0:bb:45:6e:fd:c9:
95:e7:36:e6:98:9e:5e:5d:38:66:66:8d:e9:d7:8f:de:ee:63:
bb:33:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:55:26 2026 by rpki-client