
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File: AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier: ekdlC/k3VsoNhQz0oT8xcZ+R8JhYb6qAyiwWn+c05mc=
Subject key identifier: FE:B0:6E:73:39:95:98:E6:52:43:2E:3C:42:DC:C3:41:27:99:CD:40
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer: /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number: 028D
Signing time: Thu 19 Feb 2026 00:42:44 +0000
Manifest this update: Thu 19 Feb 2026 00:42:44 +0000
Manifest next update: Thu 26 Feb 2026 00:42:44 +0000
Files and hashes: 1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: xr7F/u8C7tbmV5V8PL+fUlxd2ypYAqPbJX2Dsn56D+Y=)
2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: R3jRDvm0E8vyU2n+jY+lrRNs85d0z5lzmVh9QqpC5jI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Validity
Not Before: Feb 19 00:42:44 2026 GMT
Not After : Feb 26 00:42:44 2026 GMT
Subject: CN=69965c84-0232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:d5:31:92:e4:36:a3:d1:7b:c6:3e:8d:d3:
3d:8b:22:6b:97:81:cc:50:b4:96:29:83:3f:b6:11:
63:c6:31:8a:4e:db:ec:5e:35:b0:f7:35:06:08:ae:
8e:db:66:02:a8:76:b8:40:6a:30:fd:16:8c:4a:af:
4d:58:fb:fa:de:47:35:44:64:2d:7b:46:e9:5b:95:
85:45:f5:af:1d:fd:16:c4:63:b4:09:da:e3:79:82:
78:0a:e4:4d:5a:55:cc:33:15:8b:98:b6:29:88:cb:
67:19:99:18:12:c4:61:54:79:30:51:a2:e2:f5:8e:
f3:1b:47:8e:02:89:ec:77:82:a8:0b:40:25:52:78:
58:ab:ba:1b:d2:da:70:3f:25:5e:fd:e2:6f:a8:ff:
94:d9:79:48:7b:a2:b8:0e:6e:ab:44:02:38:08:c6:
60:91:5f:1a:99:ad:5f:db:5e:db:83:f5:09:75:72:
3f:01:76:2e:9f:80:69:aa:f0:62:6a:ae:1d:d4:b2:
12:26:f9:81:e4:7a:24:8d:eb:da:1c:ec:3c:0e:2b:
1e:3f:6c:07:e2:ab:b8:d0:58:56:f0:90:ba:80:d3:
00:0f:93:23:89:c0:38:28:4e:7a:68:e5:5c:7e:cb:
42:2c:24:56:ad:5d:84:b4:3b:a3:da:13:73:0b:88:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:6E:73:39:95:98:E6:52:43:2E:3C:42:DC:C3:41:27:99:CD:40
X509v3 Authority Key Identifier:
keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:40:c3:a7:90:96:bc:6f:33:7a:3e:10:7d:19:87:bd:9d:8c:
b1:80:97:da:31:ae:4c:c5:1f:2b:e8:9c:02:a5:5b:d1:cd:2d:
8f:f3:52:2d:6e:8c:75:55:ff:ae:ee:fe:0b:42:d5:fb:7e:70:
f1:13:34:3e:6b:1b:12:c3:dd:29:54:1d:3f:77:3d:87:0c:04:
44:78:63:06:7b:09:7f:85:aa:b9:3f:6e:e4:66:e6:6d:c4:16:
df:3b:13:b3:44:5d:e6:15:90:e0:6f:a0:b4:5d:b6:2c:39:0f:
d3:1a:2d:9a:e2:d2:0d:10:be:d3:8a:9b:64:d6:a4:c9:27:87:
5b:16:50:79:5b:b7:46:73:c5:fc:16:a7:94:3c:39:bc:77:aa:
17:aa:ba:2e:24:75:ce:d7:a1:5a:a3:1d:7d:db:a0:ef:5f:e0:
4c:39:7e:29:47:37:6e:09:39:8b:6d:13:2d:85:2c:11:6c:e5:
a7:96:45:61:86:3d:ff:d7:b6:ca:76:61:9e:ab:63:5f:3c:80:
f2:13:79:8d:3f:ee:de:7a:4c:c3:02:81:b8:ec:25:93:dd:95:
25:2c:50:a8:9b:61:9d:9d:9e:73:68:55:6a:c8:ba:94:cf:a6:
6d:ab:3b:f6:36:43:15:6c:bb:43:b7:a9:f9:44:cd:f8:62:8c:
aa:7b:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:58 2026 by rpki-client