
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json)
Hash identifier: OTKvLo+bDSfdliCffj891pX/9V3VaAciaXm01TUNys8=
Subject key identifier: 37:D9:87:14:7F:BC:3D:A2:4D:8B:2C:BB:A2:3A:5E:0E:DB:E6:14:AA
Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
Manifest number: 06CE
Signing time: Wed 18 Feb 2026 21:41:02 +0000
Manifest this update: Wed 18 Feb 2026 21:41:02 +0000
Manifest next update: Wed 25 Feb 2026 21:41:02 +0000
Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: u3/QaHN+8IjeLlHN/5QbXS+eTIpL3Oj1I3rTyGHtCZA=)
2: C51F34AAC46711F09831793EC4F9AE02.roa (hash: m5fQia28aN0SeiS47PeAtdpG/HWjYs+FsWqbdr95Tkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Validity
Not Before: Feb 18 21:41:02 2026 GMT
Not After : Feb 25 21:41:02 2026 GMT
Subject: CN=699631ee-4fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:41:20:b3:61:ea:33:2e:dd:5e:b4:5f:6c:
5c:22:18:6b:f1:c1:42:45:6b:2a:16:ec:4e:74:e5:
0e:fb:18:09:ea:9c:79:08:41:6f:b4:d6:1d:ff:cb:
83:58:0d:45:2f:51:9d:60:fe:9e:7c:49:2a:d9:38:
57:d8:41:09:2b:53:3b:5a:b5:e8:9e:61:78:8e:a5:
d1:62:7e:e8:82:e0:5a:61:1a:4a:80:e5:55:fa:66:
b3:f9:8c:d1:e4:a4:3e:7a:2c:50:d7:e7:13:be:6d:
8a:86:18:95:32:8d:e5:ca:2c:62:52:dd:b9:fd:75:
36:37:bf:06:86:33:9f:34:cf:df:7f:27:6b:44:34:
df:2f:36:07:3a:31:e6:15:54:8f:ef:45:32:6b:91:
5d:4d:f8:e6:db:c9:75:99:6d:d3:43:59:9e:84:e6:
95:77:45:ed:d9:88:13:56:ca:7f:2d:91:f2:a4:ee:
1c:6d:69:b7:5d:1a:db:44:b0:32:a9:c1:d7:83:de:
6b:e3:3f:b4:ff:9f:a5:33:92:c7:f9:01:be:0c:f7:
6a:f4:f4:bb:3a:cb:cd:22:6e:d0:8a:ee:ac:6d:f8:
10:a9:c3:4b:40:7c:e0:a4:cd:1c:d2:6d:1e:be:33:
30:17:03:43:63:13:bc:90:d1:54:af:72:7c:7b:5b:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D9:87:14:7F:BC:3D:A2:4D:8B:2C:BB:A2:3A:5E:0E:DB:E6:14:AA
X509v3 Authority Key Identifier:
keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:54:85:4f:d5:6e:c6:ce:eb:bb:11:e7:66:16:5a:bf:e5:
29:14:30:37:9b:26:f7:0e:0a:3c:63:c4:dc:fa:85:05:9c:6d:
2d:7a:09:8b:fd:28:9c:bf:b0:17:aa:f7:48:28:ce:16:1e:de:
2f:ad:b2:70:da:75:02:07:ff:4a:d6:55:9d:96:9e:f7:91:44:
f6:3a:0b:62:3b:e6:6b:63:0e:e2:a1:d8:ab:14:1a:b6:c6:cf:
8e:47:8e:2e:38:af:c9:71:4d:b0:a8:4e:10:57:e8:71:f9:70:
d2:d8:78:01:bc:cd:30:c7:30:bb:97:ce:2d:ab:b7:45:7f:22:
3e:45:ee:b1:26:c3:50:a8:9e:3d:fb:f9:3b:ff:da:ad:17:42:
74:f3:6d:62:ad:13:3b:4a:04:14:d1:d3:20:d6:3a:a1:29:a6:
62:01:95:b5:33:f5:65:ea:5d:7d:da:85:3e:ce:6f:81:07:54:
92:4f:8f:e2:79:e7:1b:1d:60:5e:51:4d:f0:38:cb:83:76:43:
a6:cb:ae:32:0e:2f:2a:95:d4:56:b4:a6:7c:9f:ac:cb:78:87:
80:b2:7f:ef:28:b1:fb:3b:93:ee:b2:d5:9c:1e:6a:fa:99:f8:
4a:55:94:b1:39:77:5c:87:48:ce:c3:84:88:cf:7c:83:66:13:
bc:12:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:36 2026 by rpki-client