
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier: F5/u4XaCLWKSlT8yBGH4TuhcJvq8+U8gmTTGghzYvzw=
Subject key identifier: D6:52:E2:3E:07:A3:F6:3A:09:88:73:A0:E7:34:72:8A:60:CF:A2:10
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial: 0B39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number: 1427
Signing time: Wed 18 Feb 2026 18:50:23 +0000
Manifest this update: Wed 18 Feb 2026 18:50:23 +0000
Manifest next update: Wed 25 Feb 2026 18:50:23 +0000
Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: 3FFWftESRsbsEuhCmXQZpMQ2hhcFoQ1EHejdTp7G3C4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Validity
Not Before: Feb 18 18:50:23 2026 GMT
Not After : Feb 25 18:50:23 2026 GMT
Subject: CN=699609ef-30bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:08:86:8c:82:bb:7a:f0:ad:0b:bd:e4:2d:
9d:c3:f3:88:9b:29:ba:dc:96:1d:28:8b:5c:28:d0:
bd:7d:08:fb:fa:ce:a6:e2:f0:d2:ab:47:98:5b:2a:
d0:3b:3b:67:49:e4:ec:1a:75:85:d3:04:40:f4:b8:
fa:2a:dd:8b:5b:cd:5c:3e:1b:d5:b5:55:8c:25:62:
36:9a:67:92:ae:7d:db:f0:0a:62:5c:4b:1d:95:70:
ba:34:e9:cf:d1:b7:a3:e9:87:ea:a2:e9:76:02:2b:
e0:78:4b:6e:59:6c:71:91:d7:f2:ca:e8:dc:2d:93:
06:86:18:21:a3:99:a1:79:00:7e:78:53:a3:b3:17:
fa:b3:36:76:d4:11:5c:9b:0d:ee:3e:bb:ae:fd:bb:
fe:46:c0:a1:38:d1:cb:72:34:0d:95:a8:3d:98:6a:
67:2b:79:8f:ea:05:67:e5:7b:a6:fe:a3:8e:1b:c7:
11:46:55:86:3e:18:97:e5:71:ee:83:22:86:12:29:
75:cf:64:1a:b8:06:e7:26:6e:35:e3:6e:f4:40:ed:
96:37:d9:62:9c:9a:27:68:36:ac:ec:7b:c5:b8:8b:
eb:a1:46:3e:5d:8d:fa:a0:4a:40:f2:c8:13:ca:aa:
19:cc:e9:2d:a7:b4:2b:2e:72:1e:f2:b6:1b:99:16:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:E2:3E:07:A3:F6:3A:09:88:73:A0:E7:34:72:8A:60:CF:A2:10
X509v3 Authority Key Identifier:
keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5f:2d:09:4c:f3:b3:01:3f:55:8a:02:42:3c:55:02:32:62:
a9:df:74:29:1c:db:55:fe:68:aa:d9:d4:d2:ea:cc:74:c9:eb:
52:c6:d1:29:6d:2e:8e:64:6f:a7:8e:d2:8c:14:34:5a:e9:bf:
cf:98:30:7a:f2:99:c6:a3:fc:f9:7f:b3:3b:d4:43:19:30:27:
ad:78:45:30:f9:47:dd:ce:66:4a:9f:bb:b8:8b:8a:12:51:6f:
a2:87:34:2e:e7:d9:98:b3:e5:6e:8f:bc:7d:34:bc:51:62:ae:
b9:67:1b:4b:e1:cb:3d:a0:0e:6e:4e:02:5d:2b:e2:96:4b:8c:
70:96:b0:54:76:9b:8b:26:8e:fd:37:18:11:cd:ab:6a:23:3a:
b7:ee:81:91:ec:12:3a:c5:1c:11:ae:28:c3:99:2f:ac:dd:66:
79:2b:c2:4a:a7:c3:ef:2b:75:68:93:dc:c8:1a:cb:e9:9a:eb:
1c:2b:d7:76:7f:cb:f7:8c:20:df:f0:cf:25:8e:ab:15:04:6c:
73:2d:6e:6a:ca:29:38:d1:c0:64:a1:22:5f:58:b7:b8:b0:5d:
ec:90:a1:34:a1:43:ac:bf:8d:9c:72:ec:62:1f:4b:ea:fa:2f:
44:ba:fd:79:3f:4c:61:0b:f7:c2:55:fb:0b:eb:b2:3d:d9:ce:
a5:dd:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:54 2026 by rpki-client