
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json)
Hash identifier: Mr25mBOkZavOkEgT/OBxFID+NtmKtbsQYp6dMPRe9vY=
Subject key identifier: F2:BF:72:71:F2:D6:AF:8E:EF:D8:CD:01:83:69:93:F8:DE:25:5B:FC
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
Manifest number: 025A
Signing time: Thu 19 Feb 2026 01:02:54 +0000
Manifest this update: Thu 19 Feb 2026 01:02:53 +0000
Manifest next update: Thu 26 Feb 2026 01:02:53 +0000
Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: c9eXWwiceHWWiWszMMoT2q8hidP+dP94elKQPPUxUYc=)
2: 203FA37E750611ED95126872C4F9AE02.roa (hash: fm9S9mNo6Y2ygfq7yhWG4UNmDV8piD8pCbOO7u7749k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Validity
Not Before: Feb 19 01:02:53 2026 GMT
Not After : Feb 26 01:02:53 2026 GMT
Subject: CN=6996613e-2901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:8f:7d:72:b8:1e:45:5e:5b:82:50:68:27:
8c:c8:9c:5b:80:d4:da:12:45:df:d4:74:db:1d:02:
6a:16:38:28:15:5b:10:c0:8e:1e:04:2a:3a:b2:67:
34:b2:d8:e7:ac:77:a3:c0:a4:2b:f9:78:1a:ce:f3:
4a:be:c8:7e:5e:88:d1:f7:3b:d1:3f:51:35:64:41:
ff:32:49:0e:0e:a8:6d:8b:3e:28:96:76:2e:da:58:
9a:82:50:f1:f9:0d:ac:69:b1:cd:29:86:ae:f4:b3:
c9:91:c0:a8:02:65:a4:ba:3b:e2:33:ad:31:b8:d1:
f4:4b:0a:04:3e:04:77:38:08:c0:b4:c6:ac:15:c3:
b3:1d:bc:a3:df:45:02:6a:70:ca:57:66:5c:86:7a:
0f:5a:6b:9b:12:73:45:39:12:c0:7a:a9:d9:d4:90:
40:93:63:06:e6:3c:02:5e:1e:ef:c4:16:03:45:c8:
fe:6d:d3:84:54:32:d2:d9:4d:b3:70:5f:05:2d:e7:
89:0f:1b:13:27:8a:94:f6:25:bc:74:65:51:9f:0f:
b1:e2:03:af:db:da:0c:0a:4a:4e:09:44:0d:c6:ec:
06:38:11:b6:9d:a2:66:ea:ee:68:0e:95:45:e3:e6:
6a:c0:2d:cf:68:31:f1:90:de:5e:12:80:38:f4:ba:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:72:71:F2:D6:AF:8E:EF:D8:CD:01:83:69:93:F8:DE:25:5B:FC
X509v3 Authority Key Identifier:
keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:f6:92:8e:80:17:5c:d8:2f:05:4e:c5:ed:4c:4c:9e:6f:
84:d3:7d:c2:1e:e6:14:13:ff:af:00:c4:59:a7:cc:e8:6f:a6:
36:7a:99:5c:be:c1:77:aa:63:fa:74:e5:93:d8:81:e2:f5:f8:
21:12:03:a4:1e:e7:62:1b:9c:ab:81:35:e0:d5:f5:a3:50:d2:
17:a3:1c:33:b3:35:92:5d:1d:77:0e:86:20:44:e4:eb:ef:b6:
40:85:dd:8d:1b:c9:89:60:31:1d:14:ec:21:74:6a:df:45:01:
d4:04:4d:7f:17:3a:dc:2b:79:0f:dd:e2:10:ad:25:04:4d:7c:
a7:51:cb:aa:e2:80:7f:e4:41:3c:39:e3:96:02:56:f7:ef:bb:
6b:a6:9c:c4:45:cf:05:4a:f3:a8:c2:bd:fd:17:e0:42:85:a8:
34:f2:2e:3e:68:1d:78:7d:7c:16:2a:45:89:51:e6:d3:2e:0b:
16:e2:71:a8:73:97:13:f0:6b:a0:b4:dc:d0:6f:4a:0c:35:23:
3e:a9:d1:64:36:ed:9d:41:c6:2e:93:a3:34:10:c7:07:2f:2d:
d6:eb:fa:fb:21:9f:9d:2e:23:95:28:09:00:8b:f7:e4:7e:29:
9f:d1:46:02:b4:b8:4e:cd:34:9e:e0:3d:96:00:24:9b:c8:82:
a9:c5:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:13 2026 by rpki-client