
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json)
Hash identifier: OXwge/Lsy9lyXXuXCpZ2OVqwotIHZH18LckpCOQfoxc=
Subject key identifier: FA:5C:EE:10:76:EA:0C:22:AC:1B:16:A7:A4:9F:50:58:D7:05:7D:DF
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
Manifest number: C8
Signing time: Thu 19 Feb 2026 05:17:15 +0000
Manifest this update: Thu 19 Feb 2026 05:17:14 +0000
Manifest next update: Thu 26 Feb 2026 05:17:14 +0000
Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: c040S9YzIa+betWDTbaj91mdRGh0A0X9eWa1+0XTUAE=)
2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: C95CWdcWS0/9Z9oU15qyADSExZ8oTkF5cAIWUUfMLiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Validity
Not Before: Feb 19 05:17:14 2026 GMT
Not After : Feb 26 05:17:14 2026 GMT
Subject: CN=69969cdb-1c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:f1:b0:03:1c:ae:af:2c:f3:05:70:1d:06:
8d:b3:b2:8a:fa:ef:32:d8:c5:5d:54:31:c7:8d:42:
94:75:48:ba:33:a5:9b:ed:21:c2:df:03:2e:ad:29:
98:cd:b7:8d:8b:52:f3:0a:08:07:0e:f7:b8:02:91:
62:15:3a:63:f4:43:7b:b3:e0:53:b7:3f:fc:4c:06:
1b:16:c3:41:a3:52:06:41:43:77:fa:7d:4a:74:41:
b5:aa:cf:ff:48:d3:f9:58:cd:23:0b:ff:ac:81:40:
01:05:73:74:73:22:bd:90:4d:e1:d9:da:0a:c2:53:
f7:55:fd:43:17:07:89:04:a6:75:c0:c6:fe:44:44:
10:b3:9f:b7:f8:16:6d:f9:a3:6d:36:99:22:80:16:
e2:72:45:67:be:4d:05:5b:b7:b1:6a:4b:41:24:fb:
37:36:56:63:1e:a0:bb:05:55:47:dc:f5:3b:26:de:
4e:8d:7b:cc:37:0c:09:36:de:18:da:7e:00:77:a0:
bb:f6:6f:66:99:88:a0:3b:7c:33:bd:0c:a3:a2:2a:
e9:c8:ae:5f:f4:9b:2e:3e:8b:32:cb:e5:2d:2f:23:
ef:55:8e:8a:54:5d:96:10:7d:23:f6:da:0f:b0:55:
2b:66:0f:99:ae:37:42:dc:51:f5:3b:2f:fc:55:1d:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:EE:10:76:EA:0C:22:AC:1B:16:A7:A4:9F:50:58:D7:05:7D:DF
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:b3:be:09:5e:2f:3e:48:6b:b1:2f:d1:76:5a:14:cc:3e:
1d:ec:e5:aa:bc:68:01:d3:9b:8a:01:a3:8b:c9:b0:4c:9b:1d:
7e:f8:20:f8:e7:3b:3e:43:a6:e3:d3:0a:33:07:d0:20:c6:95:
06:a1:6d:6f:92:00:16:6d:06:f7:70:85:3d:b9:9e:e1:c9:fc:
fd:ac:75:a8:b3:45:c9:e3:51:cc:c1:0a:bf:86:80:8e:30:64:
34:8e:ab:e2:58:02:f8:64:37:88:bd:39:a5:d6:42:ec:31:d6:
48:fa:6c:9f:e5:bf:4a:61:10:9e:80:8d:b4:a7:49:f3:0c:c9:
59:e3:5d:94:13:ff:65:86:ef:6a:66:40:ce:a3:bf:b1:4f:5f:
a1:94:9e:02:d3:51:98:39:9d:b3:85:7c:f4:17:ab:7f:e7:18:
c8:af:ee:32:0e:2c:99:20:39:8e:8a:2d:c9:1d:92:75:7d:e1:
0f:f9:9a:07:fd:fb:6a:4a:7e:c1:35:3e:c7:65:01:7d:16:be:
db:e7:dd:fc:f1:f4:4a:9c:06:f9:42:bd:ba:28:79:16:e0:d7:
81:e8:8b:3c:0a:64:b4:70:91:f3:93:70:16:45:32:a6:b2:82:
c1:cf:97:53:ed:31:38:6f:88:a3:49:7a:bf:1b:60:88:98:11:
2c:f5:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:34 2026 by rpki-client