
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier: yhRMFF8ThDrrBvL7sNY2UUkIKUvk/FH/twG9BZ8dlyg=
Subject key identifier: 17:0C:29:F1:5B:7B:3A:18:AB:F7:76:A2:45:00:5A:3D:33:E6:36:40
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial: 0C8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number: 0C88
Signing time: Wed 18 Feb 2026 18:10:46 +0000
Manifest this update: Wed 18 Feb 2026 18:10:45 +0000
Manifest next update: Wed 25 Feb 2026 18:10:45 +0000
Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: Tf6SqA3TKvpCy70rn4zd2K4YzOAtFolcig3/YUJqqIE=)
2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Validity
Not Before: Feb 18 18:10:45 2026 GMT
Not After : Feb 25 18:10:45 2026 GMT
Subject: CN=699600a6-27d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:fb:26:51:b7:3b:60:0b:ba:49:9d:f5:4c:
05:5e:cb:3a:c0:9e:fa:f8:49:39:98:ba:a5:46:9a:
0b:39:b5:93:16:b2:ea:fe:c6:87:bc:cc:d1:14:9c:
60:ba:a3:c6:2f:fb:da:f9:98:cf:0a:f8:0a:2b:bf:
24:66:bb:cb:58:2e:33:b3:6d:b3:d2:1d:39:4f:15:
b8:f3:49:73:bd:68:82:a1:23:a1:7f:f4:61:6c:43:
a6:8e:19:e2:72:af:4e:c6:88:56:e2:77:74:f4:4d:
e2:2d:74:4d:97:88:b3:f5:1c:82:6c:3b:91:55:5e:
10:27:54:e5:cc:86:f6:8a:30:bc:8b:b7:94:7b:94:
17:85:d7:47:e9:28:3a:a7:e7:a0:ad:d0:b3:d1:85:
01:02:04:e7:5c:ba:df:65:8d:78:25:bb:f6:b4:eb:
c3:80:76:78:33:9e:ac:1e:c9:9c:19:d0:dc:91:c7:
7b:d8:f1:94:98:90:a7:54:47:a5:bc:48:ad:38:6d:
0f:c9:23:e1:7e:19:4d:34:50:de:ab:db:b0:7e:fb:
c9:57:14:1c:c9:13:ef:d8:dc:f1:a4:4d:04:e2:06:
af:b0:f8:a1:d5:16:93:86:e4:1f:f8:11:6d:2a:13:
06:6a:6e:41:e8:b0:ac:c7:d8:d5:cc:c3:1a:3c:21:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:29:F1:5B:7B:3A:18:AB:F7:76:A2:45:00:5A:3D:33:E6:36:40
X509v3 Authority Key Identifier:
keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:64:95:e3:45:bb:eb:66:c2:47:a5:33:52:9d:5a:a6:94:
41:5a:e4:81:a7:f7:da:54:60:db:45:59:ae:13:ef:a8:b0:52:
2c:82:22:78:68:df:39:00:30:c2:62:49:fd:57:50:46:ab:2d:
42:94:c6:19:2a:0c:91:6d:89:9e:fe:30:57:dc:73:29:ed:d9:
34:4f:7d:6c:53:43:51:d1:38:64:69:1a:af:40:48:8d:84:48:
db:76:97:00:35:9f:e6:a2:d9:21:7e:ab:bd:a4:66:52:f2:0d:
54:22:e4:f6:33:ee:b2:a1:7e:fb:3f:09:37:94:4d:26:82:cd:
ee:91:40:52:a9:3c:00:19:cb:89:af:d3:56:32:48:74:93:ce:
fc:d3:59:96:1f:2d:1e:06:12:ac:48:f6:3b:58:f6:d8:1e:b3:
37:a3:56:2f:33:fb:b0:50:51:2f:ef:0a:df:5a:53:d9:fc:b7:
04:1d:f5:65:7d:83:04:eb:72:90:2a:78:5a:74:df:20:f6:34:
98:50:e5:5d:18:de:c3:69:33:9c:e9:2b:1e:61:12:b0:94:6a:
b4:86:08:f4:68:28:06:bd:cb:85:b3:f0:9b:db:af:4e:49:53:
ec:62:59:52:49:ef:dc:14:01:0a:e6:73:c7:80:ce:d1:c3:ef:
80:2a:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:27 2026 by rpki-client