
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier: CNnlFoSGlKpZFVapFra6hDguStFo/zzJZh+D8Byzqb0=
Subject key identifier: 50:C9:3D:B4:51:FD:F0:59:34:17:6D:48:28:5B:21:86:00:CD:4A:01
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number: 0120
Signing time: Thu 19 Feb 2026 04:06:17 +0000
Manifest this update: Thu 19 Feb 2026 04:06:17 +0000
Manifest next update: Thu 26 Feb 2026 04:06:17 +0000
Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: LRzfkAZx7+2V+o8VwQQuWSCEdFKTsGXd5Fvb2obyEWQ=)
2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: yG8pJzZvCKmicDw0dwhTP12v3DvDJugGeiv6wIDOe9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Validity
Not Before: Feb 19 04:06:17 2026 GMT
Not After : Feb 26 04:06:17 2026 GMT
Subject: CN=69968c39-9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:ee:50:ee:73:41:24:b1:83:84:4c:61:75:
09:14:95:69:ad:83:9d:39:a1:53:91:3f:34:f3:1b:
d9:01:f5:50:c9:9b:f8:bc:9b:e6:a5:89:da:0a:04:
4c:9b:d8:ce:74:de:ce:78:36:4a:7d:fd:6e:d3:e0:
8b:e0:fa:bd:64:5b:ed:0f:df:fe:f4:2b:2c:75:75:
4d:85:6a:5a:50:fe:37:cb:da:8a:2f:8e:07:73:e6:
5b:2f:d7:e4:0e:48:48:02:e5:a4:7a:49:e7:60:a7:
b1:1d:11:03:7f:51:2b:8e:ba:18:b0:e9:e8:4e:e3:
55:48:e9:4e:22:e9:1b:f2:7c:92:99:1e:a9:03:fb:
d6:2b:c4:27:06:b6:2a:59:fe:87:2b:0d:f2:71:d6:
4d:00:34:dd:82:bf:6c:13:9f:71:75:da:f1:fb:fb:
62:1c:e4:f2:6d:b8:d6:3d:4a:22:81:4d:5f:b2:8e:
76:99:7a:0a:74:f4:cd:72:95:da:9d:de:d9:66:1f:
6c:11:0e:06:5a:5d:80:f8:46:72:f7:9d:ae:2a:e3:
40:0d:8d:6b:99:32:38:a3:81:f6:57:8e:0c:9d:e1:
7e:9e:89:aa:bc:99:13:72:25:ce:98:03:a6:f1:2d:
f4:f9:e8:51:b0:27:74:28:3d:d6:8e:bf:78:c9:b2:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:3D:B4:51:FD:F0:59:34:17:6D:48:28:5B:21:86:00:CD:4A:01
X509v3 Authority Key Identifier:
keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:22:8f:29:aa:fe:1a:30:b0:3e:06:6f:41:65:16:dd:8d:
67:68:5c:ca:3c:fd:53:3f:02:a2:0b:8a:e7:05:42:eb:c7:c7:
b3:d7:e8:25:82:91:78:9c:c0:ae:11:d3:a0:b7:7d:c1:96:5f:
9f:06:ae:4b:51:54:94:94:83:d2:27:8c:1d:36:fb:cf:0c:62:
65:80:3a:b6:b6:05:5a:f6:6a:ab:f7:bd:b1:35:27:96:a8:ee:
ed:fe:e7:b0:b6:43:97:a7:91:b5:9d:db:cc:d7:70:3f:4b:7c:
c2:ed:31:db:be:8f:9e:8b:59:55:ef:1b:a2:ef:82:6e:6c:96:
b5:1d:28:51:b4:94:8d:0d:77:1d:2b:41:56:da:ed:2f:4f:8f:
29:c3:61:3f:8f:55:9f:89:ad:f7:40:a8:47:30:9d:81:45:08:
93:6b:5d:7e:8e:17:dd:45:de:a3:43:1b:a6:4a:6e:ae:b1:42:
93:f8:a7:97:b8:13:9d:3a:c3:13:10:0a:12:20:3a:45:e9:f5:
cd:6d:9b:8a:d7:14:e3:c3:b1:24:4f:08:37:aa:3f:65:90:1d:
2b:01:96:2f:84:14:23:09:df:fd:dd:76:18:6e:b8:47:68:62:
6f:42:03:2b:f1:92:fc:15:01:99:b7:aa:51:56:ff:d0:cc:54:
e5:0c:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:01:13 2026 by rpki-client