
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json)
Hash identifier: tTfSIbq1VPeDaSnUS2A1Q9ZwiS2OjveYwDS3ektljgM=
Subject key identifier: 59:E3:1A:B1:EA:73:7F:DC:8F:02:05:A0:B5:32:8E:7F:58:31:C2:CD
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial: 108C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
Manifest number: 107B
Signing time: Wed 18 Feb 2026 17:06:29 +0000
Manifest this update: Wed 18 Feb 2026 17:06:28 +0000
Manifest next update: Wed 25 Feb 2026 17:06:28 +0000
Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: 01UR2pYo0pI0QcsMRBJ513MRrYZT+7c21QJrttTcms8=)
2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E=)
3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: fPoBgkYnMh4IMhrB/TA39+M1O1OAHZFrtUEJDkMooUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4236 (0x108c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Validity
Not Before: Feb 18 17:06:28 2026 GMT
Not After : Feb 25 17:06:28 2026 GMT
Subject: CN=6995f195-d6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:58:5e:ba:6c:bb:04:49:13:95:41:9f:bd:20:
ce:ec:f1:8c:06:70:1f:49:c7:ee:bc:2d:66:bd:24:
06:99:6e:7e:67:90:14:d9:45:1e:cc:ad:bc:08:d6:
8f:41:8d:ef:8c:24:6c:1a:e7:6f:91:06:92:0f:84:
d0:b8:f1:1f:99:6b:e3:24:52:b0:40:51:21:ee:75:
a0:31:42:5e:f8:72:14:d9:7c:27:a8:34:2d:c7:c2:
87:d0:87:15:c8:84:86:8c:22:c6:f5:60:33:69:5e:
b5:72:50:25:69:d2:bc:21:b0:a3:22:37:be:3b:fd:
21:9a:9f:d0:d8:d2:3f:42:1e:09:ad:da:ad:cf:c0:
ae:97:e6:cf:57:fb:e2:b0:dd:79:7e:bf:81:cc:3f:
6b:93:11:e6:23:99:23:b5:66:3c:a5:91:f0:5c:3e:
03:97:f2:6c:bd:1f:5a:64:c9:43:45:f1:13:c9:93:
c1:12:3f:f4:4c:99:32:2b:e4:8b:c0:55:88:9c:76:
21:05:1b:e5:46:2d:e7:b9:f7:31:e2:02:fb:57:bd:
d9:db:70:ed:21:14:07:75:35:71:c6:d1:93:91:19:
ec:85:26:ee:af:a2:86:84:34:a3:7b:02:83:6f:43:
2c:95:2a:39:80:a6:61:c1:fa:4d:84:19:01:fd:50:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:1A:B1:EA:73:7F:DC:8F:02:05:A0:B5:32:8E:7F:58:31:C2:CD
X509v3 Authority Key Identifier:
keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:e9:cc:f8:ea:1a:a3:f1:24:5c:0d:70:a0:3b:3d:6b:57:
97:7f:2a:18:3f:02:55:7d:9b:23:a4:92:fc:9c:ae:e6:44:bb:
54:6e:79:6a:35:d3:ed:8e:cc:43:ba:4e:0f:07:3b:6e:c2:cf:
70:e5:b6:d6:4d:0f:d5:b6:30:78:22:c2:84:b0:7b:89:62:21:
56:f5:06:0c:09:96:d5:b4:93:e7:34:95:f9:a9:cf:66:13:44:
ef:3b:14:6a:34:d5:a5:2a:f0:38:b4:a0:91:d1:22:26:72:40:
4d:dd:36:b0:34:8d:f8:63:8b:29:a1:ec:b9:c5:cf:1d:1a:a3:
5e:aa:83:26:f8:1c:b9:c5:39:cf:c1:09:dd:03:8d:8c:b0:a6:
0c:41:da:3d:3b:6c:c0:61:3b:be:8e:63:72:17:de:36:1a:fc:
f0:ea:f9:16:cc:0d:be:22:83:ca:09:c5:ea:74:59:d4:fd:d8:
4c:b5:4c:c7:79:ce:7d:13:f7:ab:f6:e6:4f:e4:c1:96:dd:53:
1b:a3:11:c3:19:74:72:db:32:6f:42:6a:c1:77:25:6e:c7:f0:
81:7e:77:94:17:0f:8d:8b:33:36:2b:14:60:79:b5:a4:5b:5d:
f6:47:aa:c5:c9:92:ce:1e:02:11:1e:10:6f:42:81:d1:ab:b3:
8f:85:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:50 2026 by rpki-client