
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json)
Hash identifier: N6Nfb0DHgzaLh5qvA01GZhock7jg+3gFOaPW2w0Pkhg=
Subject key identifier: DE:33:48:BA:F9:8B:49:38:FA:15:01:AF:F5:3A:BB:3A:D9:7B:F3:A5
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
Manifest number: 01D4
Signing time: Thu 19 Feb 2026 02:13:59 +0000
Manifest this update: Thu 19 Feb 2026 02:13:59 +0000
Manifest next update: Thu 26 Feb 2026 02:13:59 +0000
Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: Een5THtYbDpNh0MPoe4Il6PEEp8zZOM2nXeFj+Y4bV4=)
2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: bUZufHm2YUJjKX7UE+iKB/iI+xqEJZ46mEmd8NCr+x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Validity
Not Before: Feb 19 02:13:59 2026 GMT
Not After : Feb 26 02:13:59 2026 GMT
Subject: CN=699671e7-2241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:ff:27:a6:ab:59:31:93:a7:7a:a5:38:44:
c3:b0:04:25:c6:04:0f:a1:e9:76:35:b7:0d:cd:b2:
61:27:cc:f5:0c:df:56:1c:39:97:fa:26:c7:9a:6e:
da:12:9d:e1:fe:3d:39:cc:12:1e:12:28:5c:49:f1:
ef:b5:3f:d4:56:43:67:7b:e3:f1:6b:e9:ba:ae:10:
03:7c:99:c4:3f:0b:fe:be:fa:61:16:aa:1a:8b:73:
0b:11:72:ef:8c:91:3e:ab:dc:4b:68:97:06:d9:91:
2a:db:9a:ca:54:eb:ca:c8:bf:17:41:68:3b:02:27:
fa:97:6d:36:c0:31:4a:16:fe:e4:6f:22:38:bc:d8:
41:d6:16:30:a0:f0:3e:2b:7e:f1:b7:c2:a4:d5:0c:
5d:28:c1:a6:ce:88:1d:fd:7e:98:6d:5b:e2:31:e6:
50:bf:12:d2:12:3b:2b:38:f2:93:f2:4e:66:d8:6a:
0d:ad:9b:ad:1c:aa:d6:b4:5d:70:d7:3b:b9:52:5f:
3b:98:89:cc:20:d5:22:dd:02:3e:54:22:85:95:ce:
67:30:f8:13:7d:09:16:1b:06:8f:04:67:b7:97:c8:
82:f3:2c:82:a0:f3:ae:ac:3f:20:5d:45:22:96:d1:
86:9f:ef:9f:e3:b2:2c:72:cd:fc:c3:ee:c4:07:ae:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:48:BA:F9:8B:49:38:FA:15:01:AF:F5:3A:BB:3A:D9:7B:F3:A5
X509v3 Authority Key Identifier:
keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d1:26:a4:d8:36:33:55:df:21:02:8c:8f:0e:a8:cd:34:ef:
9f:0d:17:35:37:5c:8f:62:45:d2:05:b0:e2:57:2e:e4:72:7f:
15:df:b1:af:aa:bd:81:44:ac:4a:7a:39:5e:ff:5e:0f:13:d5:
07:df:89:c4:5d:cb:cc:42:1d:b0:bc:0d:65:3d:8f:79:3d:19:
f0:eb:3b:d3:fe:c8:09:3f:53:42:de:9e:59:3b:2e:2e:c0:21:
6d:05:f5:99:ea:db:04:db:6d:06:96:db:ae:e7:fb:05:58:b0:
76:70:e1:50:e6:51:2c:e8:f7:f0:6d:c3:df:8b:22:fd:20:95:
4f:3f:2b:c8:b8:f0:62:6f:86:a6:3e:17:8a:79:d4:97:4d:ab:
04:df:89:f4:20:6b:c1:16:4f:bc:63:90:67:91:d5:5a:98:28:
10:f7:52:c8:a3:25:53:08:b5:5a:f5:5b:f7:68:12:61:0b:ed:
76:a9:8b:10:c6:57:4c:77:92:77:af:48:46:4f:fd:d7:1a:46:
2f:85:f0:49:75:5c:71:4a:ce:ca:c3:56:2b:69:03:db:4a:43:
b7:69:8b:d7:b6:00:a9:83:d7:32:76:72:12:0c:e7:3e:7c:3f:
51:7b:28:26:c1:6c:34:cb:d8:04:ae:3f:f4:3a:28:37:08:e6:
53:98:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:02 2026 by rpki-client