
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json)
Hash identifier: jvzT8mMUaZ1UtrXzTtXJ+YYgX3NS5JuhsrGcmQak5Mk=
Subject key identifier: 23:EB:CE:1A:01:40:04:93:49:6A:1B:40:02:42:2C:4E:43:12:7D:11
Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Certificate serial: 0989
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
Manifest number: 0981
Signing time: Wed 18 Feb 2026 19:34:56 +0000
Manifest this update: Wed 18 Feb 2026 19:34:56 +0000
Manifest next update: Wed 25 Feb 2026 19:34:56 +0000
Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: KaT/3ifmzk88N5dFWTpwqSOYSXNgaCjOv2PXJxGsoHM=)
2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: vF+3jtePHsbwMW7GFk7Eys2kw6qOXJ50sYtNC1K6B7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCF31, serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Validity
Not Before: Feb 18 19:34:56 2026 GMT
Not After : Feb 25 19:34:56 2026 GMT
Subject: CN=69961460-33f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:fb:d2:f3:c8:96:2c:ca:cd:2b:18:33:49:
61:a9:5a:d9:2d:f4:2a:b9:e1:b0:99:15:3a:1a:a4:
e4:18:10:a6:27:a2:39:b4:0b:6f:04:02:f2:b2:af:
ab:94:da:a2:4a:29:df:e5:f6:52:8f:bf:07:0a:d0:
a7:b6:c1:58:64:9b:0a:cb:f9:4c:3e:6b:05:6b:8f:
9e:71:f4:66:fa:c6:3e:04:0f:f0:ef:02:0e:47:fd:
a6:8a:0b:1f:9e:77:d7:82:e3:ab:1e:76:47:1b:78:
c7:30:48:7d:20:bc:8d:8b:e6:35:c4:2e:20:4d:12:
dd:77:b7:1a:34:3d:02:4b:8a:85:b7:3e:c3:67:9a:
c7:5a:f8:c7:3e:2d:23:ef:a2:17:18:f7:9c:14:ba:
17:7a:d8:8f:06:3e:50:c4:e7:e9:1a:a5:ee:b8:49:
6b:25:a1:52:bc:bb:32:3e:4b:f3:35:94:b6:f3:00:
7c:bf:2b:ec:ad:44:66:52:de:44:f1:a8:38:ac:73:
a8:5f:40:04:51:18:c3:15:24:37:5e:77:80:48:d8:
46:af:f2:26:1a:ea:df:59:20:a4:c5:6e:ca:aa:1d:
8b:0a:70:2a:e5:a5:ab:62:53:fb:54:57:61:33:ec:
fd:cf:9b:23:59:37:9b:fa:90:d0:c6:2a:e1:17:07:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:CE:1A:01:40:04:93:49:6A:1B:40:02:42:2C:4E:43:12:7D:11
X509v3 Authority Key Identifier:
keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:42:2f:59:02:ab:f3:71:a1:b1:a7:9f:d4:2b:60:7f:32:81:
b8:0a:d1:06:53:4c:58:2b:ba:15:3d:0d:19:36:32:e0:27:80:
55:f9:c0:2c:85:eb:f0:69:f7:cb:3b:b4:18:62:30:af:aa:3a:
43:d0:cb:dd:74:84:54:38:2c:28:fe:5d:b7:84:ac:13:84:11:
c4:df:b1:a5:b7:8e:6f:3e:a4:64:fe:e1:76:62:c0:51:4d:fe:
97:81:90:c3:ed:1f:de:98:ab:f9:1e:85:a7:73:37:77:58:97:
1f:ea:66:10:ec:df:56:e5:42:57:d2:53:9e:83:f0:a7:5f:44:
db:1c:9d:c9:c2:50:04:40:46:f8:30:f3:d4:7b:d0:aa:c2:a4:
8c:e0:1a:49:62:d3:ef:6b:e1:af:03:a2:df:a0:63:12:64:9d:
79:0f:9a:b2:00:e1:bb:c6:c3:24:ef:19:f7:db:21:1e:c6:10:
b4:45:53:ed:bb:e2:94:4b:a5:c1:0b:ee:50:27:3e:58:fc:bd:
3f:1b:9c:f1:7a:42:a7:1d:de:c3:f5:8e:1c:87:15:f5:d8:20:
8e:c6:26:f6:a0:d1:c0:45:be:1d:ff:88:6d:e9:70:31:9c:c4:
a1:4d:54:7d:0f:c1:1a:a2:11:d8:54:18:97:fa:53:18:ac:19:
57:c6:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:47 2026 by rpki-client