
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json)
Hash identifier: HyG0nRgVch3J2WS85Ryt7rtxceoEQPGgB9wntDXZPes=
Subject key identifier: 42:5C:0A:C9:4D:E4:7A:64:07:8A:AB:39:CD:56:E8:C3:1B:DC:CD:84
Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
Manifest number: 01F7
Signing time: Thu 19 Feb 2026 02:00:44 +0000
Manifest this update: Thu 19 Feb 2026 02:00:44 +0000
Manifest next update: Thu 26 Feb 2026 02:00:44 +0000
Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: l8RtTzZvkEcB5lDCdwSBPyoeU4DJMUflN3A+VptToTA=)
2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: V7+xw0Oh19sCCsRJ/3dn3BE03yFJdR1cttirX6vRQc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Validity
Not Before: Feb 19 02:00:44 2026 GMT
Not After : Feb 26 02:00:44 2026 GMT
Subject: CN=69966ecc-ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:84:f3:7f:cb:56:16:c7:f5:bd:98:4f:90:
18:34:d2:93:4c:1f:c1:b4:97:c5:22:2d:10:74:f4:
a4:32:ff:42:23:b9:f5:a1:e0:c6:5d:df:23:38:39:
39:41:19:8d:e3:fb:7d:04:5e:21:75:4f:0c:3a:b9:
1e:8f:ed:e0:6a:06:28:5f:b3:34:d4:e3:82:4f:92:
3b:e1:7c:bb:18:6f:b9:8a:5c:db:57:ae:60:9b:18:
51:30:e3:d2:a2:fa:11:01:2b:11:3a:fa:07:89:a0:
ce:4a:39:5e:9c:42:96:e2:f7:3d:4e:b0:57:d4:c1:
ae:1b:1d:10:c6:d8:8e:3a:27:d9:88:ef:c8:1f:4c:
dd:63:3d:77:9c:bd:4e:da:3b:b1:cc:d6:e3:84:c2:
a9:cc:5d:39:4d:de:e8:80:10:d2:7a:85:fe:92:ac:
0d:e8:09:12:56:7b:f9:13:ab:23:a8:1c:79:cb:84:
39:fb:d9:8f:f2:92:08:27:a5:16:09:bf:fd:a7:a3:
5a:35:5a:94:c3:52:37:fe:be:87:eb:50:56:6f:9b:
21:87:08:d8:5c:db:f3:9d:a7:ef:63:9a:d3:43:07:
3e:d7:a1:b2:b2:f5:f1:f4:21:d0:66:22:68:af:75:
93:23:0c:1c:3b:f4:31:b5:ef:75:66:04:95:8d:5a:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:0A:C9:4D:E4:7A:64:07:8A:AB:39:CD:56:E8:C3:1B:DC:CD:84
X509v3 Authority Key Identifier:
keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:4a:d2:6d:73:fe:39:3e:a3:ad:df:28:dd:33:f4:a7:6a:
14:7a:22:2f:9e:0b:b8:ec:76:8f:ee:e0:62:4d:24:f3:77:b6:
da:25:8e:40:b6:19:ff:2f:e1:b1:1f:ce:44:93:33:fa:58:ec:
21:87:37:b9:ba:af:6b:ae:de:2d:39:53:6b:e3:7f:0e:a3:18:
39:f0:01:ef:4f:df:16:ca:c2:b2:2d:29:99:3a:e4:11:84:6e:
87:5d:60:bc:ae:c0:22:5d:78:45:81:64:c4:9a:3b:2e:0a:a5:
54:a4:b4:ad:2f:a4:d2:e1:99:34:bd:3a:ad:13:15:56:57:16:
11:3c:85:a9:ed:db:94:84:e5:0a:27:1f:a9:7d:21:6b:21:d5:
25:b1:60:a8:9b:7d:08:0e:c3:66:f4:19:e9:b4:b4:c2:81:46:
54:14:8b:23:36:d1:cb:ce:0b:6d:10:60:a2:eb:fe:75:39:1a:
36:11:16:04:01:dd:46:21:01:91:88:76:26:07:68:b2:36:90:
1e:42:63:78:0e:b3:10:37:01:1c:12:23:4a:ab:d0:e7:c6:6c:
ba:ad:20:c1:d1:7d:83:6e:78:78:f2:a5:4c:30:d7:28:bd:ba:
ea:a0:f5:39:d4:0c:36:0c:96:13:ff:7b:b1:90:f9:32:9c:3b:
4f:9f:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:15:46 2026 by rpki-client