
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier: rzKCzHpDU/WCPVhWVgXWryKen+iiIrsqMr1XPd0kYXQ=
Subject key identifier: 05:8A:43:22:70:D2:A9:1E:19:06:9D:33:B9:53:20:6A:35:20:CF:20
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 3545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number: 3530
Signing time: Wed 18 Feb 2026 14:40:03 +0000
Manifest this update: Wed 18 Feb 2026 14:40:02 +0000
Manifest next update: Wed 25 Feb 2026 14:40:02 +0000
Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: Rdf9nGSTqramUK1Z4ANECIfGTFQ2HFCsaIIFPBndIFM=)
2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: mBi2xBGJz7ABmwG7Kd/FaX5nMMQUKh+oy7XK2XR044o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13637 (0x3545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: Feb 18 14:40:02 2026 GMT
Not After : Feb 25 14:40:02 2026 GMT
Subject: CN=6995cf42-7d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:0e:4c:a1:e3:34:a6:4f:a0:38:61:89:85:
eb:a9:f8:aa:fc:71:bc:e3:56:c3:33:fc:c1:e5:b8:
ef:28:e0:57:39:26:80:77:b3:84:7b:eb:bc:22:96:
66:e7:d1:5b:d5:6c:d8:32:f5:71:52:c4:70:8d:60:
16:f0:ff:36:90:2f:ca:e5:09:10:02:c9:fb:03:70:
29:60:f2:ac:7d:5f:d9:72:80:fa:7b:15:58:72:94:
31:b9:f0:53:78:46:f2:e0:ca:44:2d:26:14:a3:48:
ae:28:30:c5:bd:38:04:21:64:0a:4c:a7:95:80:2f:
d1:c7:10:7f:40:57:f4:1c:41:71:06:d2:e8:39:7f:
56:21:a0:94:8e:b4:d1:de:e2:f6:a4:38:b3:f2:0a:
f3:fa:44:ce:73:1c:0e:ff:84:c3:cc:95:dd:61:d6:
9e:2e:5c:8c:a3:13:8b:76:70:75:9e:86:bb:50:8d:
77:d8:ca:f0:77:c6:6e:42:09:c8:cb:4e:da:e0:78:
65:55:f3:af:38:a6:15:5c:31:0b:1f:4e:b6:41:a6:
36:38:7e:8b:56:94:97:0e:b3:e1:0d:a5:eb:35:e3:
e0:79:1e:da:1a:b6:c0:bd:6b:b3:46:75:21:f4:4f:
91:d6:2d:67:b6:1d:50:86:e7:5d:c6:ed:a8:c5:a9:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:43:22:70:D2:A9:1E:19:06:9D:33:B9:53:20:6A:35:20:CF:20
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:63:ca:35:33:9a:16:e5:a4:a7:a9:ef:46:15:f8:da:84:12:
fa:3e:d4:8a:e6:f5:1d:4d:cb:d9:73:90:80:a3:32:08:c1:37:
48:99:8a:30:7f:02:dc:f1:c3:3f:bf:ff:60:52:b4:fc:f5:9a:
45:4e:26:af:45:02:60:3b:b7:4c:96:cf:fa:a5:fc:5f:55:22:
08:62:58:5c:a8:f9:8e:3c:a2:8b:34:ad:dc:e6:1e:2f:bb:ca:
c9:83:00:6b:44:14:91:84:54:24:32:d6:9a:c0:12:64:f9:f5:
fa:95:55:04:c2:0a:d2:ef:c3:7b:ac:8a:ff:87:08:a3:bc:38:
32:2c:48:ba:33:40:3c:18:8d:c3:d1:46:7c:88:be:03:b7:99:
54:42:92:6a:b7:b8:99:e5:8d:67:4f:31:1d:55:64:87:b8:fb:
be:2f:f9:84:a6:a5:4b:32:d5:71:96:9d:2b:b3:74:00:5d:03:
c6:28:26:83:a8:76:ac:d0:89:6d:54:87:7e:2f:eb:3e:55:d4:
63:b0:b6:c0:43:d9:48:6d:03:40:06:d3:fe:87:9d:19:fd:f1:
ef:53:3e:58:3b:94:32:98:19:aa:f3:97:b0:dc:7e:bc:e5:f9:
f7:67:bc:46:09:2d:ef:6b:7f:da:b7:fe:14:93:ae:a5:f5:29:
fd:4d:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:15:49 2026 by rpki-client