
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier: KgH3WjX6XMOf5gtET0txQtLKAD3zFqTgnqRw2o4GGMU=
Subject key identifier: 86:1B:B3:60:88:7A:4A:46:FA:F3:59:96:C9:AD:F1:FB:60:6D:9D:2B
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial: 0354
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number: 034F
Signing time: Thu 19 Feb 2026 00:09:48 +0000
Manifest this update: Thu 19 Feb 2026 00:09:47 +0000
Manifest next update: Thu 26 Feb 2026 00:09:47 +0000
Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: asNh/8pwA4NpafISlcNx2A+CSPSpIay+6qu0p2xolLU=)
2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: KkExhLw32KhJNP1vh+cfX+3O2VUbbBLKFmBZMRijetQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Validity
Not Before: Feb 19 00:09:47 2026 GMT
Not After : Feb 26 00:09:47 2026 GMT
Subject: CN=699654cb-1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:ff:78:42:97:fa:9b:91:f0:2f:f2:a9:a1:
f7:80:f5:03:02:9a:e7:ad:33:63:20:0d:f5:ad:dc:
6f:2c:ae:de:55:9b:46:bf:c8:37:14:11:1e:17:08:
ab:bd:09:7b:f1:19:b5:87:01:d3:40:d4:2b:dd:f2:
55:c9:9c:6a:d1:ee:ee:49:fa:ef:e5:b5:18:aa:dc:
7a:bb:25:a7:af:64:0e:50:6f:65:af:a3:6b:39:1a:
6e:6e:d4:08:e9:5c:e3:dd:ff:d0:02:bf:b2:a5:9d:
95:63:c4:c8:43:76:f5:e8:ab:af:48:79:64:26:66:
37:7d:a9:0f:24:47:fd:a9:9d:90:55:fb:ad:ed:bb:
1a:29:aa:e0:6c:fb:86:05:e0:f5:e8:91:10:96:8a:
0a:23:43:31:ec:1b:4c:cc:77:2b:d3:74:14:59:46:
6e:26:d7:fa:24:a5:1c:c6:f1:cf:89:93:0b:2c:65:
9d:43:95:e0:4c:84:21:30:5b:bf:c6:01:cf:53:b3:
d9:b4:f6:c2:f7:cd:3d:3a:c8:6c:90:54:d7:c0:bf:
41:f2:8e:a9:ba:e6:21:10:45:a2:c5:93:73:1c:f9:
cb:62:c4:b9:22:4d:38:74:15:0d:4a:e5:dd:2e:8b:
f8:54:68:6a:98:95:7c:a7:b3:a0:7d:d0:73:aa:0c:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:B3:60:88:7A:4A:46:FA:F3:59:96:C9:AD:F1:FB:60:6D:9D:2B
X509v3 Authority Key Identifier:
keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:26:11:55:0f:f0:b5:1d:aa:69:35:50:a0:3a:d4:f4:01:e6:
85:8b:4d:8e:ec:f1:9c:34:27:27:ab:bc:70:4c:5a:9b:f0:f1:
43:68:50:ce:a0:c2:5d:28:13:d4:1c:37:70:4c:e1:c3:a5:a5:
ab:3a:47:66:98:e5:00:3f:aa:57:21:6b:39:ec:97:7e:18:ef:
c5:ab:e8:88:a7:cd:42:40:f2:4a:2c:52:af:72:72:37:2e:0d:
fe:1e:c5:48:d7:98:73:81:52:09:98:05:02:a7:35:e6:51:dd:
39:56:7f:57:60:8b:c1:72:64:48:ed:4c:94:48:80:9d:f0:ff:
ca:8a:dc:c1:f3:f7:87:e2:47:c7:69:b6:00:c8:16:dc:77:86:
74:47:e5:7b:a9:87:68:0e:20:20:ec:bd:3f:bb:bc:20:bf:58:
1e:47:a1:0d:02:5f:27:62:c3:a0:e2:36:9f:54:29:75:ce:9b:
70:78:13:4f:1d:ab:4f:27:d5:79:2b:9e:c7:5a:db:91:12:b2:
39:49:50:7a:a8:45:7b:5a:29:ea:f3:e5:ba:0c:97:8e:29:40:
8d:db:1e:7c:a0:04:79:c1:20:c9:10:99:fb:fc:c1:98:a1:7e:
b4:a6:52:7d:73:69:a2:54:79:7c:e7:e4:23:f9:c8:5a:f8:92:
ce:4e:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:33 2026 by rpki-client