
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
File: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft (raw, json)
Hash identifier: QZkli8Bf2Zb1uq1LPlqhpJVMPwRcPfEd2TKUtK6pwdo=
Subject key identifier: A0:6F:53:A1:A8:3C:64:09:25:82:00:C5:3D:E8:F6:69:70:28:39:58
Authority key identifier: E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
Certificate issuer: /CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Certificate serial: 07AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
Manifest number: 07A2
Signing time: Wed 18 Feb 2026 20:54:57 +0000
Manifest this update: Wed 18 Feb 2026 20:54:56 +0000
Manifest next update: Wed 25 Feb 2026 20:54:56 +0000
Files and hashes: 1: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl (hash: dfMOBYg7WQ8ikm7/rDtmafEPmF3MxGIaNzrUUYfRclw=)
2: 71C26BD039D211EB84B9FD6BC4F9AE02.roa (hash: 1VkiWuf3LmTXPo0lG7z4MV7mfdfkpr5ah6SxtTNpBGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4060, serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Validity
Not Before: Feb 18 20:54:56 2026 GMT
Not After : Feb 25 20:54:56 2026 GMT
Subject: CN=69962721-eb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:ad:0c:01:0c:dc:79:b8:68:1d:24:b8:65:
11:ca:dc:42:af:ba:17:4c:2a:a3:d2:b6:f3:de:bb:
f1:98:c5:b1:ad:60:76:af:c9:a1:41:54:c6:bf:d0:
0f:87:cc:1e:e7:c4:2e:3a:3e:45:cb:71:39:75:5b:
56:f3:a9:e2:de:2f:8d:8c:03:ac:d6:52:1f:f2:5b:
fe:d2:90:87:5b:71:a8:ee:58:ed:ac:13:56:b5:d6:
9d:84:e3:f4:e8:28:50:8e:f5:d3:4e:a6:b6:4c:de:
0e:e2:d7:43:73:32:50:9c:74:0d:40:fb:5d:a7:f7:
0c:e4:e2:6b:d3:52:bb:2a:fc:58:45:78:fc:09:16:
7b:1c:a4:ed:f2:33:23:0d:e3:69:12:92:67:cb:b1:
63:7f:73:df:8d:1e:6b:28:cd:4e:7d:2f:7f:75:51:
11:8c:21:0d:c2:a8:5a:88:51:25:ff:8e:2c:64:08:
8d:7d:cd:9e:35:61:55:46:21:35:6c:2f:b1:a3:d8:
76:70:7a:a9:17:0e:9f:9c:54:f5:c5:5c:e2:0e:93:
27:a0:24:5b:4b:fa:aa:d3:01:76:61:5a:7b:df:03:
89:12:79:37:26:64:4e:50:8a:9a:0d:0b:03:06:e2:
28:b4:3b:e6:41:8d:bc:23:1d:36:38:a9:a8:55:92:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:53:A1:A8:3C:64:09:25:82:00:C5:3D:E8:F6:69:70:28:39:58
X509v3 Authority Key Identifier:
keyid:E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:f8:b2:ab:a2:c0:08:1c:9a:75:16:57:e3:3e:d7:1a:bd:9d:
70:d9:04:ab:18:22:05:fd:39:a3:6b:62:61:fe:29:fb:a6:cb:
61:54:19:f2:63:ef:22:ce:0d:9f:b9:b6:e1:06:2b:d6:85:fe:
62:1c:52:43:9b:cc:57:0a:e5:5a:16:23:ff:d5:4f:19:16:8a:
ef:a0:c5:ed:0c:2b:cd:80:4d:af:15:2b:e7:b5:0c:62:1b:2b:
70:63:dd:18:bf:e3:72:a2:53:84:96:4d:4f:a8:b2:c9:35:59:
84:93:f9:66:36:32:77:5b:74:09:40:59:a5:fb:c0:2e:2e:5e:
fc:26:2d:91:c4:78:80:35:df:c5:8d:dd:02:9b:64:d6:3d:e8:
05:09:9a:42:1e:05:ca:ca:d6:8f:f0:86:6a:36:5a:d0:dc:92:
72:3a:32:da:3f:55:76:69:96:77:83:35:22:10:ed:10:71:ee:
dc:18:29:32:9a:aa:82:4f:86:5d:c8:cb:2d:77:d1:b9:31:cf:
cf:26:4f:00:60:d6:c9:11:3a:82:2d:21:cb:0d:bf:3f:83:41:
b0:82:b5:f4:f4:fe:78:9b:3e:0c:a8:e9:84:fb:e8:78:6b:e4:
e9:01:a5:51:f2:df:03:c9:f1:d9:69:8f:f7:b0:e5:f8:10:e5:
f6:5d:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:22 2026 by rpki-client