
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json)
Hash identifier: 2whg8beWxJlH6kt9s1AMsNIE7Znm40EFGKdDj3n9MrA=
Subject key identifier: DE:5E:52:99:59:A8:17:E4:41:EF:64:6A:77:3B:44:AF:67:F0:C9:AA
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
Manifest number: 0221
Signing time: Thu 19 Feb 2026 01:31:54 +0000
Manifest this update: Thu 19 Feb 2026 01:31:54 +0000
Manifest next update: Thu 26 Feb 2026 01:31:54 +0000
Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 9BUK/SxxfVhHOkWuyqC6c9O6HbmjeJWV9jHAckKcGlU=)
2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Validity
Not Before: Feb 19 01:31:54 2026 GMT
Not After : Feb 26 01:31:54 2026 GMT
Subject: CN=6996680a-fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:03:ae:06:17:75:94:f1:81:7c:06:ec:06:
fb:54:f4:f9:48:70:ff:ea:4d:f8:5b:b7:9a:2d:42:
a9:6d:a4:4e:ee:31:13:70:d2:ec:94:7a:79:68:8f:
93:da:03:13:f9:2a:7b:5f:77:77:9a:b0:fb:6f:6b:
2d:42:8e:9b:4a:bb:01:e1:ca:de:08:f8:ca:3c:3b:
41:c7:5b:f2:bc:33:35:22:13:d8:95:67:c9:96:a7:
3d:7a:c9:fd:78:51:0c:bf:81:7e:ba:56:91:72:90:
8e:e3:93:c3:e4:11:3a:14:bf:2c:cc:c1:61:9b:fc:
bd:4c:f9:75:d3:cf:1c:fc:14:9a:7b:72:8b:2c:ee:
ad:05:9a:60:ae:12:fc:04:18:e7:6b:31:ba:b4:aa:
a6:bc:7f:c2:8c:93:b2:58:ad:ff:6e:7c:89:05:16:
52:12:26:8e:5f:f0:67:bb:35:3f:8c:7b:e2:8e:3e:
54:b9:c2:a8:83:86:96:3e:c9:90:98:db:7d:88:fa:
ec:ff:9d:f8:28:e1:26:ab:aa:c6:27:48:47:f3:b0:
99:ca:72:2a:03:b8:d2:21:33:a2:b9:b4:44:3c:6f:
8f:8c:35:41:51:9d:5d:08:48:50:f7:34:de:e0:4a:
f0:df:8f:71:9d:de:3a:5e:fb:72:c1:83:10:c1:50:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:52:99:59:A8:17:E4:41:EF:64:6A:77:3B:44:AF:67:F0:C9:AA
X509v3 Authority Key Identifier:
keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d9:16:fc:ea:b4:f3:5d:64:2a:f8:ba:b0:78:52:0b:ff:b2:
e2:0c:ce:67:ff:50:01:51:0e:65:f0:f6:61:1d:9a:5d:b6:38:
50:77:9f:89:88:d2:cc:dc:94:c1:8d:93:b0:79:26:8c:6d:69:
52:e5:6f:da:78:7a:61:7f:56:f5:9e:1c:72:91:a9:d9:73:8c:
fd:eb:9e:3c:d0:ca:bb:3a:12:7b:19:7a:ae:ae:82:28:eb:bb:
e5:2d:18:28:b2:d1:10:dd:1e:6c:7c:ad:da:62:38:bc:7f:24:
79:4e:58:f7:9c:f3:c0:0b:3d:f5:3b:9a:ea:87:d2:fe:84:88:
2f:3b:75:21:d7:21:d4:23:01:65:cb:a7:fe:cc:03:29:c7:22:
a6:3e:bc:95:8e:63:46:6a:8a:79:58:5e:6a:09:05:ca:6a:92:
c3:a4:13:e0:86:f8:ba:19:95:69:87:bc:fd:e6:64:03:02:55:
8f:28:45:41:24:3b:00:24:8e:9c:1b:41:e5:39:5c:9e:ba:61:
03:1a:4a:92:72:62:a2:60:e7:0d:aa:19:ce:4a:37:53:95:a7:
da:15:8e:59:a4:a2:3a:d2:61:63:03:c1:b4:ab:8d:2f:04:29:
7c:ae:03:62:65:c3:60:87:8d:27:ad:e1:bc:b4:f0:fc:b7:bb:
34:30:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:47 2026 by rpki-client