
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier: adnOVV/j8oNgeUEOLemyUdUNaEz5TVwJg+hAn1ojuMk=
Subject key identifier: 29:89:50:A9:E3:99:A4:94:84:B4:F0:DE:0B:2A:C4:65:2E:CB:F3:1C
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number: 0189
Signing time: Thu 19 Feb 2026 03:04:59 +0000
Manifest this update: Thu 19 Feb 2026 03:04:59 +0000
Manifest next update: Thu 26 Feb 2026 03:04:59 +0000
Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: i+uzAZqapiWE9gdzvCBhpiLm4YC6sGadCtTucrjaR0I=)
2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RLZuHwOgQEUaPkuZuTnWsz7rfKPwv51ebWShkrRfCcE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: Feb 19 03:04:59 2026 GMT
Not After : Feb 26 03:04:59 2026 GMT
Subject: CN=69967ddb-2e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:6a:4e:77:68:cb:49:1d:47:33:32:68:09:
75:0d:a7:af:98:6f:36:74:bf:9f:bc:f9:15:2a:32:
0d:ca:be:aa:53:ab:23:dd:d1:bc:92:96:da:52:ce:
5d:59:0a:63:19:58:0d:ab:8e:86:0c:6e:c4:8b:a5:
ae:c2:8c:84:81:1d:18:9e:a1:cc:95:d5:1f:fd:f1:
a4:14:80:1e:34:ea:29:f3:f6:fd:80:6d:c5:97:e9:
5d:b6:f2:fb:0a:f7:1a:44:d9:08:63:a9:9b:87:9b:
00:1d:9d:1a:0d:f8:6c:66:c5:1b:2f:a0:46:35:76:
51:30:91:40:0e:66:ac:17:ec:34:c6:0d:45:5e:6d:
3e:57:b4:cc:cc:88:1c:a3:ed:04:c0:2f:3c:dc:2d:
ad:6a:f0:93:12:63:cf:b2:93:7a:c7:b9:56:14:e5:
6d:36:e8:57:92:0b:88:4e:1c:64:a1:1f:5d:b4:a3:
57:12:06:7c:00:86:63:52:ac:9f:9e:11:2c:2e:3c:
d4:c0:32:a6:17:c2:18:55:72:99:ca:30:06:a4:b9:
d9:5d:01:43:af:27:98:2d:f9:6e:e5:f0:a4:1f:61:
93:9b:01:a6:27:b4:6e:1d:7a:19:93:35:36:79:a8:
d1:16:9a:83:2b:c2:4d:0c:d0:3e:cd:92:15:3e:ce:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:50:A9:E3:99:A4:94:84:B4:F0:DE:0B:2A:C4:65:2E:CB:F3:1C
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6f:c7:0d:84:51:ca:6d:99:c9:29:fa:4f:fa:78:8a:c2:6e:
e3:9b:32:00:45:4d:74:07:e3:b6:67:d5:f2:76:68:76:ba:9f:
da:23:73:6d:ad:4c:a3:78:f6:e8:2d:8b:0f:a3:07:bb:ab:6f:
e6:0d:d2:a5:3b:9e:93:b1:2c:c4:23:1d:3b:11:82:51:02:25:
0a:d4:d3:d8:b8:28:59:13:89:35:20:9c:7f:48:55:d3:58:ae:
4e:a3:35:73:73:94:66:71:bf:06:86:14:8e:80:4b:7a:14:84:
35:ea:a9:ba:7f:22:a8:6c:d5:f7:d2:e6:ea:18:b5:53:8f:34:
13:95:1e:a9:90:28:d4:72:09:99:fd:57:8b:08:3e:af:74:11:
c6:dc:3a:75:ad:b4:04:ac:7e:65:7a:d2:3a:3d:6e:4c:97:eb:
a3:09:96:3a:14:0d:13:33:3a:f3:f2:c5:4c:38:0c:52:7f:f0:
38:dc:19:4c:d1:fb:4e:c4:4c:98:dd:29:aa:04:7f:7d:64:80:
79:2f:5f:2d:ef:63:ed:60:e7:4b:ef:9d:21:06:2e:3f:72:da:
e8:5d:c2:04:f2:3f:6a:34:5b:14:fa:49:e9:5c:0f:bf:2e:0e:
de:00:33:ff:5b:45:1e:3f:35:47:fb:13:6b:18:a0:8d:7b:a3:
33:b1:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:07 2026 by rpki-client