
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json)
Hash identifier: 3SWBEjYhkNk+AUU5J+I4f1vAnbbppPiwvg3eoRw3O+0=
Subject key identifier: 7A:A6:F8:78:A7:3B:83:D7:8E:90:3D:23:EC:22:27:4E:5F:26:62:68
Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B
Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B
Certificate serial: 0CEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
Manifest number: 0CDA
Signing time: Wed 18 Feb 2026 17:54:34 +0000
Manifest this update: Wed 18 Feb 2026 17:54:33 +0000
Manifest next update: Wed 25 Feb 2026 17:54:33 +0000
Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: pETHWybvwHCzMXu16WoGrg31gUB3XTD8wRboL/WCqho=)
2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: h0JVc0feBSsBtGgtIFmFXoruNLmCUIFMpwPnZkbgYJM=)
3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: lMqPBu/BKT48fZ8pGUUoRP0HkCDNeelzqdKzBxYepxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl
rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B
Validity
Not Before: Feb 18 17:54:33 2026 GMT
Not After : Feb 25 17:54:33 2026 GMT
Subject: CN=6995fcd9-990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:91:d8:f3:a3:79:0e:87:b7:18:7a:8b:42:
71:fc:4e:5a:be:1a:6a:ff:1d:bf:89:74:8c:bf:73:
2f:a2:cd:6a:c9:78:f8:5a:6d:cb:91:e6:d2:df:d1:
7a:e6:34:9b:da:5b:ba:10:31:6a:96:97:51:f4:eb:
4e:5d:d4:ff:c0:6e:45:a5:0f:ce:97:49:21:b6:af:
32:8d:13:a6:85:ec:8d:31:ca:5d:95:df:64:db:a4:
5d:ab:ae:16:09:7d:fb:76:34:3f:a9:6e:f2:da:fe:
f2:ce:3d:1d:b0:f9:5b:a4:b0:59:e8:7d:fa:04:6f:
f9:4a:d8:86:8b:95:5b:f9:5c:85:04:53:96:86:74:
9b:81:60:fb:c5:7b:21:89:23:f3:04:a6:0f:6d:50:
9e:9e:ec:0d:b2:dc:0f:ae:0b:15:41:6a:97:46:4e:
a2:73:24:24:3e:e9:3a:5d:99:ad:e6:f1:5f:bb:6f:
07:bb:7d:42:46:96:e0:3b:10:00:a1:bb:2f:6c:39:
30:f4:8d:7a:a4:af:65:ba:3d:bc:6b:f7:16:f1:0a:
b7:e7:7e:ee:25:da:9d:17:98:e8:bd:13:b7:55:0e:
06:44:56:1b:9f:b2:fe:5e:92:61:d4:cd:78:f9:b4:
cd:a0:a2:54:40:b9:68:30:62:92:59:4e:bb:df:f4:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:F8:78:A7:3B:83:D7:8E:90:3D:23:EC:22:27:4E:5F:26:62:68
X509v3 Authority Key Identifier:
keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:cd:50:73:f0:a1:7e:e3:ca:2d:2b:75:41:ed:fc:89:d0:ed:
3d:90:bb:89:5f:71:c5:67:30:a4:16:34:2d:cb:dc:e9:8e:31:
52:41:40:2f:b6:a4:8a:97:4f:47:79:34:6b:85:9a:ef:bf:ed:
99:77:69:76:4d:1c:f4:5e:76:c3:c9:fe:f8:5f:50:3f:f3:a9:
28:e5:f5:d2:0b:67:9a:fd:57:5f:37:70:b3:96:18:7d:c8:ae:
07:9e:e8:e0:c7:2c:3e:19:7e:4f:77:f2:7b:16:93:ff:1d:bf:
53:e8:93:11:ce:5e:65:3b:1f:cf:f8:a1:6d:38:da:09:02:18:
fd:28:71:dd:b4:bf:73:b3:71:b1:23:90:ea:0f:b8:bf:4c:bc:
fb:38:16:fb:9f:cd:2c:07:1b:e1:c8:45:2f:75:dd:1f:76:44:
f7:ae:7d:31:c2:33:ea:fb:33:cf:38:c3:a3:5f:a9:14:b4:ca:
8c:7e:2c:f5:4d:88:6d:bc:33:63:fd:67:b2:5f:ba:81:7c:e0:
ec:89:17:b4:31:ea:f5:50:fa:74:37:a7:1f:57:dc:bb:57:10:
e1:12:9d:c0:4c:5f:7d:42:7c:bd:98:b2:bf:34:62:03:a3:5f:
94:21:3a:69:39:cc:11:71:f0:80:fd:b8:d6:ff:0f:1e:16:42:
7e:e8:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:52 2026 by rpki-client