
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json)
Hash identifier: VTAZB5WLLs7oHsL1YaS0egyNnbaypaRUuqTRClnuAKE=
Subject key identifier: C4:4A:45:DF:CF:47:30:EE:B0:D9:E3:41:EF:9B:34:B6:61:A7:0E:C3
Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Certificate serial: 0CF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
Manifest number: 0CED
Signing time: Wed 18 Feb 2026 17:48:00 +0000
Manifest this update: Wed 18 Feb 2026 17:47:59 +0000
Manifest next update: Wed 25 Feb 2026 17:47:59 +0000
Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: iXvsNMi7KZx4ng1KU7gSN4Jau+21aIxqGSjUSY9UOcA=)
2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: kORq6/cl+oCzGu+ttlLoR0HpOr8sfMN0azjct0QnY7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl
rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3317 (0xcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Validity
Not Before: Feb 18 17:47:59 2026 GMT
Not After : Feb 25 17:47:59 2026 GMT
Subject: CN=6995fb50-6bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:42:30:63:93:d8:bb:99:14:97:37:33:49:
29:aa:b0:f7:c5:71:6a:74:76:25:77:55:ce:81:4d:
11:76:47:0a:b0:9c:5d:3f:46:5b:e6:e9:b9:3f:99:
3d:77:8c:b9:d8:bd:f5:63:29:d4:9e:ee:15:ae:41:
40:86:8a:ec:7e:5d:54:3c:d5:e7:89:07:8c:aa:ca:
f4:3a:6c:69:1c:23:31:cd:2f:81:b2:9e:15:0a:08:
2e:94:50:12:99:f0:e3:2d:8a:5f:8f:6f:b8:a2:ad:
6e:e9:05:44:e0:50:e0:5e:cc:f2:75:95:ac:7a:a0:
af:b4:4e:11:85:b1:97:a4:9a:a0:97:5b:50:54:3b:
cd:70:6a:c5:53:03:c2:2a:a2:50:27:6e:e8:a6:48:
39:7a:69:16:cc:1f:8d:0f:07:14:89:83:34:b2:28:
76:8a:44:8c:ba:84:07:a9:42:ab:2a:e1:26:73:4a:
cd:7e:67:01:37:e5:bb:07:e0:9c:c5:ae:7d:df:05:
4e:4c:a4:8c:e3:b4:ad:bd:40:00:17:c0:b0:7d:96:
2b:17:ab:74:72:14:b5:27:fe:b6:95:75:28:4a:db:
51:8a:d2:28:75:4e:e6:79:6b:5d:38:02:22:13:52:
c1:1c:aa:51:c9:be:45:20:41:fb:9b:a0:d0:08:84:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:45:DF:CF:47:30:EE:B0:D9:E3:41:EF:9B:34:B6:61:A7:0E:C3
X509v3 Authority Key Identifier:
keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:fa:65:24:33:19:c0:69:d1:af:30:c9:2a:6f:54:e0:13:
00:59:b8:36:72:af:8d:ba:a3:8a:b1:c2:7a:5c:1d:ca:1f:b6:
f9:3e:92:fd:33:a2:e0:0c:e0:8e:03:d2:e1:14:7d:25:2d:de:
64:c0:6b:d2:42:56:60:7e:f9:d4:d8:9c:5d:44:02:ef:57:53:
30:f5:bd:3d:90:a0:dd:21:07:cc:52:44:85:05:f5:0f:36:eb:
f6:82:d5:c8:f1:a3:0a:5e:8a:ce:19:1b:08:1e:c8:75:f3:86:
44:6b:bd:17:86:02:0b:84:a1:04:24:c0:ef:52:49:c0:cb:80:
d3:55:1c:f7:06:37:54:4b:dd:c2:fd:ff:96:ff:f4:04:50:56:
37:ce:df:30:c8:f6:4c:a3:bd:4f:b3:f4:da:1d:88:1f:3b:b4:
4f:bd:d7:c0:62:e3:80:31:9d:06:6e:8a:8e:89:ae:7a:09:87:
87:cd:cb:54:85:1b:a3:9e:92:c1:d3:6b:2e:a4:97:b2:dd:83:
9a:b8:58:38:83:76:e8:b0:ae:60:dc:cc:49:04:5c:5f:ac:92:
bd:15:57:79:5c:b2:16:7a:c2:6f:f0:c0:d1:11:34:76:a2:ef:
c0:af:8d:cb:3e:58:81:b1:b4:97:ec:55:7b:95:10:83:d8:ee:
b7:85:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:54:38 2026 by rpki-client