
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier: cEipiQmXjkM0QntS8UM1ksYjT1InXld+LkpKWrbgxx8=
Subject key identifier: D9:F3:A8:13:C4:53:31:E9:FF:8D:0B:FE:2E:0A:A7:A9:90:96:F1:51
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number: 4A
Signing time: Thu 19 Feb 2026 06:35:08 +0000
Manifest this update: Thu 19 Feb 2026 06:35:07 +0000
Manifest next update: Thu 26 Feb 2026 06:35:07 +0000
Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: hbi3ft10OOalMyHp3nwa2xv7dKTS/vkBTIfwgxdHO7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Feb 19 06:35:07 2026 GMT
Not After : Feb 26 06:35:07 2026 GMT
Subject: CN=6996af1c-707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:94:28:43:06:9e:37:b4:28:e6:18:08:c4:
f9:b2:78:62:04:80:42:47:5a:d9:88:67:d1:4b:41:
8d:af:1c:ec:12:b9:7c:b2:3a:04:1e:6a:c3:2b:f5:
fb:a4:57:e2:8d:47:b0:9c:6a:7c:53:23:e5:3b:ee:
e0:07:18:c2:ee:77:fa:71:a6:14:9c:ed:ec:70:d0:
01:53:88:28:be:13:bb:95:87:3e:0d:bb:6e:da:2a:
f9:1e:55:da:9c:70:b2:8c:b3:e1:a6:1c:45:55:0e:
9e:c1:a3:7a:f7:84:c0:6d:fe:5b:15:15:1b:27:ef:
fc:57:a4:36:13:68:ad:2e:0f:bf:4c:56:e1:0c:3e:
58:ca:16:a0:57:18:1b:e8:be:1c:80:19:4d:92:31:
f5:f6:ec:03:cc:94:fe:ed:47:d2:bf:99:83:88:d2:
6b:e1:c6:9a:31:c7:fb:d4:c7:7b:f0:f5:89:15:34:
c3:4d:41:bd:29:6d:5e:cc:a9:93:39:80:57:f1:a5:
2e:fa:af:d9:9a:96:de:c8:2d:44:ab:0a:4e:60:b1:
85:a6:59:09:34:32:62:28:10:34:1b:1a:1f:8d:b0:
16:51:dc:7a:e5:27:14:9d:49:6e:9d:ef:91:d5:e4:
85:cb:2a:83:b4:a4:d8:ba:30:44:29:66:40:3c:5c:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:A8:13:C4:53:31:E9:FF:8D:0B:FE:2E:0A:A7:A9:90:96:F1:51
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:27:4b:92:74:67:ce:b3:d8:44:e3:21:2a:9b:c4:a7:47:0f:
a0:5a:d9:b3:be:c2:39:45:81:ce:ec:a4:eb:f8:2f:08:cf:18:
df:06:be:ff:e7:8e:fa:52:01:2b:ca:de:70:6d:a5:bd:a0:1a:
74:07:44:7b:5d:b5:64:f4:56:d4:c3:91:8a:a0:31:6d:26:c7:
31:ef:0c:e4:92:2f:fd:4d:1a:30:e3:16:cb:05:71:cd:ff:44:
e6:95:71:6d:fd:f4:a6:cd:7f:29:bf:77:2c:40:81:4e:68:d9:
67:3a:31:23:8a:e1:27:b7:97:dd:58:d9:a0:86:8f:75:05:8d:
31:a1:e2:ef:28:19:de:52:97:f1:59:92:f2:56:b9:3d:56:6d:
4a:5b:ce:80:62:7a:cd:82:70:d0:94:97:c8:2a:0a:8b:df:ad:
3b:9f:12:fb:97:18:02:8f:eb:17:6f:2d:6b:37:8f:ed:d6:f4:
30:3e:d5:2d:3a:77:c4:2a:c1:d4:f2:1d:43:5e:ea:8d:dd:d9:
3c:e7:2a:1a:f1:c3:13:81:ca:c9:b4:e6:76:42:d0:f5:38:ee:
29:89:05:cc:a6:6b:69:4c:87:ca:8c:11:0b:94:6d:e2:86:33:
ed:53:be:db:05:7f:30:00:48:e8:fd:79:cc:ac:82:9b:fd:88:
f9:9f:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:59 2026 by rpki-client