
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier: ptPYl+SeyfaXsEEJihXPC05RAD3j+5TCwfEZEtJYQFI=
Subject key identifier: 33:39:B2:3D:AE:F9:79:C5:C7:BF:FC:3B:71:7F:BB:93:0C:9F:4B:95
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number: 4D
Signing time: Thu 19 Feb 2026 06:31:57 +0000
Manifest this update: Thu 19 Feb 2026 06:31:57 +0000
Manifest next update: Thu 26 Feb 2026 06:31:57 +0000
Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: bgwltrZhIKuPEQZgjLpTl+QivZf7QFzPSx5/fD5Ey/k=)
2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: 3U7vBnQl/Kdt2pXpdCyuzs/qAnaveVs4aYr8QCEMg6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Validity
Not Before: Feb 19 06:31:57 2026 GMT
Not After : Feb 26 06:31:57 2026 GMT
Subject: CN=6996ae5d-8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:54:d6:3d:1b:f7:dc:a7:bf:88:a5:26:e4:
d7:80:f3:46:91:17:88:90:25:98:63:d1:5f:9e:dc:
1c:c2:a0:a7:cb:2a:60:ae:27:fc:25:ca:c0:a0:6b:
b6:06:81:68:db:db:d2:c6:5f:b2:cb:e3:83:02:23:
67:a4:a7:11:8a:54:81:d1:df:ee:24:28:f5:5e:81:
5e:53:09:5d:81:16:40:22:de:b7:8a:75:e7:eb:42:
d5:13:2a:39:6c:89:02:8e:17:8f:95:e4:d1:34:03:
f2:b9:df:0d:ad:bc:87:f3:5a:c5:e2:20:e5:85:1b:
82:97:0e:56:3e:8d:dc:77:17:0f:0f:92:3e:24:0e:
e0:fc:27:83:a5:99:2b:50:ea:88:06:ec:68:65:bc:
92:7a:a8:0d:21:dd:18:f9:0e:f6:d4:d0:13:aa:a0:
c3:48:0e:76:2d:79:a1:6f:f6:87:79:d9:c2:1d:ea:
8f:2d:ea:49:57:b4:a1:89:77:8e:19:ab:a6:6e:29:
ec:33:d6:4e:3a:85:05:73:25:a3:c8:36:84:62:72:
aa:fc:6e:79:62:22:92:e6:e6:9b:ad:ee:c9:96:d0:
96:cf:86:23:e6:a8:a3:cb:c3:7b:2e:9d:c6:77:79:
11:59:6c:68:6f:33:1d:4d:55:f6:92:d4:30:31:e0:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:B2:3D:AE:F9:79:C5:C7:BF:FC:3B:71:7F:BB:93:0C:9F:4B:95
X509v3 Authority Key Identifier:
keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:36:1d:94:b5:ab:42:9c:ec:a3:44:46:00:a9:72:06:7c:
e8:14:13:86:47:1b:35:cb:ab:bb:5a:4a:3c:5b:c0:d4:55:1b:
f6:86:5e:f0:6e:45:ac:80:82:bf:db:b1:cb:4a:c8:32:61:63:
31:d1:93:06:52:6c:7b:00:2d:0b:2d:4d:90:cf:51:30:27:3b:
1d:5b:b1:9e:f5:6c:9a:3f:cf:51:ec:6b:5b:08:55:e8:24:de:
28:3f:f4:e5:74:63:f5:e0:22:ec:36:60:c2:93:77:58:6f:d2:
25:61:a6:e5:ee:69:5f:fb:bd:33:0d:3d:64:9b:4d:3a:cc:f2:
d7:a9:5e:7b:47:d5:5e:07:6e:cc:c7:ff:dc:35:48:2a:77:f5:
f3:5a:8b:c4:30:2c:52:95:be:4e:44:e5:d5:2e:c6:89:c2:ed:
1f:bd:23:fc:37:2c:b7:07:11:4c:66:44:20:41:42:d4:24:e9:
3d:cd:56:2a:69:f4:99:a7:a8:51:24:c6:02:40:40:21:28:76:
49:5f:b8:c1:74:5d:f8:b1:97:4e:00:27:0f:60:1c:e5:b5:f3:
5f:d4:79:be:eb:3d:35:00:9d:f4:2e:9e:2f:18:92:02:e3:61:
91:17:ec:62:37:f9:99:16:fc:1d:fc:ad:e1:fe:e7:f9:f5:3e:
d7:27:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:42 2026 by rpki-client